
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E00B9C4E2C1E11EC8EB0E280C4F9AE02.roa
File: E00B9C4E2C1E11EC8EB0E280C4F9AE02.roa (raw, json)
Hash identifier: wsnYdYcPGCT8cQ+Mb75IYJ22HKvxN68UjWZvmVxcEnc=
Subject key identifier: AF:B9:F6:DE:51:B3:DA:E0:18:B8:94:31:C3:38:AB:FD:74:16:6C:66
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F47D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E00B9C4E2C1E11EC8EB0E280C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:25:40 +0000
ROA not before: Mon 06 Jul 2026 17:25:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147289
IP address blocks: 103.172.132.0/24 maxlen: 24
2001:df1:d3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62589 (0xf47d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:25:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be514-2949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4b:80:fe:89:eb:05:d9:d1:84:21:1a:f1:34:
46:a5:5a:0c:ed:43:ce:88:95:94:32:fe:c0:c6:62:
ab:39:7c:e8:a6:53:a3:83:ea:3a:af:0e:48:72:d2:
3d:53:96:6a:51:e6:f1:7c:14:f8:65:48:c6:f8:35:
f0:bb:76:d8:18:66:16:bc:f0:96:f8:64:c4:58:3b:
26:c7:22:d2:45:c5:77:9c:fd:6c:cf:8f:5f:64:65:
b9:3e:e8:c3:b3:7e:cf:f1:ce:c7:43:3c:48:43:11:
71:53:78:a6:b2:17:9e:c0:4f:c2:2b:a6:82:ee:46:
fc:d4:ff:24:be:fb:bf:e1:c4:19:d4:58:a8:4e:7d:
83:f8:3a:b7:2a:34:13:af:38:bd:dd:c4:9e:66:6a:
3c:c0:18:b3:9f:84:8c:88:5d:72:32:3d:5f:7b:6b:
08:c6:f2:7d:4a:ac:37:68:b1:34:14:64:ec:4e:48:
34:61:55:a5:5a:77:0b:e2:44:88:74:7e:4c:84:4f:
3b:55:f1:b8:68:a3:18:fd:ac:35:13:10:40:0d:68:
a7:65:2e:b2:4a:81:ef:56:67:1c:4f:b2:d4:b7:bf:
b6:e3:85:49:4c:40:c9:75:18:66:77:96:52:33:b8:
f3:f0:42:54:9c:a9:d9:7a:17:5c:5d:2a:a7:f9:d6:
af:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B9:F6:DE:51:B3:DA:E0:18:B8:94:31:C3:38:AB:FD:74:16:6C:66
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E00B9C4E2C1E11EC8EB0E280C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.132.0/24
IPv6:
2001:df1:d3c0::/48
Signature Algorithm: sha256WithRSAEncryption
0f:98:e2:fc:ab:91:a4:c7:2e:2c:f1:7e:e0:d6:8b:0f:55:5f:
88:5e:33:c3:05:4a:d9:58:0b:b9:27:26:3f:57:80:ef:fc:d0:
55:c0:b2:6d:4a:2d:ab:69:c7:b7:e0:9d:0d:f2:66:06:d6:79:
a2:a1:80:26:f9:e5:a6:cd:92:5d:de:a8:71:4d:28:75:80:4d:
23:bf:8c:f3:a1:79:d5:72:6b:ec:1a:94:81:1e:fb:aa:69:e5:
dc:28:20:bb:de:b7:26:4e:32:4f:09:e4:fb:ba:79:d1:89:70:
1b:0f:79:c3:ba:4f:e2:0c:94:18:d7:6a:b8:79:d2:5d:66:84:
de:aa:58:24:a6:c7:c1:9a:74:b0:62:e8:30:21:3c:4f:eb:8a:
1a:57:31:d0:3d:9b:61:55:2a:3e:ff:87:40:2c:f9:2a:eb:93:
c9:c8:6e:2a:fd:f4:99:59:ee:1d:60:82:c9:af:71:c7:5d:50:
71:2d:82:c9:db:2b:be:fe:03:90:b2:fe:17:f0:57:d7:b3:03:
a3:2f:50:20:6c:8e:83:b0:f1:84:18:e7:63:60:02:7a:d1:ea:
94:6e:47:27:29:0d:ad:fa:9a:ad:ea:ab:06:ad:9b:a1:fc:a3:
58:b0:2e:4f:57:af:4b:fd:2e:22:43:5e:26:c1:d8:dd:4d:76:
1e:b3:59:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:58 2026 by rpki-client