
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CADAF78636B511EEB24C0246C4F9AE02.roa
File: CADAF78636B511EEB24C0246C4F9AE02.roa (raw, json)
Hash identifier: nv5+7k2ghOuZC0aB684F+002OOcVTyKS3KBJnLHJMBo=
Subject key identifier: D7:FA:6E:C3:91:30:25:51:E5:0E:FC:C2:F3:4D:35:04:4A:85:BC:EA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F1CA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CADAF78636B511EEB24C0246C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:02:32 +0000
ROA not before: Mon 06 Jul 2026 17:02:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138247
IP address blocks: 103.127.160.0/24 maxlen: 24
2001:df7:6d00::/49 maxlen: 49
2001:df7:6d00:8000::/49 maxlen: 49
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61898 (0xf1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:02:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdfa8-34b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:44:a2:27:6e:ae:a4:14:0d:0a:11:3e:c4:
ac:2f:2f:5c:1b:f8:52:2c:ab:10:c5:d3:be:22:ec:
af:85:c6:e2:6b:06:ac:a3:bb:a5:69:a7:30:e2:5f:
ec:fe:cc:59:c1:2b:aa:43:d1:69:db:cf:83:0e:33:
9e:c5:d3:39:0c:ff:db:8f:16:e1:4c:a2:74:c6:05:
fa:e3:c4:49:86:26:d6:f3:1a:dc:b1:14:59:8b:7a:
36:0e:37:b0:ef:21:20:f9:cd:56:f0:0b:d2:4a:83:
01:63:21:ba:d7:83:af:49:88:22:b2:59:8a:c7:c2:
a2:8e:b0:43:4f:4b:42:a1:7b:a3:d2:71:ac:47:f2:
43:da:a9:d1:d0:dd:5a:4a:35:f9:fb:94:cb:73:ec:
3c:e4:85:f6:bb:65:d2:2c:c7:1d:eb:39:e7:4a:ce:
59:13:0f:9f:78:d1:9a:71:be:da:a2:cf:00:f6:3b:
d8:79:9a:24:88:cb:e9:1e:30:a8:2f:35:1f:5b:ef:
59:b5:e4:5d:6d:6c:62:f7:2c:29:c0:83:36:61:4c:
2c:aa:7b:e1:b8:85:17:db:b0:6f:04:64:15:a3:63:
bb:de:41:01:d1:57:ec:7c:38:3b:60:bc:53:6a:58:
96:6a:6d:ec:94:45:db:17:3b:50:b5:29:95:a9:b7:
da:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FA:6E:C3:91:30:25:51:E5:0E:FC:C2:F3:4D:35:04:4A:85:BC:EA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CADAF78636B511EEB24C0246C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.127.160.0/24
IPv6:
2001:df7:6d00::/48
Signature Algorithm: sha256WithRSAEncryption
88:a4:8e:29:cf:c6:1b:4d:75:ec:44:7d:13:48:60:24:77:1b:
c2:c7:19:25:55:3f:a2:be:5c:10:32:58:e2:02:c4:e3:f7:3e:
b3:e9:5b:99:bf:68:a7:90:23:87:91:55:84:29:85:bb:24:c7:
7f:fd:5c:43:cc:ed:6f:21:18:76:1e:07:ef:5e:fa:d7:58:de:
f1:e6:3b:52:24:d5:e4:63:cb:d7:f1:51:ec:d7:ce:5f:2d:a8:
56:25:a2:4d:14:90:9d:32:65:69:64:8b:1b:1d:e0:a4:dc:ef:
09:ad:6c:65:33:3b:32:21:37:37:f4:4c:92:96:08:9f:77:cc:
79:bc:64:d1:8b:85:e7:90:09:d7:9f:84:26:c2:75:d8:81:10:
14:c3:ad:35:0a:e9:96:1b:c8:fa:d8:40:d0:8c:11:63:ea:d3:
59:9a:fd:8d:9b:03:24:a4:4c:1a:22:5b:04:14:0d:e5:6d:5f:
84:97:2b:56:82:85:73:af:db:1a:2c:89:72:e3:15:44:b1:7c:
ed:a0:41:9e:c9:7f:bd:39:f8:f8:99:0b:e2:68:01:36:33:00:
42:8b:1e:b3:e0:81:e9:9f:68:cf:7a:17:57:1c:98:84:cb:f4:
25:e0:fd:c5:8f:4d:27:44:0e:db:33:55:f9:fd:39:60:9d:f5:
45:24:f5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:45 2026 by rpki-client