
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED364E08863111EF877E864EC4F9AE02.roa
File: ED364E08863111EF877E864EC4F9AE02.roa (raw, json)
Hash identifier: tPSfIfZhoqd7U1sM0UWZUm6KC/ClcV4gL6zwp+PxhH4=
Subject key identifier: B7:4D:F2:99:4A:4C:9A:9E:9C:CD:CB:3F:18:98:F4:76:90:64:A8:8D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EE4E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED364E08863111EF877E864EC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:33:22 +0000
ROA not before: Mon 06 Jul 2026 16:33:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133006
IP address blocks: 103.38.88.0/24 maxlen: 24
103.253.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61006 (0xee4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:33:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd8d2-7bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:79:07:cb:57:fc:bd:15:b2:7d:f1:c9:75:
83:62:dd:6e:35:d3:f7:69:4d:4a:d9:46:a3:2f:56:
70:14:62:18:ea:73:e6:04:0e:19:d3:41:0a:e7:84:
d1:1e:f7:57:ae:9f:36:a0:61:6a:b9:c7:a2:b7:20:
26:0f:a0:6c:f2:38:ff:ec:d9:7a:04:89:61:15:c8:
36:2c:4b:3e:5e:2b:81:94:62:a5:10:7b:44:f0:7d:
37:fd:07:a0:0d:3d:23:57:b4:6e:e3:d0:9d:b0:58:
03:70:6c:49:28:b8:9d:1e:96:bd:1e:a9:be:b2:34:
03:99:ed:3b:f8:e8:29:58:57:59:f3:c2:d5:81:e1:
c2:9c:c8:40:43:3a:20:ec:71:22:fd:c6:1d:d9:98:
a8:d8:62:e9:04:8b:17:e6:13:82:f2:fd:14:67:0c:
29:3c:62:00:0d:4a:5e:5b:e2:44:b7:34:6b:ef:f1:
4e:d6:9e:38:b7:bd:ed:28:55:c0:50:6a:a3:01:11:
83:bb:31:62:89:94:c9:ca:e8:15:a4:b0:cb:95:9d:
5c:c5:59:d7:81:67:64:96:a3:e9:e7:b8:36:79:b1:
e9:92:6d:c5:d4:9a:0f:4d:04:f9:f1:f6:bc:0c:c8:
02:dd:6e:67:64:0b:11:4e:b0:aa:2f:ff:fc:92:ee:
ff:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4D:F2:99:4A:4C:9A:9E:9C:CD:CB:3F:18:98:F4:76:90:64:A8:8D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED364E08863111EF877E864EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.38.88.0/24
103.253.104.0/24
Signature Algorithm: sha256WithRSAEncryption
32:62:e6:70:a5:5d:9f:81:b2:35:de:d9:90:23:a5:7e:e4:c2:
ad:bb:06:f9:4f:ad:7b:d3:39:13:cd:9b:76:50:b5:c3:ee:4b:
c0:ad:e1:36:59:23:ca:a1:eb:eb:c6:93:e0:8f:90:4b:17:14:
82:03:3c:4b:be:cd:2c:e6:d4:ed:29:a6:3e:dc:aa:e5:ee:f9:
53:06:ca:77:f3:ac:03:9c:d5:36:5c:96:ae:53:76:1b:1d:1c:
5e:99:d8:ef:37:b3:cf:46:44:52:f8:7c:bc:bc:7e:00:61:bd:
7b:88:bc:11:85:72:c2:c9:ee:1a:eb:31:59:aa:86:e2:24:a4:
74:fc:5e:ab:72:62:89:ca:40:a5:06:e0:de:be:73:cd:93:96:
f4:22:b5:00:98:b8:b1:f3:4d:94:43:ff:96:e4:04:48:54:b0:
24:54:ae:74:73:bd:03:e3:58:46:03:28:7e:80:45:0a:b1:41:
a2:c1:74:fd:9f:75:88:07:55:1b:31:ac:ab:02:e2:46:d1:c5:
d6:38:65:dd:12:6d:53:34:81:b3:8e:2c:ba:ec:8c:de:1a:ad:
e6:88:a7:0d:00:7b:01:06:19:03:4d:cc:5d:41:c4:51:2e:3f:
b3:2e:5b:21:aa:6c:37:13:64:7e:fb:75:c3:a1:76:2b:72:57:
4d:14:38:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:39:19 2026 by rpki-client