
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED08EF0C3ACD11F0B7B2D170C4F9AE02.roa
File: ED08EF0C3ACD11F0B7B2D170C4F9AE02.roa (raw, json)
Hash identifier: fgSFRI/v57f6t8We00c47jifnBbcUZWsaloHdzlnTzc=
Subject key identifier: 57:84:46:F4:B5:BB:A9:A7:BA:1E:45:E9:1A:67:43:17:FD:36:A5:6E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F789
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED08EF0C3ACD11F0B7B2D170C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:51:34 +0000
ROA not before: Mon 06 Jul 2026 17:51:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55410
IP address blocks: 103.143.3.0/24 maxlen: 24
2001:df3:75c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63369 (0xf789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:51:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4beb25-8f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a4:6b:0e:25:9e:43:51:f4:a7:c7:91:0e:06:
eb:6b:6d:b6:98:7a:e9:5a:e3:c9:a1:87:67:c7:73:
ff:48:e5:05:4d:d8:56:8b:2b:f9:9e:88:f5:fa:47:
19:28:d5:75:6d:f2:4c:1a:13:50:92:ff:7d:2c:bb:
74:e0:ba:a6:26:70:78:eb:0c:be:b9:ca:8f:3f:47:
23:c2:2c:f6:00:85:b7:19:94:63:46:0e:f6:bb:7b:
00:2b:3c:5b:0d:6a:eb:45:9c:36:c0:85:0e:1e:6a:
47:9a:2e:4f:0e:e3:72:3b:6d:ca:70:bd:85:21:6a:
ea:79:d6:be:89:eb:c6:8f:27:06:60:75:8e:e3:1f:
f5:d3:74:42:c5:26:f3:8f:24:9e:c2:1b:10:17:5c:
00:33:78:3f:23:01:8c:9a:bd:7c:a7:19:1a:01:51:
24:c0:e9:5b:9c:54:3c:f9:1b:dc:f3:99:1b:4a:bf:
16:ca:39:4e:11:6a:2d:d9:d6:f5:5c:be:0f:97:6c:
3f:33:7c:4e:37:ff:24:48:fa:58:ec:5e:6d:ae:0c:
e8:99:3a:d2:9f:73:11:3d:a8:94:ec:1c:6d:5b:d2:
aa:2f:c7:91:f2:b6:46:72:78:6f:ae:32:a6:da:df:
ab:6c:03:e7:5c:1d:25:b5:eb:1e:8c:b3:ed:30:09:
a2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:84:46:F4:B5:BB:A9:A7:BA:1E:45:E9:1A:67:43:17:FD:36:A5:6E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED08EF0C3ACD11F0B7B2D170C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.3.0/24
IPv6:
2001:df3:75c0::/48
Signature Algorithm: sha256WithRSAEncryption
03:65:58:d7:c8:c3:f9:cc:7f:61:18:45:d3:5c:f3:59:c6:17:
93:dc:7c:da:da:88:dc:6b:14:9e:2b:42:39:d2:0b:68:cc:4e:
40:eb:84:b9:a1:ff:1d:32:52:cb:d6:f8:70:4f:51:a0:29:cd:
8f:d9:d4:d7:e0:aa:f9:9d:85:00:2d:dd:f3:76:53:9d:b3:b5:
df:a2:08:e8:af:7a:e5:04:0c:eb:15:54:80:15:f8:8e:0d:ed:
43:f6:fe:7d:e7:b7:75:be:52:e2:1c:c3:ff:92:03:1f:ba:6c:
58:87:86:a9:57:e1:da:02:42:a7:86:0e:dc:6c:f0:ef:06:8c:
46:6b:5f:13:4c:96:0e:9f:19:57:68:33:d9:81:5f:3d:5c:0f:
ab:73:ab:07:72:e1:1c:0f:28:d9:b5:08:8d:9a:21:1e:89:ae:
8b:db:2c:dd:b9:25:7f:59:31:c1:13:8c:59:6d:c7:77:44:a9:
41:fe:f3:95:b7:9d:38:33:26:d5:32:75:ef:5a:15:ca:e4:0d:
8d:66:cb:91:33:75:1d:64:68:22:ca:97:2f:79:e5:35:2d:8f:
4f:c8:ec:97:d2:15:fb:4f:d4:68:a2:05:7b:88:a7:f8:1c:15:
9c:92:86:4e:49:15:09:4e:32:06:67:13:53:10:9d:34:f4:ae:
14:a9:00:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:07 2026 by rpki-client