
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BF5EC186177711EBB878D12AC4F9AE02.roa
File: BF5EC186177711EBB878D12AC4F9AE02.roa (raw, json)
Hash identifier: kzdLRwqUyJDYjeOUltf+x+yvk1gSO1Jt/rOjWMXANrI=
Subject key identifier: 9D:7D:BB:41:2F:B0:DE:55:60:6F:E1:2D:D4:3E:37:03:E1:25:05:7D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F104
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BF5EC186177711EBB878D12AC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:55:54 +0000
ROA not before: Mon 06 Jul 2026 16:55:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136699
IP address blocks: 103.103.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61700 (0xf104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:55:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bde1a-61a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:42:1c:dd:8f:3c:13:f9:e4:9b:a3:86:0e:
51:e5:a1:2a:e3:79:62:eb:05:94:76:3e:55:d7:d4:
64:85:c9:0b:c2:15:cc:16:aa:34:38:cb:8c:9e:2a:
25:a9:41:74:ec:a6:66:c5:9a:0b:45:89:97:56:b8:
60:c1:a4:05:06:e2:1b:dd:6e:3a:d3:d1:34:ea:f3:
96:76:5a:d1:fd:22:f6:b0:88:e0:01:0f:cd:2f:8a:
27:3c:4e:8f:f2:7c:bf:fc:97:d2:bb:8b:fc:85:18:
7e:90:1d:74:e4:23:79:ba:af:80:d6:22:64:36:c5:
c2:55:4d:d6:2c:d2:2b:3d:a6:ad:65:85:d4:84:78:
d2:ae:eb:ec:d7:ca:ce:06:b4:58:3f:9e:f0:48:24:
ff:4b:a9:d0:a9:6b:6a:21:28:d5:37:45:a6:ea:2d:
ee:34:57:d0:2e:2d:87:31:1b:19:b9:08:39:4b:d9:
78:a6:1c:8b:2b:c4:e1:b0:99:09:bc:cc:33:bd:ff:
b3:e8:0d:54:ba:2d:73:45:fd:fa:cf:bd:90:9c:0e:
a5:47:14:93:ee:bd:a6:23:52:f6:d1:1f:cb:2b:ec:
d7:92:54:af:78:1e:f9:ce:77:1c:b2:3b:b6:38:22:
d2:f9:de:08:50:03:26:99:fe:59:19:43:af:a1:6d:
5f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7D:BB:41:2F:B0:DE:55:60:6F:E1:2D:D4:3E:37:03:E1:25:05:7D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BF5EC186177711EBB878D12AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.103.2.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:04:9f:b1:24:e8:cd:88:7f:e0:3a:c7:9b:3e:3e:62:be:42:
85:b0:5e:85:55:5f:11:8b:38:75:f7:2c:1a:ce:fd:6b:74:6b:
be:dc:16:3b:18:23:55:84:b7:21:8e:5c:1b:44:46:5c:76:72:
d6:7c:54:0f:6f:5c:c2:55:ff:ae:c9:2e:0e:36:02:25:b4:93:
8c:ed:1f:81:1d:77:48:e2:42:63:3d:23:13:d1:54:22:7d:23:
4a:1c:ef:9f:0b:8e:5b:be:f2:d9:6b:85:d8:e8:aa:e6:ea:f4:
d6:c3:e6:84:12:31:34:a7:c9:3b:a9:75:3d:83:0c:e4:64:1e:
ea:ff:de:c2:cc:9f:88:fa:14:16:bf:c2:c7:52:c3:4f:39:e6:
75:36:95:90:05:2a:e4:9c:1d:cb:90:28:60:23:7a:42:0b:24:
17:33:95:ee:4b:86:ae:23:35:ee:89:4b:da:f6:d1:39:ed:30:
35:cf:11:e1:7c:b8:e0:73:5f:8e:e4:e1:0f:5b:41:1c:7c:88:
25:6d:07:e9:05:b1:68:22:30:a7:d8:9e:46:73:57:49:c7:c6:
e7:ca:9b:5d:cd:c1:34:fb:d9:99:d9:00:bf:4d:f6:6c:af:9e:
3d:21:2e:6a:d3:44:99:b2:d1:19:cd:53:b0:50:7c:9e:4a:7e:
70:55:ab:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:58:10 2026 by rpki-client