
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE68E3FE803B11ECA8F12731C4F9AE02.roa
File: CE68E3FE803B11ECA8F12731C4F9AE02.roa (raw, json)
Hash identifier: APhzcjMlgW+g990uUkBAuXqK/pZaY6aiD6/vb1d1wMw=
Subject key identifier: 36:8B:E9:F0:83:11:1A:74:43:5F:A4:10:D9:9E:4B:2C:00:40:00:5D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F378
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE68E3FE803B11ECA8F12731C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:16:53 +0000
ROA not before: Mon 06 Jul 2026 17:16:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141820
IP address blocks: 103.164.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62328 (0xf378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:16:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be304-869c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:8c:75:5d:17:d6:28:77:98:4e:1c:14:94:
86:25:3f:2c:93:78:52:83:a3:ec:2d:dd:18:85:20:
3d:ad:11:29:46:21:ab:fa:c8:04:0d:d9:ee:e2:12:
11:30:f2:ea:7b:bc:61:e4:9a:9f:6b:93:a1:b1:50:
26:11:73:e5:f8:aa:c9:a1:7b:92:e3:b7:9d:2c:07:
62:26:69:dc:ff:97:82:88:07:79:ef:85:32:52:5b:
1d:d8:21:c6:04:94:fb:81:96:bf:81:ef:c0:6f:a9:
b1:2e:51:87:44:97:29:8f:5d:a1:21:2e:bb:ef:95:
10:4a:e9:88:21:9e:7b:37:75:fc:ab:82:7b:0a:64:
40:59:8e:d4:11:f6:ba:23:35:e9:65:b2:27:ea:26:
6c:c6:2c:b1:8c:be:3e:86:1e:3b:a6:80:f0:11:6f:
b7:d9:2e:a1:7f:b7:10:d0:25:a9:76:13:9b:0f:04:
e2:e9:4c:40:39:52:b0:c2:6b:2a:be:56:4f:27:72:
6b:15:b9:64:11:3f:ab:53:f8:a3:14:ba:08:36:c6:
0f:10:d5:d9:6a:81:bc:16:4d:78:88:28:a3:94:2a:
17:ee:be:57:25:87:b6:cc:91:e1:7b:f5:55:a7:71:
f1:a2:4f:e0:ff:a0:d0:68:f3:85:f7:1a:8c:18:07:
27:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8B:E9:F0:83:11:1A:74:43:5F:A4:10:D9:9E:4B:2C:00:40:00:5D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE68E3FE803B11ECA8F12731C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.164.140.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:3b:f2:ea:5c:54:81:1a:22:6f:5c:cb:c1:0f:15:99:27:7e:
26:42:d2:55:03:b0:c8:a8:e9:1f:3d:cd:3a:9a:2e:12:7f:88:
67:4f:c9:4e:7a:45:b6:cc:02:a2:61:fc:54:7b:06:8a:bc:47:
e0:0f:33:25:88:ec:83:d5:a8:67:03:4c:88:48:8c:43:71:b2:
e6:e0:dc:ea:80:14:7d:c3:6c:a7:41:53:b1:a3:66:26:c8:31:
e5:25:88:d9:57:c3:ea:08:03:74:b1:72:6e:d8:4b:89:1b:d8:
d7:44:1e:cd:40:64:7d:08:63:1c:53:9b:0f:e8:ee:74:c6:ac:
d4:20:ee:f3:f3:6a:38:93:a1:a3:d6:f3:d1:96:9b:55:04:d6:
6a:3c:f7:fe:da:28:81:1a:97:1b:70:d0:dd:64:6e:b3:85:bc:
5d:ef:c4:d2:fa:32:59:ea:e1:d1:43:11:8f:45:06:1f:fc:1c:
af:2f:27:16:ae:e5:5e:40:0c:33:da:d4:89:fd:fd:f3:1b:10:
2e:b2:15:0c:d4:98:34:08:96:47:b4:00:f8:9e:d4:5d:10:b4:
5b:11:e2:ba:25:fb:c0:aa:96:0f:d7:4a:9a:5e:81:c9:08:e9:
06:4a:f6:ab:2c:d7:00:2b:5d:cf:57:92:b0:f8:f9:93:d3:48:
56:de:97:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:01 2026 by rpki-client