
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E3DB1D0E24A611EEBE29A16CC4F9AE02.roa
File: E3DB1D0E24A611EEBE29A16CC4F9AE02.roa (raw, json)
Hash identifier: bea70gXPB/9LsKro5kv55Au/dQnkZkT3rBgLobHDoqg=
Subject key identifier: 1C:2E:6D:43:FA:9C:5B:56:B7:F8:CB:8C:0B:7D:81:F2:77:81:A0:37
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F5CF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E3DB1D0E24A611EEBE29A16CC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:36:38 +0000
ROA not before: Mon 06 Jul 2026 17:36:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151115
IP address blocks: 103.161.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62927 (0xf5cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:36:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be7a6-2388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:c8:dc:90:7d:c5:e2:4d:1d:fa:0b:48:8a:
d9:53:1a:0d:fc:85:85:ba:60:5d:a9:6f:48:f0:e0:
36:46:3e:84:e4:27:d2:fd:e7:09:17:6d:9f:0c:20:
3a:24:04:28:66:7f:d7:ab:2b:e6:1d:09:06:5e:f2:
16:79:83:8d:a4:6d:d1:d9:4c:d6:e4:4d:00:97:8f:
e3:f2:63:44:91:be:e6:d7:40:99:7c:d7:d2:8f:62:
0e:73:d5:b8:e0:ca:e2:e9:19:8d:e8:70:e4:2c:ec:
a2:6f:b2:0c:86:5a:72:7d:02:d1:1b:4d:e7:38:2b:
aa:54:b5:cf:fc:e9:18:ad:f6:1e:9a:1f:a8:91:24:
b7:5c:e6:95:b3:5b:fc:c9:7e:c5:f1:27:35:be:af:
95:f9:05:59:70:0d:46:4f:92:8d:85:3c:6b:0a:fd:
a9:74:5c:09:34:18:89:c3:a9:f1:0b:8a:a4:c9:22:
29:15:ae:82:54:cf:25:b6:dc:69:05:d9:c8:73:fd:
69:72:2a:fe:41:27:c0:44:1d:aa:04:5f:75:0c:95:
9a:ea:7b:be:9e:f6:a2:99:da:ab:d8:53:12:82:06:
e0:15:8c:0b:40:70:fc:80:62:c9:8e:0b:97:bc:e8:
19:68:a8:74:8c:bb:fa:1d:e5:9a:4e:5e:39:98:c9:
cd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2E:6D:43:FA:9C:5B:56:B7:F8:CB:8C:0B:7D:81:F2:77:81:A0:37
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E3DB1D0E24A611EEBE29A16CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.161.156.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:77:11:cc:e8:f5:b5:c9:33:6e:77:c2:74:14:e9:5c:22:74:
2e:1d:4c:09:5a:02:b8:17:a7:77:fa:d4:3d:a8:22:31:5b:95:
17:c7:c4:b4:51:ab:a1:02:82:4c:1c:db:d9:99:f7:c9:fe:43:
48:2a:73:c6:12:86:e7:d8:9e:7f:13:ea:04:bb:08:21:b4:50:
bc:db:0b:e0:ef:42:b9:5a:d0:26:d9:e9:0d:fe:4c:a7:1f:05:
9f:81:0b:4b:83:ba:d3:f5:cf:29:69:a0:61:ae:56:0f:a1:ad:
a5:01:d2:45:0a:e8:3f:4d:92:3e:c2:54:11:d0:b4:c0:74:fd:
b9:3a:08:f1:96:34:47:49:15:d0:59:39:58:93:78:64:5b:88:
78:e0:4f:ea:99:f4:90:5e:60:3c:f5:70:c1:a2:04:c6:9d:80:
b2:5b:f1:4d:02:1a:b1:4a:49:97:13:a0:3f:c7:d6:2e:22:22:
b8:a5:8f:9e:ed:d3:80:0b:42:2e:dd:d2:67:78:77:b1:f5:58:
19:4a:ca:04:7e:7f:45:fd:19:78:10:96:af:52:10:5e:0d:f3:
60:ed:d0:35:d4:c6:f6:cf:38:aa:af:f1:43:8b:20:c8:0a:35:
8e:78:2e:d4:8b:4c:e3:e2:13:c1:31:d8:6c:47:52:b7:88:bd:
33:c8:66:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:36 2026 by rpki-client