
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7931B408F0311F187185ABA6C11F970.roa
File: C7931B408F0311F187185ABA6C11F970.roa (raw, json)
Hash identifier: y6KQZyrD1itYBTLw4be7ldFpP26gSyuCMjmo3qhvXaw=
Subject key identifier: EA:72:1F:5A:FC:2A:7C:47:29:5E:BF:95:33:D8:99:4A:49:2C:C0:9A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FA2C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7931B408F0311F187185ABA6C11F970.roa
Signing time: Mon 03 Aug 2026 06:23:02 +0000
ROA not before: Mon 03 Aug 2026 06:23:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150596
IP address blocks: 45.123.9.0/24 maxlen: 24
45.123.11.0/24 maxlen: 24
103.38.200.0/24 maxlen: 24
103.38.201.0/24 maxlen: 24
103.77.42.0/24 maxlen: 24
103.77.43.0/24 maxlen: 24
103.83.145.0/24 maxlen: 24
103.110.16.0/22 maxlen: 22
103.110.16.0/24 maxlen: 24
103.110.17.0/24 maxlen: 24
103.110.18.0/24 maxlen: 24
103.110.19.0/24 maxlen: 24
103.110.180.0/23 maxlen: 24
103.134.114.0/24 maxlen: 24
103.141.91.0/24 maxlen: 24
103.168.177.0/24 maxlen: 24
103.176.176.0/24 maxlen: 24
103.188.127.0/24 maxlen: 24
2400:e9a0::/34 maxlen: 34
2400:e9a0:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64044 (0xfa2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 3 06:23:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a7033c6-6daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:ba:1e:92:4e:01:6e:cb:f6:60:9c:e1:4c:
4d:1a:09:b1:1a:3c:89:53:c0:29:7a:bf:12:8c:0c:
1f:f0:02:1b:9c:34:92:4d:0b:52:93:fa:cc:6b:c8:
e6:39:39:5c:d9:e8:e4:6a:0a:49:be:31:47:57:aa:
fe:f5:b0:d5:68:b9:2c:ee:ec:71:7c:93:b2:6a:d8:
20:55:ea:dd:9f:0b:80:ce:3d:f7:8b:cf:88:0a:ed:
d5:16:28:2b:1c:fb:e7:a6:79:c4:90:0a:83:fd:09:
73:4d:75:9c:ff:82:3b:72:7d:11:96:01:f9:95:4d:
94:7e:80:95:62:5a:80:77:c4:8e:cd:e1:fa:be:08:
39:27:77:e1:f3:bb:75:b7:ad:18:dd:10:c8:ba:ed:
90:e4:6f:77:b1:55:da:bb:cb:56:cb:fa:61:c6:9c:
05:72:53:08:40:30:98:b2:e1:b1:87:0c:8d:41:8f:
f7:75:4a:7a:89:ed:0d:9e:a5:ea:35:e2:55:34:95:
70:a7:fc:e1:d2:04:ba:97:7b:4c:2f:fc:c2:e2:af:
8f:7a:a3:ba:0f:e3:56:99:2a:2c:d1:92:67:e1:9c:
64:0a:d8:5a:7a:9b:e6:1f:04:e1:31:9d:5b:4a:ac:
2b:bf:73:e8:74:9a:be:bf:31:d7:78:f3:64:d2:96:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:72:1F:5A:FC:2A:7C:47:29:5E:BF:95:33:D8:99:4A:49:2C:C0:9A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7931B408F0311F187185ABA6C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
45.123.9.0/24
45.123.11.0/24
103.38.200.0/23
103.77.42.0/23
103.83.145.0/24
103.110.16.0/22
103.110.180.0/23
103.134.114.0/24
103.141.91.0/24
103.168.177.0/24
103.176.176.0/24
103.188.127.0/24
IPv6:
2400:e9a0::/33
Signature Algorithm: sha256WithRSAEncryption
17:a8:e7:92:2c:22:d2:e7:e2:58:b5:27:ca:0f:2a:e8:ca:b1:
49:5a:9e:16:3d:8a:b7:d8:df:3b:b0:ec:27:b5:67:d5:4e:bb:
17:59:9a:ec:6b:04:93:a0:29:e2:1b:af:a3:92:2f:fb:76:27:
0e:35:09:4c:23:79:96:d3:ae:5d:4d:7b:9c:31:0a:36:09:47:
54:19:a5:fa:15:9f:ed:46:59:ef:73:bb:10:df:1a:e0:28:9e:
e8:14:7f:d0:ad:4c:c5:e7:67:4e:20:b4:24:7f:49:08:07:50:
c8:42:5d:89:1d:80:af:57:c8:d6:14:2e:69:63:d0:9b:cf:d4:
8d:eb:0b:55:11:1a:29:b7:b8:e8:93:2a:ec:99:e0:c7:21:e4:
f4:4e:32:c5:35:60:a5:02:d2:7b:81:30:42:e3:40:af:b8:52:
5c:b2:8e:46:41:28:5a:b4:46:35:c5:3f:f7:8e:6c:d7:a4:0a:
1c:e1:0a:bb:8f:6b:88:72:47:4b:b8:11:04:59:09:fe:8c:c5:
c9:a8:78:61:0b:ee:d0:1a:36:65:19:5c:45:9c:c0:d3:f8:8f:
08:a7:e3:71:57:5a:02:c9:d4:82:b8:99:4c:01:86:b4:10:b9:
f0:24:90:75:5e:00:60:cf:af:cf:e1:16:82:69:59:07:27:70:
30:b1:61:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:22 2026 by rpki-client