
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8195170EE1E11EC8758DF47C4F9AE02.roa
File: E8195170EE1E11EC8758DF47C4F9AE02.roa (raw, json)
Hash identifier: juMaL7iZ19S/U9oeb+WyjDhBvlu9hJ8cGhRng/KStMA=
Subject key identifier: 13:1A:3C:23:FF:5E:94:30:80:0C:88:EA:75:BF:A6:78:AB:29:8A:F2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F4FC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8195170EE1E11EC8758DF47C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:29:43 +0000
ROA not before: Mon 06 Jul 2026 17:29:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149586
IP address blocks: 103.186.236.0/23 maxlen: 24
2001:df1:27c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62716 (0xf4fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:29:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be606-6b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:d4:0a:82:5f:9b:59:53:25:1c:71:8b:a7:
9c:6d:ea:e0:25:e9:3d:11:15:49:c3:8f:31:da:75:
19:20:3a:e4:cc:f1:c6:08:f5:4f:a9:8f:d8:f7:e2:
c0:bf:a3:9f:3b:0b:d2:01:31:7b:5c:db:46:02:8f:
35:ac:dd:bf:e3:fb:0f:25:9a:7c:38:10:a0:92:00:
c5:f1:1e:6e:d3:14:98:ff:1f:89:0c:52:31:51:ef:
5d:ba:af:2f:5a:57:55:79:78:3d:cf:24:c5:3d:2d:
05:a7:10:6f:10:c1:68:d1:22:78:1e:1a:a5:d8:bb:
8a:89:33:93:9a:9b:59:cd:d9:9d:7f:16:6e:98:34:
f4:9b:ad:33:28:fb:02:36:ec:bb:42:31:c2:7a:d5:
af:a2:2a:f8:88:33:9d:c7:6b:d2:13:6d:8a:a5:f9:
87:1f:40:b7:67:8f:d3:20:9d:36:16:f9:cf:23:a4:
ee:77:29:31:22:17:3f:78:99:5c:06:48:ff:f2:4d:
1f:5e:ac:51:29:71:e9:88:18:2e:da:1c:49:27:10:
51:85:51:6c:08:fa:37:e4:bc:dd:4b:38:b2:44:12:
2f:ee:f5:c8:3f:2f:e5:f9:f6:a2:b6:30:76:2d:f9:
93:47:93:6c:9a:9e:71:19:c2:ee:ac:60:e7:06:bb:
fd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1A:3C:23:FF:5E:94:30:80:0C:88:EA:75:BF:A6:78:AB:29:8A:F2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8195170EE1E11EC8758DF47C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.236.0/23
IPv6:
2001:df1:27c0::/48
Signature Algorithm: sha256WithRSAEncryption
7b:48:b6:31:40:36:8c:35:ed:07:44:b4:a0:fb:3c:04:bf:5e:
94:47:10:af:4b:a6:3b:55:fe:e6:df:36:af:3a:7b:0c:0f:d1:
86:1c:c8:1d:77:f2:04:18:69:38:00:bd:7a:f2:d6:40:93:75:
37:eb:0d:81:09:78:a9:61:48:d4:94:53:eb:45:34:78:de:94:
2a:89:30:65:cf:72:22:ca:61:9c:6b:19:be:f4:56:62:8c:3b:
a6:61:5d:d6:99:b6:72:5f:b9:ad:24:33:14:69:80:91:30:1d:
a1:00:ad:31:7a:5a:11:ca:e0:d9:41:50:dd:ad:52:68:3d:54:
81:a4:5e:8f:dd:7d:11:85:47:ef:6c:af:ba:71:82:66:66:40:
08:29:51:28:2f:cd:8b:f7:52:99:f0:bc:b9:86:e3:e8:f3:a8:
07:77:22:1e:0d:75:2a:d3:8d:34:66:7e:e6:53:fb:8a:38:22:
c0:f0:4b:95:f1:b3:08:8a:60:4d:98:77:1e:be:05:88:22:bb:
fa:56:9d:ff:b0:bb:d9:03:db:32:16:03:97:ac:3e:94:fe:66:
f8:2a:ff:7a:26:5d:5f:16:84:99:d0:25:ce:e2:fc:09:2c:bd:
4e:12:98:0a:a9:a0:fd:d4:73:6c:56:4a:6f:43:55:44:78:ef:
9a:da:f9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:40 2026 by rpki-client