
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE039AD6CC5F11EC917C3637C4F9AE02.roa
File: EE039AD6CC5F11EC917C3637C4F9AE02.roa (raw, json)
Hash identifier: 3P+h+fshdQTnrvSElbNJQZA62sr++nYUXok1VQKDeIw=
Subject key identifier: 89:17:10:78:46:6C:07:B0:98:87:F0:66:3C:89:B5:7A:CC:FC:36:03
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F4D2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE039AD6CC5F11EC917C3637C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:28:23 +0000
ROA not before: Mon 06 Jul 2026 17:28:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149535
IP address blocks: 103.103.90.0/23 maxlen: 24
103.163.188.0/23 maxlen: 24
103.168.62.0/24 maxlen: 24
103.168.63.0/24 maxlen: 24
103.172.148.0/24 maxlen: 24
103.172.149.0/24 maxlen: 24
103.183.230.0/24 maxlen: 24
103.183.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 13:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62674 (0xf4d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:28:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be5b7-69e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:51:65:52:e5:42:dc:4a:f3:39:82:26:8b:
59:d8:ec:c4:79:d7:ce:7d:32:2b:98:f6:ab:c4:48:
13:c6:3b:a8:1d:24:ee:85:70:8e:3c:53:71:fd:70:
cd:3b:0d:5b:a1:54:0a:51:8c:30:a6:12:a1:c1:06:
17:21:19:38:63:88:a8:f9:4a:ad:ad:f6:8b:81:9a:
82:4c:08:66:6b:87:fe:67:ff:4e:95:66:de:62:e1:
82:65:6e:ce:da:a6:1a:fa:ad:be:ca:8a:5c:85:5a:
43:de:2e:6e:06:42:1b:14:08:7b:9b:ee:0b:60:d7:
be:81:ef:eb:26:15:86:f4:a7:de:65:09:73:e6:30:
64:58:a9:26:09:b1:ca:1c:2f:fb:8b:b1:a9:a7:f5:
24:f8:7c:f3:7f:29:04:a5:81:50:8c:2b:2f:14:ed:
1f:17:40:04:0c:02:95:4e:0f:05:44:c2:14:b2:2d:
a5:cb:7a:af:e2:d5:ce:f1:7f:15:38:ae:30:bb:2e:
49:e6:01:91:85:a6:1f:19:77:f0:9c:8d:6f:a7:4f:
65:46:47:05:5a:93:ce:81:89:c0:f5:77:d8:b2:36:
f4:44:32:a8:66:22:34:f6:f1:98:dd:09:6b:c7:27:
27:93:9c:8d:e5:56:44:fd:83:60:b7:e8:31:d2:fa:
75:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:17:10:78:46:6C:07:B0:98:87:F0:66:3C:89:B5:7A:CC:FC:36:03
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE039AD6CC5F11EC917C3637C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.103.90.0/23
103.163.188.0/23
103.168.62.0/23
103.172.148.0/23
103.183.230.0/23
Signature Algorithm: sha256WithRSAEncryption
74:ba:ba:00:d6:b8:7a:73:a3:70:04:b6:e2:78:14:a3:4e:f4:
02:46:e3:38:f5:20:04:42:2d:a8:f0:a6:83:11:c7:49:19:b4:
30:27:6f:48:b3:93:53:a4:d8:f2:51:d5:d1:95:d8:5f:0b:b1:
3f:22:9e:20:be:72:d9:35:9b:9e:79:78:29:19:d1:b2:a2:79:
c3:8d:30:f5:24:a1:09:e8:3c:0f:d5:ea:ab:c6:bb:e2:1e:52:
3e:7a:c2:64:ca:8b:72:a7:87:46:75:ee:41:b8:eb:50:17:b5:
3e:1f:ee:4b:19:06:a1:57:67:1f:ab:94:21:5d:ce:aa:a9:47:
2a:ed:0d:42:3b:1f:c4:62:19:b9:e4:8a:38:7c:75:e5:e6:78:
37:a8:fe:77:96:98:a8:f6:4e:5e:59:2c:5b:4e:2e:26:4c:dd:
c7:07:73:28:c2:1a:f1:83:e6:34:81:71:f6:83:cd:8f:4b:d2:
7b:72:2a:2e:22:37:fc:7f:06:85:4e:32:f4:b3:9f:a6:f6:42:
6e:f5:f6:cf:ea:58:0e:66:40:0c:67:d5:6c:db:d4:c6:68:ec:
84:36:b7:22:f4:3d:69:47:d2:ed:d7:ab:e4:e9:7a:db:fa:df:
ec:00:ec:d2:d0:67:ff:58:ff:d1:ab:29:84:95:f1:0d:a4:ec:
a1:48:92:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 10:13:52 2026 by rpki-client