
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C1BBEED80FDB11ECA834B12AC4F9AE02.roa
File: C1BBEED80FDB11ECA834B12AC4F9AE02.roa (raw, json)
Hash identifier: luApj69k09N9sDNgYg4hQ3ZVJO2oVCfDhOZVFWTaa1E=
Subject key identifier: 5F:5C:4D:E6:13:6B:A6:64:C0:54:A1:A9:89:57:80:D2:DE:AD:78:D0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F3F8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C1BBEED80FDB11ECA834B12AC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:21:10 +0000
ROA not before: Mon 06 Jul 2026 17:21:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146855
IP address blocks: 103.172.173.0/24 maxlen: 24
103.243.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62456 (0xf3f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:21:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be405-84eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:bb:00:87:38:3b:ce:2c:14:17:6c:56:39:
02:de:52:bd:1f:5b:34:5b:85:4f:c7:1c:7b:ec:07:
07:e5:64:3e:60:44:02:2d:85:23:0b:61:6e:5e:bd:
ab:30:84:cc:38:32:e8:97:d8:5a:e8:95:4d:0e:ce:
0b:36:e4:59:3e:fb:28:df:9a:6f:b0:a0:a2:30:8f:
91:38:3d:e8:74:eb:be:82:10:a5:6b:30:ef:f3:9d:
7d:75:fa:b3:73:cd:27:86:08:79:0b:fd:07:79:4e:
e2:81:97:7e:75:ee:cc:b9:fa:15:b4:5e:0a:8b:8d:
ef:7b:c3:53:df:40:2f:20:18:c0:53:bf:71:16:23:
58:17:62:1b:6b:a4:a5:3c:28:3d:24:f4:dc:ea:92:
13:67:51:0d:6a:76:de:e3:62:24:b2:07:6c:04:c2:
b9:6d:27:3f:1d:37:14:54:4b:19:d4:82:6d:87:e0:
7d:ea:f7:e0:87:fe:82:30:c2:c0:0f:65:98:64:0e:
c8:ac:09:52:e0:95:6e:40:de:b3:69:bb:ad:79:95:
17:56:5d:42:22:75:fd:d9:e3:91:22:1b:ec:d0:25:
4a:12:d4:e9:db:cb:b4:c7:f4:26:a3:5f:5c:80:5c:
70:cf:88:e4:81:15:cf:57:37:ae:6e:c4:87:05:3e:
0d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5C:4D:E6:13:6B:A6:64:C0:54:A1:A9:89:57:80:D2:DE:AD:78:D0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C1BBEED80FDB11ECA834B12AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.173.0/24
103.243.228.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:0c:a3:ac:58:db:51:df:8b:95:58:e5:36:df:65:e8:70:7c:
5b:5c:40:a7:af:cd:37:44:45:4f:61:43:84:53:ec:1e:78:fa:
66:77:73:28:07:0a:1e:00:4d:4f:ea:f1:88:fd:90:12:32:7d:
8e:22:b2:fc:a6:f0:d8:32:0d:1a:fe:b9:4c:7d:01:b7:f3:7e:
fb:82:a2:b4:60:42:e6:a7:30:33:20:84:1d:b8:6c:0d:9f:d8:
64:f4:19:e6:9d:6f:f4:b1:8f:44:de:a4:b9:5d:d7:f6:1a:fb:
e8:c2:b6:e8:8c:3c:19:60:60:d2:de:e3:ef:67:63:99:ca:39:
34:cd:09:63:15:9c:18:12:36:cd:e9:bb:7f:fc:b8:4f:05:24:
c7:18:17:e8:bd:77:92:09:07:4c:78:51:2d:6f:76:5b:a3:16:
40:d6:bf:87:3b:a7:3f:a1:ed:ea:ed:f5:d2:23:bd:d7:fd:b7:
aa:62:aa:7e:88:cb:de:3c:4f:d4:53:b1:fc:25:b5:3f:84:45:
45:8d:61:c5:cf:5f:4f:f4:b4:c7:58:fc:f5:bb:9e:48:fc:36:
e8:01:99:1c:b3:58:9b:2a:14:69:e3:c7:31:4b:bb:f3:4d:63:
d2:38:ce:e3:b2:49:b8:78:da:bd:66:49:42:4b:74:cc:26:87:
00:d3:8a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:42 2026 by rpki-client