
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DAC8B8425A2011EF957B0E79C4F9AE02.roa
File: DAC8B8425A2011EF957B0E79C4F9AE02.roa (raw, json)
Hash identifier: Mk0iditrpCcRv9/jlFh7kqJEd9RaC8widXiRdzer9N8=
Subject key identifier: B3:C7:FF:59:00:DA:B2:32:B7:19:92:81:EF:4E:3A:0C:EA:FD:D7:61
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F0F1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DAC8B8425A2011EF957B0E79C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:55:16 +0000
ROA not before: Mon 06 Jul 2026 16:55:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136675
IP address blocks: 103.103.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61681 (0xf0f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:55:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bddf4-54d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:1c:b2:3b:28:7e:60:90:56:e0:84:2e:a9:
9d:a2:43:6d:77:01:3a:e2:86:f5:69:6d:b5:31:b7:
dc:90:32:e5:76:9a:1e:3a:4d:a0:9a:71:56:3d:d8:
81:95:7a:88:6e:b0:99:4a:88:e2:5a:f8:c8:3c:c5:
2b:0e:f8:8f:12:26:fe:09:29:de:d8:f1:56:29:35:
4c:ac:9d:19:12:06:12:96:08:e9:2a:60:21:56:4a:
4d:14:9a:7c:56:dc:41:af:e6:77:c9:df:d2:90:59:
55:37:8c:f1:3d:bc:bc:24:92:ec:70:23:1a:6a:11:
33:0b:37:d3:f2:5b:4f:4d:0d:8a:a3:5f:08:41:34:
f6:43:a6:9d:0c:ac:bd:a9:93:ba:5b:8f:73:e8:eb:
72:96:13:a7:87:84:7a:06:fc:31:e9:68:8a:f3:12:
57:e9:27:36:dd:c1:ff:a3:13:c3:33:1d:cc:2a:e5:
dd:23:dc:f9:f0:20:e9:24:b5:c5:fa:34:80:7f:d5:
cc:71:57:ed:05:f3:fe:65:44:c9:0d:2d:f9:a1:15:
4c:44:e4:e7:e3:1a:d5:1f:16:fe:64:7b:72:11:2c:
76:23:52:32:9d:ab:6b:3a:e6:ab:fe:0f:af:42:02:
a3:ab:ca:e0:13:c7:02:a6:b5:39:87:03:14:6e:08:
b7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C7:FF:59:00:DA:B2:32:B7:19:92:81:EF:4E:3A:0C:EA:FD:D7:61
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DAC8B8425A2011EF957B0E79C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.103.172.0/24
Signature Algorithm: sha256WithRSAEncryption
30:91:b1:0d:a7:b0:d9:83:f6:5f:35:9b:2c:39:b7:2f:5f:39:
58:71:c2:a1:a0:05:e0:d1:e2:72:c0:9d:fa:b3:3d:22:54:a4:
70:da:7b:49:e7:db:e3:58:a4:25:3b:50:0c:3e:c7:4c:50:9f:
73:d7:31:59:f9:d2:75:25:c0:85:ae:be:f7:fa:3b:e2:72:59:
39:eb:0d:23:0c:fd:fe:aa:e3:a2:41:63:68:e7:0c:03:bb:ff:
be:a7:ee:83:4f:9b:ac:1f:c2:45:13:30:c3:65:3d:02:83:6e:
23:42:7e:1a:ff:2c:65:93:1f:6f:7a:3d:ab:ba:87:f2:0f:f1:
67:59:2b:fc:af:8a:d8:de:e4:67:71:b3:c7:89:55:70:46:9c:
2b:3c:43:9a:88:f4:3e:68:a7:e6:f6:f0:8b:55:cd:5b:05:0f:
b7:5e:c0:3c:1b:70:f3:63:b6:9c:b6:dd:be:ae:75:a2:0b:34:
25:fb:01:46:db:10:b7:3d:2c:ca:da:f7:da:65:a6:54:bf:60:
a7:bd:19:53:05:70:e8:80:ca:ba:65:5e:74:47:b2:cf:e7:6b:
99:e2:73:e4:d2:33:8f:72:cb:fb:62:f3:ca:ea:6a:ad:11:73:
6f:18:60:de:6c:85:d1:5d:63:5a:37:84:0f:f6:2b:4d:09:0c:
b2:c8:e1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:02 2026 by rpki-client