
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB4C036EDF6311EEB15F0859C4F9AE02.roa
File: EB4C036EDF6311EEB15F0859C4F9AE02.roa (raw, json)
Hash identifier: dUmWYTa9q0Y6q5IdyxvdL9pO3mfIrhcaDlYnM3TtuOQ=
Subject key identifier: 81:74:17:0C:5F:74:94:9D:E1:38:E7:9A:2F:51:66:C5:BB:EB:B5:94
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F61A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB4C036EDF6311EEB15F0859C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:39:07 +0000
ROA not before: Mon 06 Jul 2026 17:39:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151714
IP address blocks: 103.67.92.0/23 maxlen: 24
103.139.226.0/24 maxlen: 24
2001:df3:2940::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63002 (0xf61a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:39:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be83a-5f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:64:56:04:83:6d:2c:f5:eb:43:3c:c6:b5:
6e:08:a6:bf:75:60:60:03:17:e9:af:91:cf:f1:ed:
ed:ea:50:1f:23:ce:e6:67:a4:29:45:17:3d:27:2d:
09:c6:8e:74:93:46:38:3d:07:6d:77:44:1b:d9:69:
47:40:0c:6f:a3:dd:fe:4e:af:78:04:41:87:3a:32:
f9:64:59:75:5d:81:b4:5f:87:63:a1:0f:21:de:15:
4b:e2:cd:8e:5e:f4:50:ab:b7:d1:d8:0f:ae:f4:94:
f0:fc:47:b8:2e:e3:45:b5:42:27:4d:6d:4d:6c:8b:
b6:89:3e:e3:63:9f:77:08:a0:d2:29:7d:d1:f3:0e:
ee:3f:65:a6:51:00:66:e0:42:81:55:3c:05:70:58:
bc:ff:92:89:fd:d8:1d:5d:a5:d6:21:7b:3b:1f:23:
e3:70:04:75:30:b8:3f:82:15:28:ab:b7:10:dd:32:
9e:ef:44:79:88:4e:a8:89:2f:c9:4f:5f:7f:90:a5:
e1:51:24:e0:26:c0:f0:d0:45:60:95:5a:8d:13:ac:
26:0a:13:64:93:87:0f:1d:ad:99:51:56:69:22:eb:
c3:41:c3:f8:e2:e2:23:36:94:9c:b2:1e:2e:50:01:
77:15:61:6f:b6:cf:bc:bf:94:53:78:bc:f6:f0:63:
ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:74:17:0C:5F:74:94:9D:E1:38:E7:9A:2F:51:66:C5:BB:EB:B5:94
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB4C036EDF6311EEB15F0859C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.67.92.0/23
103.139.226.0/24
IPv6:
2001:df3:2940::/48
Signature Algorithm: sha256WithRSAEncryption
04:87:a2:21:c2:9b:b2:39:db:df:6d:e0:48:d9:fe:e6:7c:99:
99:8d:25:ac:05:7f:d4:78:d3:21:dc:b2:4b:cc:ec:63:92:f6:
fb:0f:8e:71:70:ee:3e:59:a0:b0:38:c9:17:6e:64:ee:48:41:
7e:d1:61:6e:37:7b:e1:ea:b4:f0:de:24:d0:17:5a:52:10:e7:
c8:3f:81:1e:4a:b9:9c:f8:f0:6c:32:3e:2e:4f:b0:15:49:a1:
4d:a5:10:98:a5:e1:17:f5:9b:be:32:ee:46:98:df:dc:7e:ba:
bc:ec:c5:47:2e:42:3f:d3:21:3b:4c:cf:22:d3:56:9a:3c:0a:
75:1d:e3:4d:63:17:78:98:6a:15:b4:a4:b9:d8:7c:d1:f5:91:
bf:3b:1b:4f:4d:5c:2f:52:58:5c:3b:b0:54:3d:ea:19:20:99:
05:c0:71:b4:fb:f7:ec:65:99:ac:40:93:48:56:7e:8e:dc:16:
7a:f4:af:3d:a9:f6:df:e2:0f:3f:52:d0:f8:5b:8f:b7:a1:ed:
89:88:51:92:90:db:af:7a:da:c7:66:52:35:a3:50:2b:ac:ee:
fd:1b:67:f9:35:3f:9a:9d:d6:03:41:6e:5e:0e:31:36:35:53:
55:de:18:c2:6c:0a:38:1d:c0:21:bc:1f:19:07:31:9b:e0:4b:
e6:55:87:44
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIDAPYaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MzkwN1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU4M2EtNWYzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMvcZFYEg20s9etDPMa1bgimv3VgYAMX6a+Rz/Ht7epQHyPO5mekKUUXPSct
CcaOdJNGOD0HbXdEG9lpR0AMb6Pd/k6veARBhzoy+WRZdV2BtF+HY6EPId4VS+LN
jl70UKu30dgPrvSU8PxHuC7jRbVCJ01tTWyLtok+42Ofdwig0il90fMO7j9lplEA
ZuBCgVU8BXBYvP+Sif3YHV2l1iF7Ox8j43AEdTC4P4IVKKu3EN0ynu9EeYhOqIkv
yU9ff5Cl4VEk4CbA8NBFYJVajROsJgoTZJOHDx2tmVFWaSLrw0HD+OLiIzaUnLIe
LlABdxVhb7bPvL+UU3i89vBjrS0CAwEAAaOCAncwggJzMB0GA1UdDgQWBBSBdBcM
X3SUneE455ovUWbFu+u1lDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VCNEMwMzZF
REY2MzExRUVCMTVGMDg1OUM0RjlBRTAyLnJvYTA2BggrBgEFBQcBBwEB/wQnMCUw
EgQCAAEwDAMEAWdDXAMEAGeL4jAPBAIAAjAJAwcAIAEN8ylAMA0GCSqGSIb3DQEB
CwUAA4IBAQAEh6IhwpuyOdvfbeBI2f7mfJmZjSWsBX/UeNMh3LJLzOxjkvb7D45x
cO4+WaCwOMkXbmTuSEF+0WFuN3vh6rTw3iTQF1pSEOfIP4EeSrmc+PBsMj4uT7AV
SaFNpRCYpeEX9Zu+Mu5GmN/cfrq87MVHLkI/0yE7TM8i01aaPAp1HeNNYxd4mGoV
tKS52HzR9ZG/OxtPTVwvUlhcO7BUPeoZIJkFwHG0+/fsZZmsQJNIVn6O3BZ69K89
qfbf4g8/UtD4W4+3oe2JiFGSkNuvetrHZlI1o1ArrO79G2f5NT+andYDQW5eDjE2
NVNV3hjCbAo4HcAhvB8ZBzGb4EvmVYdE
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:51 2026 by rpki-client