
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF1479BC282911ECA8E74D32C4F9AE02.roa
File: DF1479BC282911ECA8E74D32C4F9AE02.roa (raw, json)
Hash identifier: KW36TZ7g5lPo4HDz+4EWD9fX5vtd7QFz972YLF4U2AY=
Subject key identifier: 6A:3A:2F:5A:D3:48:8B:91:02:16:01:4F:48:D4:68:D1:05:F2:80:E1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EE10
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF1479BC282911ECA8E74D32C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:31:20 +0000
ROA not before: Mon 06 Jul 2026 16:31:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132767
IP address blocks: 103.174.56.0/23 maxlen: 24
2407:fb40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60944 (0xee10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:31:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd858-5c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:52:57:d6:ee:5e:26:16:4a:b2:ed:71:b3:
1f:95:10:47:17:57:ca:5b:12:9c:d2:83:ef:e0:49:
a0:81:ef:f9:96:66:a6:e4:8f:4c:5e:0c:50:87:93:
90:37:b5:93:6e:94:79:25:dd:93:13:8a:87:ae:20:
75:f0:40:4b:e4:9b:ef:e5:85:79:dc:e0:46:7a:7b:
b2:c1:60:87:6f:e8:a4:b5:ae:7b:21:3c:a8:c7:17:
fd:4d:c8:0d:02:65:ea:19:7c:0b:71:f1:0b:9c:34:
be:c7:01:e9:b6:f3:08:1e:34:07:66:3e:a4:94:35:
c9:db:37:48:b6:a4:0f:f1:05:8f:e6:82:41:26:2b:
7a:c1:67:b0:ab:be:85:3a:c7:54:43:57:fd:f5:57:
a9:86:0b:8a:b9:6b:c0:16:f4:22:37:7a:17:bc:8e:
e6:df:27:e6:75:82:06:d9:75:41:b3:b6:93:a9:4a:
dc:bd:84:22:e4:c6:c6:41:05:96:42:a7:3f:30:b1:
48:64:3d:30:c3:31:c7:c2:eb:4f:10:fb:aa:fb:d7:
b7:24:b8:64:42:15:d5:e5:1b:19:b3:e9:ff:e9:9f:
6e:30:e0:9e:02:4e:59:37:28:f7:46:17:7d:38:de:
45:ff:ef:d8:7d:b7:8b:c7:db:81:64:bc:80:de:13:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3A:2F:5A:D3:48:8B:91:02:16:01:4F:48:D4:68:D1:05:F2:80:E1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF1479BC282911ECA8E74D32C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.174.56.0/23
IPv6:
2407:fb40::/32
Signature Algorithm: sha256WithRSAEncryption
48:38:aa:e9:78:37:ac:1f:3d:db:48:cf:fc:9d:aa:b6:40:9e:
19:08:44:cf:87:08:78:74:9f:e7:50:90:7f:e1:f2:48:6c:a6:
5e:58:8b:cb:88:4a:96:16:cf:09:88:ed:ca:c4:9e:b8:88:d8:
72:b0:ab:84:c1:11:29:50:80:7f:5a:e4:a4:e7:08:c8:ad:ea:
5e:e3:6c:4a:17:75:00:0c:66:e9:3c:a4:66:44:98:a5:f8:2b:
83:ab:86:39:a0:62:4a:ae:12:d7:d1:0a:ae:bb:03:fa:83:dd:
72:2d:7a:06:60:04:46:53:56:a5:0e:6f:b2:56:66:d9:96:75:
22:dd:fd:c6:a3:b8:d4:13:d5:dc:e2:0e:49:6b:d2:10:9d:5a:
0a:0d:21:6d:28:be:ef:2c:27:cf:df:ae:40:fe:a9:05:36:16:
e9:8b:5b:de:be:19:20:4c:a0:7a:87:eb:de:4a:71:43:54:75:
d7:01:ff:a1:2d:2e:cc:6e:da:62:8d:4e:0b:76:5f:9d:10:fb:
2e:37:12:b6:63:d1:7d:a2:7c:c3:19:c3:02:54:30:fb:bc:21:
70:4a:43:62:04:88:b4:9d:48:f4:85:ef:63:03:f3:06:68:88:
87:24:b3:42:9b:45:52:03:d1:23:f7:3b:22:7f:94:0f:9e:30:
b3:ce:ae:fe
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDAO4QMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2MzEyMFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmQ4NTgtNWM1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJshUlfW7l4mFkqy7XGzH5UQRxdXylsSnNKD7+BJoIHv+ZZmpuSPTF4MUIeT
kDe1k26UeSXdkxOKh64gdfBAS+Sb7+WFedzgRnp7ssFgh2/opLWueyE8qMcX/U3I
DQJl6hl8C3HxC5w0vscB6bbzCB40B2Y+pJQ1yds3SLakD/EFj+aCQSYresFnsKu+
hTrHVENX/fVXqYYLirlrwBb0Ijd6F7yO5t8n5nWCBtl1QbO2k6lK3L2EIuTGxkEF
lkKnPzCxSGQ9MMMxx8LrTxD7qvvXtyS4ZEIV1eUbGbPp/+mfbjDgngJOWTco90YX
fTjeRf/v2H23i8fbgWS8gN4TpwcCAwEAAaOCAm8wggJrMB0GA1UdDgQWBBRqOi9a
00iLkQIWAU9I1GjRBfKA4TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RGMTQ3OUJD
MjgyOTExRUNBOEU3NEQzMkM0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w
DAQCAAEwBgMEAWeuODANBAIAAjAHAwUAJAf7QDANBgkqhkiG9w0BAQsFAAOCAQEA
SDiq6Xg3rB8920jP/J2qtkCeGQhEz4cIeHSf51CQf+HySGymXliLy4hKlhbPCYjt
ysSeuIjYcrCrhMERKVCAf1rkpOcIyK3qXuNsShd1AAxm6TykZkSYpfgrg6uGOaBi
Sq4S19EKrrsD+oPdci16BmAERlNWpQ5vslZm2ZZ1It39xqO41BPV3OIOSWvSEJ1a
Cg0hbSi+7ywnz9+uQP6pBTYW6Ytb3r4ZIEygeofr3kpxQ1R11wH/oS0uzG7aYo1O
C3ZfnRD7LjcStmPRfaJ8wxnDAlQw+7whcEpDYgSItJ1I9IXvYwPzBmiIhySzQptF
UgPRI/c7In+UD54ws86u/g==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:48 2026 by rpki-client