
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA91C60CBDD011EA9702FC12C4F9AE02.roa
File: DA91C60CBDD011EA9702FC12C4F9AE02.roa (raw, json)
Hash identifier: t7IAGhafypigUjHvRyoyN1pBAj6w9gtlYmc/I+UVlIw=
Subject key identifier: 85:71:C9:3D:EC:45:19:A1:7D:33:2C:E3:89:E2:2D:CF:E3:30:DC:EA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F251
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA91C60CBDD011EA9702FC12C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:06:51 +0000
ROA not before: Mon 06 Jul 2026 17:06:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139509
IP address blocks: 103.146.228.0/23 maxlen: 24
2001:df5:6340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62033 (0xf251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:06:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be0aa-706a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:54:20:fb:07:e0:89:1b:35:4b:80:40:ee:df:
c5:25:95:f7:e4:a6:78:68:1b:3a:d0:da:36:cd:26:
77:b5:25:91:43:c4:68:ac:b0:b7:cc:0b:8d:ed:75:
d5:54:e8:b8:5d:fd:3d:4f:5c:e6:f8:9c:83:a9:b6:
04:87:0d:0a:33:28:84:c3:11:69:5d:9f:bd:86:bf:
78:1a:8e:69:45:a0:09:0e:ff:74:a9:de:87:1f:85:
3d:ca:13:5f:c0:d9:a7:be:00:15:9d:89:75:58:e6:
e4:52:ed:ab:ac:33:fd:45:c7:5b:23:fb:80:21:81:
75:ab:5c:be:1a:98:b8:b7:88:64:4c:24:1c:12:01:
a2:c2:0b:0e:62:88:49:71:7a:78:fe:63:89:e5:05:
5e:bd:63:50:1d:e6:51:a6:d8:d0:77:a5:41:60:a6:
a5:b7:93:dd:aa:98:9a:af:b9:27:ec:85:eb:df:b6:
33:d8:a2:b5:c8:b4:c9:33:d0:a1:67:3d:e6:6f:c3:
83:b1:b9:83:94:4e:cc:a5:d3:6c:52:c7:ac:0f:28:
d6:19:5a:5a:98:78:85:43:eb:bb:94:e6:cb:1e:27:
d3:d5:d0:91:a1:2b:9a:11:3b:63:0d:25:70:f6:9f:
00:7f:c1:02:5a:5e:50:e9:e8:69:c4:81:b5:96:81:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:71:C9:3D:EC:45:19:A1:7D:33:2C:E3:89:E2:2D:CF:E3:30:DC:EA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA91C60CBDD011EA9702FC12C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.146.228.0/23
IPv6:
2001:df5:6340::/48
Signature Algorithm: sha256WithRSAEncryption
32:ea:2a:d6:e4:85:20:e3:52:8e:a4:16:dd:57:87:31:37:59:
ce:2e:b8:5b:1e:f8:4c:ec:81:e0:ba:5e:7d:49:11:78:55:60:
00:b4:25:11:d8:aa:ed:be:e7:1f:ca:1e:fb:ab:4a:7c:b0:83:
43:8d:4d:6a:ec:53:96:05:1e:d3:ab:4c:4a:30:2b:12:85:97:
09:87:47:54:2a:83:be:02:7e:a4:c6:f6:02:1f:55:99:26:b1:
f4:88:f8:30:32:9a:20:26:d8:6a:36:db:58:7c:07:ab:bb:6f:
7b:07:88:28:14:2e:eb:e1:04:aa:b6:25:24:83:7d:0c:f5:27:
c8:cf:0e:fa:0c:63:b2:17:a9:cf:a5:23:01:01:6a:6f:31:a6:
b4:ad:bd:b6:03:df:b1:16:e1:28:d2:54:50:15:12:48:46:be:
a0:49:2b:98:64:1e:f5:d9:1f:dd:45:58:56:8f:d5:48:46:ad:
8c:a8:d0:40:c9:c7:1a:bb:d0:8c:44:d3:41:d8:b2:ec:f8:65:
c0:e6:5c:50:48:1f:6e:f4:ea:bc:24:a9:a4:4c:bf:75:e1:1b:
af:fd:5b:bd:db:77:86:02:61:cd:1f:5d:f8:2b:5c:7e:d5:bc:
c5:d2:66:da:e3:34:fa:a4:bd:c4:9c:5a:c0:98:43:6d:8f:3f:
e2:3e:dc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:38:18 2026 by rpki-client