
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E685B48E438811F1AC66FD97C5833773.roa
File: E685B48E438811F1AC66FD97C5833773.roa (raw, json)
Hash identifier: cLwZfSRDmxP3gphLb4gyPfNHm6AUOVMU/vnLQuvR2LY=
Subject key identifier: 8C:E1:E3:5C:A2:FB:1A:A4:4F:E4:92:76:A0:B2:6A:CB:2D:F4:69:F9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EF66
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E685B48E438811F1AC66FD97C5833773.roa
Signing time: Mon 06 Jul 2026 16:42:31 +0000
ROA not before: Mon 06 Jul 2026 16:42:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134858
IP address blocks: 103.39.116.0/22 maxlen: 24
103.80.22.0/23 maxlen: 24
103.105.96.0/23 maxlen: 24
103.127.224.0/22 maxlen: 24
103.148.8.0/23 maxlen: 24
103.157.52.0/23 maxlen: 24
2407:8c0::/32 maxlen: 32
2407:8c0:1900::/48 maxlen: 48
2407:8c0:1900::/51 maxlen: 51
2407:8c0:2000::/48 maxlen: 48
2407:8c0:2000::/51 maxlen: 51
2407:8c0:2100::/48 maxlen: 48
2407:8c0:2200::/48 maxlen: 48
2407:8c0:2300::/48 maxlen: 48
2407:8c0:2400::/48 maxlen: 48
2407:8c0:2500::/48 maxlen: 48
2407:8c0:2600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 13:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61286 (0xef66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:42:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdaf7-6fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:64:d5:2a:07:94:97:d8:e6:91:d9:ce:70:
53:52:ca:db:e9:0f:b5:14:ae:28:99:04:8b:cb:6d:
83:29:08:fd:0c:9f:cf:73:fd:a2:c1:36:4d:e8:d2:
06:e6:fc:36:4d:fe:13:6d:d5:fb:35:c3:99:e4:04:
76:29:b4:69:30:2d:c5:2d:41:c9:f4:a2:fc:47:ee:
92:e6:df:a4:11:7d:10:41:74:88:8f:15:12:73:0c:
cf:50:6e:da:fc:e9:9a:48:38:4f:15:26:f2:20:52:
89:e0:b9:7d:cd:6f:94:e0:ca:e9:57:fb:7a:ca:55:
d8:4d:2e:55:66:41:c3:36:de:68:66:f3:d0:73:4e:
35:1d:de:71:a9:d2:e8:5e:17:ea:9f:f7:f7:e4:60:
77:37:8e:4f:88:55:04:91:a2:ae:4e:a4:f5:74:4e:
57:be:38:ec:a8:92:06:ee:5e:f6:a3:5f:a6:0c:5e:
88:8f:76:3c:0e:27:cb:a3:e1:a4:22:0d:d1:42:1b:
f4:e1:3a:d0:c2:61:b0:f0:6d:52:c7:c4:91:35:a8:
3c:49:ed:cd:38:47:a6:1a:db:4a:7a:98:7e:25:e2:
78:67:e3:66:d7:02:7c:39:70:6b:8f:91:aa:2f:66:
96:0b:df:c1:e3:2f:b6:56:51:9d:bd:db:f3:71:0e:
15:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E1:E3:5C:A2:FB:1A:A4:4F:E4:92:76:A0:B2:6A:CB:2D:F4:69:F9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E685B48E438811F1AC66FD97C5833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.39.116.0/22
103.80.22.0/23
103.105.96.0/23
103.127.224.0/22
103.148.8.0/23
103.157.52.0/23
IPv6:
2407:8c0::/32
Signature Algorithm: sha256WithRSAEncryption
8b:f1:5f:ff:6a:99:02:21:03:f5:2e:aa:af:00:f8:8a:7f:85:
36:b3:e1:ea:f6:5f:00:4f:da:59:1e:61:5c:64:c5:5e:d0:e4:
29:cb:38:b9:07:64:27:f8:9c:07:30:4a:2e:5f:7a:24:60:e8:
41:e3:dd:92:b9:df:6e:9f:92:f8:c0:95:6a:63:e7:b9:c7:25:
61:50:60:8b:7e:55:af:5f:0c:0a:1b:b4:ce:3e:92:75:9b:e4:
81:5e:6d:56:4c:5f:58:92:ea:2a:d1:38:d7:1a:2e:c9:2e:f0:
a2:a5:94:77:aa:a0:22:51:0c:ca:3c:63:ad:6b:cb:a9:f9:5e:
c2:b8:6e:f2:76:92:08:e2:ce:2e:4c:03:72:36:1d:a9:f1:39:
31:ba:b1:7d:a0:23:17:bf:1a:bc:8f:e8:80:d4:fb:cb:5d:81:
e0:ed:52:e2:4b:05:06:31:0c:e1:6a:a4:58:56:ac:75:65:ae:
4f:7b:09:1c:32:ae:fd:43:91:89:03:44:b8:2b:b4:a1:8e:a4:
52:65:47:13:55:bc:6e:8e:72:fa:9b:d5:38:99:06:20:b5:a8:
bf:19:33:49:b0:55:60:bc:4c:0b:64:56:45:41:a3:c8:b9:da:
86:0e:d9:fe:c3:c7:83:4e:c6:5f:95:d6:6b:14:9a:d5:11:e4:
f0:ac:81:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:05 2026 by rpki-client