
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D9569ED40D8411F1A3FE779F253D8C67.roa
File: D9569ED40D8411F1A3FE779F253D8C67.roa (raw, json)
Hash identifier: yX/gRuUfCMKP/n7uYYIevPNYVI2DNesdsphCN7xNu2g=
Subject key identifier: 2D:0D:B9:C7:94:2E:5F:2C:71:78:2D:EE:8A:82:DB:7E:57:2F:F7:55
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F4AC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D9569ED40D8411F1A3FE779F253D8C67.roa
Signing time: Mon 06 Jul 2026 17:27:10 +0000
ROA not before: Mon 06 Jul 2026 17:27:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149235
IP address blocks: 103.47.93.0/24 maxlen: 24
103.124.210.0/23 maxlen: 24
103.181.216.0/23 maxlen: 24
103.183.28.0/23 maxlen: 24
2001:df0:7240::/48 maxlen: 48
2001:df0:8340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62636 (0xf4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:27:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be56e-1cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:67:85:e0:fa:12:af:9e:ee:d6:88:00:71:
00:f4:ff:65:92:c0:66:e1:c6:e1:6a:d4:2c:0e:af:
79:84:df:9d:1d:df:54:e1:78:2c:51:22:99:2a:cd:
11:79:dc:aa:96:12:b4:ea:f2:0a:81:6d:1f:4f:60:
43:5d:72:90:c8:ea:48:a1:69:df:74:98:96:3c:f7:
0e:dd:2c:a9:f3:d4:f2:6c:d4:fa:6d:2e:06:28:77:
d6:9b:1c:d3:d2:2b:98:c3:b9:08:bc:c5:03:96:fd:
d4:b3:25:ca:15:78:3b:ac:86:2c:fa:d1:ec:8f:d9:
08:4f:ed:55:9e:45:c0:1b:b5:3a:a7:b6:31:8f:42:
a0:97:a5:14:45:5e:6c:c5:02:f1:75:c8:e4:9e:62:
bf:67:5a:9c:cf:2a:fc:2d:fb:0e:c2:02:86:cf:fe:
c8:74:d6:67:4f:02:6a:85:c8:bd:b0:3b:71:85:cd:
8b:ec:2d:38:7c:b0:cc:95:ab:c9:ee:a0:b5:ff:28:
08:35:0a:d1:63:c4:3b:c2:4e:85:4d:95:af:5b:8b:
dd:46:a3:2a:aa:fb:f9:d2:8d:e5:60:32:11:3e:bd:
89:b3:a4:41:8d:ce:85:cb:11:16:a4:f6:75:e8:6d:
30:10:f7:41:a0:f9:35:e4:2c:3e:9b:60:a4:c8:a5:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0D:B9:C7:94:2E:5F:2C:71:78:2D:EE:8A:82:DB:7E:57:2F:F7:55
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D9569ED40D8411F1A3FE779F253D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.47.93.0/24
103.124.210.0/23
103.181.216.0/23
103.183.28.0/23
IPv6:
2001:df0:7240::/48
2001:df0:8340::/48
Signature Algorithm: sha256WithRSAEncryption
9e:f8:32:f3:03:20:87:3b:87:3c:76:4d:84:97:27:a8:84:d6:
98:e9:bc:fe:c4:bb:0d:d6:30:c4:c8:02:aa:a2:e1:68:ff:6a:
77:0c:29:67:f7:39:97:6e:16:91:cc:d4:61:d4:58:76:74:35:
c4:e8:e4:dc:30:ae:4a:d8:3d:33:f8:f8:fe:39:5c:ee:fe:50:
77:69:a6:f5:6d:d1:bb:1f:62:2a:f5:04:cb:63:08:c9:fd:73:
5a:6e:d7:95:6e:d7:41:b4:e0:3e:88:34:91:26:4c:e2:85:bc:
6c:eb:22:e5:a9:c7:c1:18:da:08:40:28:02:06:2f:ab:72:70:
be:f9:c1:6c:60:1a:49:11:43:82:16:cb:be:1c:4e:ae:67:b9:
05:fa:ec:30:77:16:c2:db:96:6e:80:dd:f3:18:f9:10:05:8a:
df:8b:c0:24:fb:43:65:99:a0:69:c7:29:14:9a:9c:fd:f6:39:
5f:ef:45:e7:33:e9:63:a5:b5:a9:d8:80:1e:95:9d:34:16:0d:
6b:fe:11:18:ab:37:3d:7d:2d:30:8a:f1:a9:89:2d:fa:6a:da:
77:af:29:e8:be:f8:44:04:52:1a:36:c2:e6:6f:bd:26:fc:f4:
d2:0d:84:b1:dc:49:ba:6b:eb:f5:e6:06:22:1b:d4:68:7b:c9:
b7:57:21:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:37 2026 by rpki-client