
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D91402748EFB11EC825FAB77C4F9AE02.roa
File: D91402748EFB11EC825FAB77C4F9AE02.roa (raw, json)
Hash identifier: IZmWPPeJqy2OsUmXvmUUaju+gxPVXhJ0XZUYdOuuBCQ=
Subject key identifier: E9:51:08:EE:24:F5:18:C6:42:3D:74:25:06:96:93:6D:02:1B:7D:D5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F4AB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D91402748EFB11EC825FAB77C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:27:08 +0000
ROA not before: Mon 06 Jul 2026 17:27:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149234
IP address blocks: 103.181.166.0/23 maxlen: 24
2400:5aa0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62635 (0xf4ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:27:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be56c-c7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:46:44:83:42:b9:0a:ef:a7:cb:8b:1f:5c:bd:
0b:0b:e5:d3:6f:97:6d:57:df:65:86:28:6c:31:eb:
51:15:17:07:40:3f:c7:6a:9e:88:6c:6b:e1:05:60:
a5:02:e1:26:b3:94:36:72:b8:77:33:c0:7f:6c:ea:
dd:4b:39:b4:b1:e8:41:99:32:5c:1d:fb:38:46:e8:
1f:4b:a8:12:94:36:00:2b:e4:db:2e:a3:a3:e1:c7:
64:25:17:bb:42:33:4d:06:34:31:53:6d:fc:4d:eb:
54:5d:75:72:ae:43:7f:dc:90:39:f1:e3:c0:77:23:
56:4f:11:0b:0e:5b:27:8f:27:10:a2:f3:bf:55:f7:
7a:fe:56:d7:be:53:01:9c:94:5f:d0:87:f7:0a:98:
99:38:13:73:92:54:fc:f7:31:e6:cf:46:ec:79:54:
17:a3:c6:cc:95:95:c7:f8:6e:d2:39:a1:b9:d6:34:
fd:f7:c1:88:c0:71:ed:13:2d:3c:7b:6c:8e:05:71:
fa:c9:f9:48:d8:18:78:e1:f2:ad:06:12:17:49:19:
00:2b:88:1b:b7:74:37:57:7f:42:eb:aa:05:16:3e:
0b:1e:7e:0b:90:8d:dd:8c:98:b8:27:16:61:f3:f2:
74:95:6f:54:aa:b5:90:59:c7:ae:b4:4e:f5:ff:2d:
ca:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:51:08:EE:24:F5:18:C6:42:3D:74:25:06:96:93:6D:02:1B:7D:D5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D91402748EFB11EC825FAB77C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.181.166.0/23
IPv6:
2400:5aa0::/32
Signature Algorithm: sha256WithRSAEncryption
55:1e:49:1e:49:42:4c:2c:e7:6f:0e:b8:b6:47:13:82:d4:45:
9b:02:37:19:03:b9:96:ef:87:87:0f:1b:40:7b:8a:f8:e7:bf:
af:26:aa:08:e3:c6:4d:6b:86:da:c4:5c:18:f7:57:c8:b0:ca:
41:30:7d:17:ed:00:5c:98:91:56:83:f1:c7:2c:8f:3a:7b:42:
4b:ff:a2:ec:81:0f:76:80:07:1d:ee:79:68:bd:d1:8a:cb:00:
b6:57:54:4b:bd:52:66:c8:78:8e:c6:5b:ee:9f:67:c9:e0:e0:
b1:a9:87:88:e7:aa:c2:ac:94:b8:8f:78:e7:0b:a2:93:d5:ac:
e0:a2:04:52:ad:46:64:f6:07:76:21:5d:34:52:f2:0a:cb:9c:
ab:33:65:87:81:20:14:fc:6f:e1:66:e9:e4:35:e8:ff:5f:99:
00:98:4e:3f:82:60:d1:af:fa:27:bb:59:04:ba:88:8d:c8:d1:
7f:65:ca:c5:fa:f0:61:6a:ec:3c:69:3c:a5:79:b8:e9:82:62:
91:7b:6b:80:56:aa:0a:f1:64:e8:72:7e:f3:11:6f:53:55:42:
af:2e:2d:57:53:f9:32:dc:a8:36:d3:6d:04:bb:15:87:dd:ea:
1f:e5:7b:6f:d1:b5:1d:5c:7a:91:88:4d:34:7c:59:8f:c2:9c:
1a:30:13:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:55 2026 by rpki-client