
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED69316EE56711ECBF1FA967C4F9AE02.roa
File: ED69316EE56711ECBF1FA967C4F9AE02.roa (raw, json)
Hash identifier: ibM+Ue/uycRrkQ/PYakUWnWHdQsiEc49HDTK4WJc6Rs=
Subject key identifier: 74:F5:F3:FC:BC:3D:9F:FB:A0:53:8E:06:0A:72:F1:34:09:20:4B:E3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F09A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED69316EE56711ECBF1FA967C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:52:28 +0000
ROA not before: Mon 06 Jul 2026 16:52:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136307
IP address blocks: 103.188.220.0/23 maxlen: 24
2001:df0:c740::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61594 (0xf09a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:52:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdd4c-16a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:f9:0f:c6:25:24:74:e2:99:73:a0:69:51:
13:79:fc:b0:08:fd:37:61:91:3f:ea:55:36:e8:de:
7f:76:39:ec:7d:af:ca:0a:2b:3c:35:36:61:bc:fd:
5d:c6:46:a3:cf:61:0d:4e:19:32:33:c3:3b:98:59:
f6:0e:fc:fc:2d:dd:5e:06:9b:77:47:7b:9e:ac:68:
b0:79:a5:03:57:d6:38:69:3c:55:44:70:dc:c2:f3:
ac:d0:55:bc:06:d3:e0:89:7a:c5:08:a3:fb:00:c3:
fa:2a:70:ae:fc:51:93:b6:3a:96:49:85:e4:40:66:
47:0d:60:3f:cc:32:ad:1f:71:e5:8f:0c:d7:40:34:
67:a9:80:54:7a:98:f2:9d:e8:68:04:cc:be:3c:ce:
4c:45:2e:1e:95:f0:e3:0f:36:01:f4:cf:03:47:91:
18:df:2b:ac:2b:c2:bf:4e:42:9c:a0:5b:5d:08:c0:
7a:f3:0d:fc:b0:76:b7:cd:b8:39:07:0a:95:45:aa:
7e:ac:93:d2:89:48:88:30:38:52:f3:77:6b:c9:4f:
4f:4a:4a:c1:95:22:0e:ad:ed:dc:6a:6b:49:30:b6:
94:ca:cd:cb:8e:21:99:6b:95:94:7e:48:df:4a:56:
30:f6:a5:a9:04:20:58:21:94:ec:58:2e:0c:6c:1c:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F5:F3:FC:BC:3D:9F:FB:A0:53:8E:06:0A:72:F1:34:09:20:4B:E3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED69316EE56711ECBF1FA967C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.188.220.0/23
IPv6:
2001:df0:c740::/48
Signature Algorithm: sha256WithRSAEncryption
95:44:a0:e1:57:bb:7b:ef:53:3a:04:db:b5:3c:b9:bb:31:9c:
1b:ca:4f:e3:0b:dc:5f:84:a1:4a:86:64:8f:7d:58:29:4e:ab:
4e:06:32:17:f6:1b:12:f0:a3:2e:3a:2f:9f:46:53:62:a4:b5:
e7:ef:0d:ae:20:5b:65:01:aa:33:0f:b8:b6:d3:da:e0:32:a2:
73:b9:55:34:c3:77:7f:a1:45:85:c5:d1:10:65:51:e7:b6:4a:
81:1f:85:20:60:70:5c:21:5c:ea:8f:e1:6f:47:f2:5b:02:55:
d5:b7:41:c8:34:55:c6:bd:7e:03:87:82:c1:7e:9b:64:3d:70:
e6:88:6e:e5:ca:54:0a:3e:50:26:8e:64:b3:88:ad:9f:fb:d7:
b9:38:be:30:00:1a:6a:d6:a0:14:b0:48:38:e8:fd:8e:39:1c:
c6:fc:64:97:ac:3f:0a:de:2b:7a:dd:f4:9b:2b:0f:00:f4:e6:
82:09:0f:3d:f1:4e:19:7f:29:78:5a:d2:33:b2:6f:f3:47:67:
48:b5:6a:34:85:0c:2b:e8:90:01:54:b9:25:f1:e1:df:3d:67:
e1:ba:c3:16:31:ee:f4:f9:22:40:e5:c2:2b:52:42:83:70:24:
68:e6:b6:cd:45:94:cf:4d:53:9c:5e:e5:db:32:e9:07:fd:28:
1a:d1:2f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:54 2026 by rpki-client