
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C5A71CAA733611EE97680E2EC4F9AE02.roa
File: C5A71CAA733611EE97680E2EC4F9AE02.roa (raw, json)
Hash identifier: /hNdRFMNI2j5GzvfXMJRNoRJG+PMoenifpOhEoy+mc8=
Subject key identifier: 86:9C:6D:68:1C:F2:0C:78:26:1E:91:4D:A9:A2:1D:CA:6F:73:2C:8E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F602
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C5A71CAA733611EE97680E2EC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:38:16 +0000
ROA not before: Mon 06 Jul 2026 17:38:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151686
IP address blocks: 103.90.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62978 (0xf602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:38:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be808-97fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:5c:48:c5:84:15:af:cb:3d:54:e0:c3:3d:
72:df:74:64:c8:9c:95:b1:be:83:1e:ed:3e:7c:3b:
b8:6b:2f:4a:35:9f:9a:6b:2f:b4:f4:82:14:4e:03:
24:44:ea:d6:f7:bd:74:a2:98:05:cd:55:67:65:9f:
46:73:21:4e:a9:53:8e:bf:81:6f:2e:97:81:eb:cd:
dd:1a:d8:68:48:c9:8f:e0:b4:ee:ef:db:6e:17:f1:
dc:93:f2:1b:a5:24:e4:96:28:4e:ce:6b:a4:95:8f:
0c:4f:06:ac:83:0d:d6:cb:13:ca:a0:61:70:d7:d5:
c1:b8:c4:ec:5c:c0:0d:6c:00:a4:7d:be:17:5d:7e:
40:77:08:d8:8f:95:16:8a:a3:f9:87:df:37:30:34:
c4:e8:6f:47:2d:ff:22:76:8d:1b:a6:30:b5:0f:3f:
ff:bc:a8:da:4b:26:c9:24:94:cd:90:89:82:a9:52:
d0:a4:48:7e:a7:31:5d:03:59:99:f9:0a:0f:02:07:
92:d1:7b:de:6c:a2:9e:eb:71:71:33:09:7f:64:1c:
26:db:0a:2c:12:7f:6f:ff:29:d6:60:dd:07:e1:d7:
d8:6d:76:41:4d:9e:71:cd:8d:b9:7b:8b:57:d4:98:
f1:98:28:5d:de:df:80:80:af:6d:cf:dd:11:36:02:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9C:6D:68:1C:F2:0C:78:26:1E:91:4D:A9:A2:1D:CA:6F:73:2C:8E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C5A71CAA733611EE97680E2EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.90.38.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:ca:9e:e2:74:49:e5:b3:e8:93:a5:80:c4:9a:6a:64:ca:8e:
8c:78:14:d6:65:29:fb:a0:94:83:9a:86:e6:40:fe:8e:b9:62:
b0:a8:4f:37:6c:7b:97:3e:19:57:86:bc:6a:96:26:51:e5:d3:
61:cd:38:7c:82:d8:f4:42:2e:04:7d:04:a6:01:44:4e:8b:2e:
1b:91:dd:b2:69:4b:74:c7:09:a6:3b:ec:0a:37:b1:83:ae:62:
5e:0c:be:67:04:b2:9c:16:1f:85:d0:b4:99:0d:a0:28:ea:03:
65:2a:3c:e2:c0:72:6e:fb:56:7b:f9:2f:5e:71:5d:fe:19:93:
36:b1:24:61:21:29:fc:9a:d1:b7:08:a1:17:64:91:f3:3e:c9:
db:8a:08:63:af:ae:10:83:bb:55:44:46:7e:a1:75:35:e8:f7:
9f:69:4e:f1:39:1a:83:c6:3b:93:71:38:6b:21:d0:c3:46:9c:
96:1e:d6:83:12:40:16:76:bf:b6:f3:53:b3:26:df:3d:3f:9d:
1c:cb:46:c3:ae:04:15:bd:f4:d7:ce:44:bd:dc:39:cc:d0:3a:
60:56:68:fc:ff:46:ef:ec:42:eb:71:1d:2d:79:8a:dc:a0:72:
49:f6:cf:44:73:08:12:a1:a4:98:33:15:3b:c7:58:0b:28:b0:
fb:12:73:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:05 2026 by rpki-client