
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7E31BC23D8A11EE9B2AB56CC4F9AE02.roa
File: C7E31BC23D8A11EE9B2AB56CC4F9AE02.roa (raw, json)
Hash identifier: VtnPoiI0ljvAYj5AQWnjROTL3OKs+HBSMjSZQF3MKQg=
Subject key identifier: 7B:D9:C2:92:05:58:5C:69:27:7C:A2:8E:5D:95:47:06:5E:3D:60:33
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F519
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7E31BC23D8A11EE9B2AB56CC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:30:40 +0000
ROA not before: Mon 06 Jul 2026 17:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149622
IP address blocks: 103.243.229.0/24 maxlen: 24
103.250.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62745 (0xf519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be63f-a27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4b:93:b2:7a:08:dd:58:5f:6b:15:3d:80:5d:
83:a6:1f:f0:be:43:25:78:ed:d0:b2:07:5a:ae:64:
5a:8f:28:1c:be:76:7d:fc:ca:94:7a:33:58:c9:fd:
e0:22:58:c5:00:96:57:26:b2:fe:d3:b2:08:65:e7:
d4:a7:cd:41:84:42:66:68:5b:8c:be:d9:67:54:45:
97:12:7a:3b:d1:24:55:15:7d:de:1e:2b:0e:30:66:
1c:36:95:48:77:8a:0e:56:4a:1c:81:fd:5e:13:8e:
9f:b5:fc:ef:69:61:d9:17:0e:4d:6a:5a:b5:6f:88:
59:2c:96:f2:70:08:4e:9b:41:a4:5c:a6:4d:c6:a4:
51:d1:a2:3b:c6:aa:1b:10:0d:90:2a:97:3a:1d:cf:
0c:27:c8:5f:00:73:21:3d:5d:96:20:51:8a:a1:af:
a6:2d:80:e5:31:c2:ad:a9:86:9c:86:3a:b3:7c:01:
c8:67:32:6b:aa:86:81:37:2c:f5:9c:97:2c:00:48:
87:3e:e3:39:d0:98:88:71:48:f6:bf:80:14:9f:97:
37:24:79:33:25:f4:be:70:6c:2c:00:f4:c7:85:c9:
03:ad:cb:89:9d:20:59:0f:05:a5:12:bb:9f:2a:11:
b2:9e:7e:0b:af:e5:28:11:8f:40:bd:d5:48:e9:31:
f5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D9:C2:92:05:58:5C:69:27:7C:A2:8E:5D:95:47:06:5E:3D:60:33
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7E31BC23D8A11EE9B2AB56CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.243.229.0/24
103.250.97.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b2:36:fd:ab:16:82:93:2f:3e:78:c3:95:50:f4:0e:a2:51:
40:e6:84:e1:83:94:b9:7e:65:04:0e:d9:11:af:9e:bf:d9:63:
9a:11:ae:f8:22:b1:81:5b:3b:0e:d8:a3:d6:a3:7c:8b:0c:39:
ae:17:19:6d:1b:bf:d6:9f:37:ef:29:bb:b0:d4:ce:f6:e1:38:
d1:22:e3:a4:e7:eb:96:1f:ac:3d:73:7e:26:12:20:2d:91:62:
ed:c5:82:29:69:8e:36:2a:f7:d7:02:64:3b:2c:83:60:62:ff:
9b:2c:2c:6f:d4:7a:80:a2:0c:01:21:21:7c:df:49:5a:5b:89:
d4:b5:27:df:2e:d4:46:24:8d:3b:58:6d:be:a8:e7:a1:0d:72:
9c:2a:00:cd:3f:e4:2f:98:a1:64:ac:9e:fc:f7:56:5a:ef:76:
69:48:7a:92:20:d2:f0:a1:0b:9b:e8:25:d2:db:63:48:de:2d:
16:f2:7d:2f:7f:27:0d:db:25:be:42:8c:d7:34:af:26:88:b2:
b4:5d:66:9f:b0:cb:58:8b:27:e9:f2:e8:b5:80:79:f7:24:1d:
e3:bc:89:36:4e:a1:f3:3c:c0:aa:ef:a9:8c:df:c3:01:57:ef:
d9:b0:88:02:4f:d0:34:7b:44:2c:12:30:23:44:cb:ca:2a:0d:
8e:d6:b0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:47 2026 by rpki-client