
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CEE2EE68953C11EC83020D67C4F9AE02.roa
File: CEE2EE68953C11EC83020D67C4F9AE02.roa (raw, json)
Hash identifier: SkOvvjJ0vaEuEloPxgRPC6Zno0TR+94dc4Rc6FL4fFc=
Subject key identifier: B8:B0:CB:D6:B5:C2:AA:48:71:7A:AF:88:22:3A:55:05:64:30:CB:0D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F0B1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CEE2EE68953C11EC83020D67C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:53:15 +0000
ROA not before: Mon 06 Jul 2026 16:53:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136340
IP address blocks: 103.181.178.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61617 (0xf0b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:53:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdd7a-6e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:57:d6:e6:f7:7e:a0:90:8b:dd:fb:59:39:
4f:f9:d9:2c:af:97:87:77:9a:0c:48:c3:f0:41:8a:
15:2b:a8:4f:47:e7:5a:23:9d:6c:29:ea:12:03:59:
7e:66:fb:d6:0c:e6:b4:e0:b8:e3:f9:51:72:6d:be:
f4:cb:2a:20:d8:11:87:d3:73:4a:8f:88:6a:29:4e:
f4:c9:c7:83:9a:53:6e:68:4b:a9:4c:37:1b:ff:89:
a6:ae:2d:aa:84:05:e9:80:1d:49:a3:ca:73:d0:b7:
e7:f8:a1:e6:7d:a2:30:b7:8c:84:f1:cb:a1:5a:27:
2a:97:d6:06:e1:49:02:8f:be:d5:c8:70:d8:fb:cb:
7d:09:b2:6e:c5:bc:27:8a:7d:6b:37:6d:ee:15:92:
36:74:88:21:bf:47:cd:b1:8f:cd:ac:06:50:96:94:
86:63:7e:15:28:2a:c4:28:d1:00:5a:e1:d3:9a:93:
c5:9c:96:8e:2f:ef:62:54:76:ae:7a:45:4b:18:bf:
e3:66:c4:71:39:df:fd:3f:aa:f5:b0:2a:79:ba:0f:
cb:11:d1:50:96:b0:7b:1e:62:52:29:fc:bb:0c:51:
dc:7d:a4:2c:17:b2:b2:70:3a:e6:29:12:de:65:60:
63:80:ea:18:5f:c7:42:2c:63:92:a6:27:d4:02:9b:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B0:CB:D6:B5:C2:AA:48:71:7A:AF:88:22:3A:55:05:64:30:CB:0D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CEE2EE68953C11EC83020D67C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.181.178.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:0f:1b:b8:18:6f:87:be:44:62:0b:d1:e5:4d:55:89:36:b8:
f2:6e:4c:38:22:07:42:fc:0a:0b:ba:5e:ec:c0:29:43:fb:1b:
41:52:59:28:7a:39:d0:8b:16:fc:72:96:60:82:c6:b6:ba:74:
63:d8:a6:cd:50:89:60:cd:77:c3:40:91:61:67:8e:0f:df:62:
32:cb:14:0d:b5:11:e7:38:25:a1:a1:94:49:25:0d:d8:3b:db:
f3:63:db:25:8b:0f:33:5e:47:84:5f:2a:8c:1f:22:ac:d9:65:
96:02:ba:c0:c0:d6:ec:95:16:ca:b9:70:91:cc:3d:80:7e:b5:
79:9e:64:75:05:9b:67:4c:05:25:d0:16:57:41:32:a1:0d:6c:
91:49:61:91:83:1a:a0:a6:5a:41:27:3c:4a:1c:61:50:bb:01:
07:58:8e:57:ca:e4:c4:f6:2f:a0:f5:b4:eb:b9:c3:91:3b:bd:
e1:71:ad:72:7a:8e:e8:57:73:7d:75:10:56:40:36:c7:02:6f:
c8:8a:e9:29:22:b1:cb:17:11:ff:33:82:cf:82:85:8f:79:66:
82:6a:9f:86:6c:e1:cf:48:2b:57:69:a7:4b:67:3d:33:ff:15:
64:db:ec:84:5a:d1:94:c4:fa:40:f3:aa:65:50:95:85:8b:4a:
6e:2c:9c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:44 2026 by rpki-client