
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C71CB66859DD11F198D1697B8E833773.roa
File: C71CB66859DD11F198D1697B8E833773.roa (raw, json)
Hash identifier: 3malQMISPjWIwYw4hxd24k/Zp3yjCkNj1BtHG+qYCj8=
Subject key identifier: 06:3A:C4:DD:0E:11:23:33:C3:12:83:D8:62:D5:76:98:56:1B:DA:9E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F3C5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C71CB66859DD11F198D1697B8E833773.roa
Signing time: Mon 06 Jul 2026 17:19:28 +0000
ROA not before: Mon 06 Jul 2026 17:19:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142476
IP address blocks: 103.170.194.0/23 maxlen: 24
2001:df2:a840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62405 (0xf3c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be39f-fa14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:0d:b2:0f:4a:25:2b:b7:b9:77:9e:49:c4:
1a:35:cd:51:29:45:97:0f:f7:84:ee:ca:f8:77:cf:
05:7a:43:eb:ca:45:1c:57:ad:d4:37:f2:2e:16:ff:
a4:2b:b8:80:31:06:b9:78:18:88:cc:32:ec:e7:dd:
61:b3:0f:96:98:83:7b:a5:6c:48:12:9f:29:58:db:
23:3d:32:4b:5a:00:5b:f1:0d:6f:72:42:45:4a:90:
49:b4:af:7c:8a:34:86:e1:52:68:5a:91:0b:4e:a2:
b4:f4:18:7e:a2:55:2b:a6:fb:e4:f4:30:f7:10:e9:
2e:fa:41:ca:d9:d3:7c:6d:e0:bb:19:4a:77:de:34:
0c:12:b3:2d:06:a9:b2:32:ad:23:b8:da:75:85:c5:
30:de:9d:53:bd:31:d6:64:52:68:fb:ae:3a:d4:92:
b6:b2:44:8b:b2:a5:f1:c8:9f:f7:2a:96:64:1d:ed:
5c:17:eb:6b:6f:c3:e1:d6:f8:5b:be:fa:09:fb:6d:
e4:f9:5a:95:a1:08:69:97:6e:33:0c:14:02:e7:c7:
f5:d4:78:3e:af:6a:62:5b:40:e5:bc:fa:a1:e3:e9:
60:16:98:85:f4:d2:31:b5:ff:9e:ac:e9:2d:6c:4b:
da:29:62:01:50:4c:87:7d:bd:7d:79:f6:dd:8a:7f:
4a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3A:C4:DD:0E:11:23:33:C3:12:83:D8:62:D5:76:98:56:1B:DA:9E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C71CB66859DD11F198D1697B8E833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.170.194.0/23
IPv6:
2001:df2:a840::/48
Signature Algorithm: sha256WithRSAEncryption
4d:43:3e:bf:a0:91:66:bf:b9:ca:3b:86:07:07:9c:02:ce:57:
ea:0d:cb:26:dd:56:d2:cf:fb:cc:fb:35:d3:ce:ee:e9:d2:93:
a5:cb:fa:ea:17:58:5f:e6:2c:c0:38:33:d6:bf:0c:99:3f:3f:
99:d6:f5:ff:58:65:91:06:05:ed:81:2e:b9:6a:37:0c:2c:4f:
1a:52:e9:3a:52:0f:fa:6c:35:eb:dc:50:ea:ce:2b:e2:30:c1:
24:8c:5d:6d:94:11:dd:8f:1b:28:c1:a1:62:ca:58:f1:cd:ce:
93:78:00:f3:a9:4a:d9:b8:20:e4:d1:21:a9:8c:84:f4:c6:1d:
16:e2:50:2c:d6:61:40:9b:73:e6:bb:ea:f7:63:80:42:df:20:
5c:99:80:4d:9b:2c:d1:71:0a:7a:67:0c:a8:8b:2a:dd:a6:7d:
cf:ad:54:1a:aa:e8:79:28:78:af:cd:51:bf:41:45:1f:79:f3:
33:de:4f:6b:2b:49:b2:24:3b:20:58:bf:32:e0:77:bb:35:fc:
47:03:b2:4f:28:09:b1:6f:25:e1:3b:fd:19:6a:5b:2a:6a:89:
4e:f5:d7:2f:93:ac:c8:56:b4:0c:9a:31:8f:11:bf:7f:7a:6a:
a7:fa:23:f0:66:8b:6a:06:93:d2:f8:d3:77:f1:b8:1f:8f:6a:
e4:03:a8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:57:09 2026 by rpki-client