
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D9A988BA28A611EBAB193C69C4F9AE02.roa
File: D9A988BA28A611EBAB193C69C4F9AE02.roa (raw, json)
Hash identifier: RDmr0VnXZ8cihQoxuwuUG9Z+6WPW8VQ5NPOY+RPaIOk=
Subject key identifier: 4F:E4:50:A8:44:0B:E1:48:70:F5:04:FF:4A:5B:CF:CA:23:BD:78:27
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F78F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D9A988BA28A611EBAB193C69C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:51:45 +0000
ROA not before: Mon 06 Jul 2026 17:51:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55757
IP address blocks: 103.243.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63375 (0xf78f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:51:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4beb31-5ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:00:66:41:58:9b:c0:1f:28:e0:37:5f:11:a2:
74:2d:6f:28:a4:19:0b:5d:3f:21:9c:0c:b7:cf:17:
1f:4e:43:92:92:4f:c4:aa:a8:a4:2e:17:50:17:60:
b6:3d:67:11:18:03:2b:16:f6:8f:9a:3e:25:56:14:
02:d4:6d:40:a5:5c:06:ae:2d:5d:2b:e6:00:15:81:
ed:35:d5:14:a3:a3:e2:c1:6b:59:d0:10:ff:56:aa:
8a:6d:28:6b:e7:77:c5:a3:9e:8d:bf:6f:99:f5:58:
1b:b5:d2:ac:aa:2e:cf:57:cb:f6:b9:16:3a:8a:7e:
9c:5e:b5:49:dd:84:6e:5d:a1:21:fe:ba:7c:c3:48:
03:35:66:3a:a6:24:bd:8a:a2:03:ef:87:e0:c8:37:
0c:72:5d:bb:da:94:fa:9c:70:a4:76:ae:09:d7:86:
94:83:d5:25:bf:eb:8f:23:69:7b:a3:0c:c1:04:49:
d4:2d:4c:aa:4f:cf:97:8d:e6:e6:05:37:97:e3:45:
a0:e9:8c:fa:02:56:b7:c0:25:a1:17:e1:5f:7a:90:
64:86:e0:f2:3e:59:da:ec:db:66:dc:43:8c:ab:3a:
2b:17:03:5a:bd:0b:74:8a:be:f4:83:02:04:87:14:
4c:cd:cb:1f:62:ff:f8:84:7f:07:2c:db:f9:cb:fa:
1b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E4:50:A8:44:0B:E1:48:70:F5:04:FF:4A:5B:CF:CA:23:BD:78:27
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D9A988BA28A611EBAB193C69C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.243.28.0/24
Signature Algorithm: sha256WithRSAEncryption
88:fd:4d:5d:59:b9:c7:51:17:ce:b4:00:72:4c:58:53:8c:e6:
ca:14:60:57:5e:c5:45:91:47:68:b5:ff:51:93:ba:82:9d:d6:
89:da:bb:8b:28:91:b9:8c:1e:d4:79:58:f8:c1:f2:76:e4:f7:
66:7e:15:62:04:67:29:b2:81:f4:a8:63:df:bb:b3:b9:41:81:
de:7f:b4:7d:0f:a3:96:f5:25:f2:9d:db:07:10:01:e4:50:15:
44:82:de:e6:ca:fb:d6:5d:a0:55:af:28:78:e4:64:9c:cb:17:
08:c3:f4:50:e0:89:e1:e1:d6:15:03:09:a3:79:af:40:21:79:
eb:dc:10:7b:c2:7c:50:bf:48:25:b3:52:38:f0:f9:05:e1:50:
66:05:a0:8b:5a:8e:b0:79:62:35:24:4a:7a:f5:f3:74:40:e0:
a7:6e:8c:12:c2:e8:06:73:f0:14:f5:8a:de:cf:23:29:6a:80:
29:b2:1d:77:4b:2e:26:13:0d:b4:6b:c9:0f:e5:a6:fb:9f:62:
12:a1:42:59:b7:14:47:d3:e1:30:d4:bb:0f:54:a7:03:a5:74:
8b:47:f7:16:2a:04:03:d7:ce:01:e6:36:f4:da:17:04:63:f9:
ff:d0:3c:70:30:35:29:49:dd:b7:76:04:96:fe:c8:4e:1c:12:
a0:6c:8b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:34 2026 by rpki-client