
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C67219F6D4D111EBBFFECF71C4F9AE02.roa
File: C67219F6D4D111EBBFFECF71C4F9AE02.roa (raw, json)
Hash identifier: U13urmnF5jtzok2zgBcykc8PMlmQzo3p3jqKZPN0RxA=
Subject key identifier: C6:72:8D:14:30:74:AA:98:A8:D5:97:FD:38:56:A6:DE:96:04:D2:23
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F3BE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C67219F6D4D111EBBFFECF71C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:19:15 +0000
ROA not before: Mon 06 Jul 2026 17:19:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142466
IP address blocks: 103.168.222.0/23 maxlen: 24
2001:df6:df80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62398 (0xf3be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:19:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be393-4e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:63:99:96:4b:c1:9e:7a:91:ce:40:42:22:3a:
3e:00:38:fa:21:9b:f5:89:a7:ef:38:32:d0:14:e6:
b8:68:9f:28:70:1f:7d:a5:4d:e4:db:24:bb:fd:6d:
3e:3d:df:d1:bc:ee:31:79:d9:72:e2:8c:cf:93:04:
b3:4a:82:1b:71:39:6c:a6:bd:04:cc:aa:92:4b:6b:
9f:a2:69:43:28:25:c3:83:d5:01:49:76:ba:24:d3:
38:17:79:b7:02:30:5b:8f:5a:98:fb:bd:e5:94:ff:
5c:d0:53:f2:e4:4f:ca:d3:c2:cb:82:03:cd:0f:fe:
17:55:e1:9d:fd:af:ed:b4:e2:ce:77:dd:c4:5a:e3:
71:ef:42:a0:18:47:12:8c:ff:c2:21:80:aa:9d:50:
e8:98:26:2c:52:aa:9a:92:a7:93:3c:a3:7b:bb:3e:
e3:3d:3e:a6:11:ba:c6:b3:62:ca:84:9f:41:f2:3a:
4c:1d:a1:3d:67:48:20:13:8c:27:fe:19:d9:7f:a7:
ce:ba:88:d0:a1:9f:75:58:2d:de:02:91:17:f3:f7:
1e:1d:c7:e5:21:37:87:5e:6a:62:78:23:ef:45:c0:
64:8a:88:35:1a:3c:4f:26:79:ab:5d:41:43:4e:fa:
75:c0:83:5e:bb:6a:23:e6:24:14:36:a8:78:3a:ad:
94:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:72:8D:14:30:74:AA:98:A8:D5:97:FD:38:56:A6:DE:96:04:D2:23
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C67219F6D4D111EBBFFECF71C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.222.0/23
IPv6:
2001:df6:df80::/48
Signature Algorithm: sha256WithRSAEncryption
1d:3d:85:43:00:e8:3b:75:48:d6:b5:d5:7c:e7:ad:97:e6:1d:
eb:ce:3a:26:52:f6:e0:b5:5a:0c:12:6d:ed:af:b8:0b:f2:3b:
a9:08:c5:8c:82:99:4b:b4:60:37:92:23:8e:aa:c9:6f:70:bc:
65:0c:c4:e3:8d:a7:99:7c:66:52:4b:af:d2:92:5d:6f:bb:c8:
2b:57:9a:fe:8f:d6:dc:a0:ff:79:be:da:97:9e:f7:4c:fc:a0:
84:01:5e:6a:38:37:02:1c:73:40:3f:50:a1:6f:e7:d8:7e:53:
7e:e4:4b:2e:f1:eb:7c:4d:1d:84:83:d5:09:c1:a9:a6:d2:d6:
67:f6:11:ba:34:90:1d:20:34:c2:ac:a5:ce:75:c1:18:3a:20:
a3:2c:34:e9:19:c0:74:c8:f5:ee:b3:90:00:24:ff:20:d1:23:
e3:75:31:a8:03:92:cf:0c:e7:cd:46:2a:0f:52:40:08:b8:1d:
68:cd:10:cf:44:52:0c:0d:2c:3f:8e:07:3b:29:2f:d2:9a:4f:
d9:db:40:cd:08:31:4f:32:99:e8:4c:13:e4:7a:ce:3b:3f:34:
af:fa:72:02:1d:16:1b:26:dd:7a:02:99:a9:cd:4e:3c:7d:95:
b6:df:7a:1a:df:25:ab:a9:10:39:4e:3c:9f:a9:b5:0b:76:99:
dd:c0:d6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:49 2026 by rpki-client