
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D419127E7F8F11EE8E122B28C4F9AE02.roa
File: D419127E7F8F11EE8E122B28C4F9AE02.roa (raw, json)
Hash identifier: wg2jkz2CRRah5avTB2BvN10dbKQPaxtJ6UKeU83/LDs=
Subject key identifier: 0C:4A:51:87:5C:24:2D:F7:47:2F:5D:7C:67:5B:1A:DD:84:A9:4B:8B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F237
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D419127E7F8F11EE8E122B28C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:06:03 +0000
ROA not before: Mon 06 Jul 2026 17:06:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138798
IP address blocks: 103.79.100.0/24 maxlen: 24
103.79.102.0/24 maxlen: 24
103.117.219.0/24 maxlen: 24
103.135.201.0/24 maxlen: 24
103.135.202.0/24 maxlen: 24
103.135.203.0/24 maxlen: 24
103.141.116.0/23 maxlen: 24
103.160.237.0/24 maxlen: 24
103.174.140.0/23 maxlen: 24
103.181.92.0/24 maxlen: 24
2001:df6:5280::/48 maxlen: 48
2407:35c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62007 (0xf237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:06:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be07a-7258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:83:23:eb:86:7d:37:8c:3f:b3:d8:3b:6b:
fe:e4:c1:b8:81:a7:13:6f:f3:9d:ab:13:bc:c7:71:
00:10:25:49:96:66:41:b1:4a:66:83:10:5f:15:8d:
f8:42:4c:67:86:74:5a:3c:81:28:bb:18:2d:ea:3a:
2a:03:53:77:95:05:9c:9f:64:6a:c9:72:d3:08:af:
83:50:b6:00:e6:0b:ea:2b:94:4a:e4:6e:30:05:c1:
70:d3:7d:2f:fb:8f:63:4a:d9:51:32:e0:4e:f1:53:
1b:a1:7e:0b:2b:09:e1:fc:36:c5:57:a5:15:6c:57:
f7:23:0e:67:0c:44:da:94:3d:4b:35:1c:1d:d4:93:
89:58:4e:67:67:c3:d8:7d:78:5f:d2:fc:cf:a0:84:
6a:0b:e0:c3:92:0c:f3:14:27:25:f5:da:e2:66:ba:
ff:09:01:c9:8a:f2:56:b2:2f:11:6e:69:da:a5:11:
64:1e:90:03:49:92:b8:11:76:21:23:a0:7e:60:77:
4b:e0:b4:20:87:eb:59:bc:e3:14:28:b8:44:ca:2b:
7b:e1:7a:97:94:e7:4a:53:a9:76:2e:bf:95:98:9e:
3d:66:57:96:b1:2a:39:ea:05:58:d3:d4:18:43:4e:
78:23:f0:3e:17:36:ff:e3:1e:2e:3a:ed:31:85:93:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4A:51:87:5C:24:2D:F7:47:2F:5D:7C:67:5B:1A:DD:84:A9:4B:8B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D419127E7F8F11EE8E122B28C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.79.100.0/24
103.79.102.0/24
103.117.219.0/24
103.135.201.0-103.135.203.255
103.141.116.0/23
103.160.237.0/24
103.174.140.0/23
103.181.92.0/24
IPv6:
2001:df6:5280::/48
2407:35c0::/32
Signature Algorithm: sha256WithRSAEncryption
39:e9:f6:f5:0a:c7:f7:12:07:62:3c:1d:df:c1:ef:ec:c3:11:
80:91:2b:51:ee:f1:e4:a7:ac:e8:58:19:28:e6:d6:27:3d:5a:
f7:ad:5a:dd:8a:2e:e1:86:3d:c8:80:43:b8:ed:11:c8:04:2b:
40:d7:53:a4:e9:7d:e5:5c:a3:1e:71:7e:5c:59:ac:87:36:8c:
25:30:7e:9a:7a:14:39:ea:63:c7:fb:da:0c:66:88:52:d5:43:
25:9b:6c:f8:81:31:56:e8:fa:7d:33:1f:4f:0c:51:00:28:57:
da:d7:6d:c1:a3:18:6e:63:07:e9:72:13:ad:79:7f:9c:77:25:
ef:8f:12:14:61:33:6d:46:bb:a8:78:59:8c:62:1a:7e:b3:48:
2b:49:ca:79:0f:1d:77:3b:6c:d5:f7:96:bc:3a:54:6f:7b:56:
6e:96:30:39:f4:34:ea:50:40:c0:85:5d:a4:9e:41:26:f3:b3:
a0:e0:42:d0:aa:95:a7:fe:d5:e6:07:04:95:77:6b:11:8f:7c:
7d:a0:ff:4b:40:ef:97:a0:3f:c7:55:d6:4b:ae:64:21:13:03:
44:48:70:a3:c8:9a:8c:46:4b:93:14:88:d6:f1:48:c3:52:5e:
56:79:50:fc:1c:e8:8d:0b:01:83:75:4f:56:4b:51:f7:92:cc:
07:3a:93:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:38:42 2026 by rpki-client