
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1820EAA902111ED9693760DC4F9AE02.roa
File: F1820EAA902111ED9693760DC4F9AE02.roa (raw, json)
Hash identifier: ISGZEoUcfyFb/4ZU0ubOUmAvh6fZYIq94PMfZa5CndA=
Subject key identifier: 36:E4:28:18:8C:D1:11:03:27:90:FE:51:5E:F2:69:68:27:B1:B3:78
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F229
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1820EAA902111ED9693760DC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:05:35 +0000
ROA not before: Mon 06 Jul 2026 17:05:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138778
IP address blocks: 103.134.132.0/24 maxlen: 24
103.134.133.0/24 maxlen: 24
2001:df1:b040::/48 maxlen: 48
2401:8460::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61993 (0xf229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:05:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be05f-834b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5f:14:6a:b7:39:0b:11:54:dc:23:19:07:8f:
f6:30:f3:69:95:96:c8:82:df:71:f3:04:be:0a:1a:
67:ba:71:a7:57:df:f5:43:38:e5:bb:06:6c:a5:a8:
99:da:16:19:a9:5b:6e:92:55:47:3d:ef:c6:a8:23:
29:8f:68:8c:21:9f:89:8d:c9:ed:8a:67:95:58:72:
d7:79:dd:41:23:df:56:56:e5:e2:84:1c:1c:a9:37:
4f:bb:52:f3:b8:32:ad:f7:76:78:42:0d:b2:1a:5f:
0d:6b:c4:70:ad:af:ec:e1:01:73:36:39:d3:bf:11:
f4:54:c6:b7:c5:4e:9f:27:1b:a7:43:17:2b:5f:19:
b6:27:c6:60:de:2d:01:55:13:5c:d4:4e:8f:3b:e2:
38:7a:9b:b1:4c:0e:8c:b5:50:5e:7a:ad:12:14:3d:
00:ab:ae:51:14:27:ee:a5:6f:e7:de:1a:b9:03:8c:
1f:5d:d3:7b:31:6b:3d:48:5a:18:6e:8d:cd:e9:ee:
c6:de:1f:19:24:d4:16:28:05:d0:77:a2:00:a1:b7:
db:67:77:ad:63:2c:7f:c1:ff:4a:4f:5e:28:12:29:
0c:1a:54:0e:1d:a7:d3:7f:13:61:f5:27:ab:dd:54:
83:f4:02:88:8a:6e:f2:da:35:d1:ea:6e:13:34:f8:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E4:28:18:8C:D1:11:03:27:90:FE:51:5E:F2:69:68:27:B1:B3:78
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1820EAA902111ED9693760DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.134.132.0/23
IPv6:
2001:df1:b040::/48
2401:8460::/32
Signature Algorithm: sha256WithRSAEncryption
49:2f:b2:bd:f6:58:b6:b5:d6:99:4e:7f:4c:c7:5b:01:2a:fc:
1d:42:ef:4b:8b:0b:96:9a:65:7c:97:8c:74:4f:c2:46:07:ab:
82:51:6f:65:3f:4c:eb:cc:50:21:76:81:68:5d:d6:fd:05:fe:
2c:91:1b:c5:49:7d:29:37:f4:71:33:9b:87:37:a3:bc:80:07:
44:37:17:58:71:b0:c3:df:9d:2d:e5:7d:4c:1e:57:63:dd:48:
04:c5:a6:7d:0b:59:a2:f4:f4:ac:2a:cf:51:76:a5:16:d3:77:
43:02:9f:70:de:cb:6e:fd:5f:46:05:23:f2:f7:bf:8c:eb:a7:
c5:ee:43:29:79:d3:60:2e:31:e4:42:c3:a4:ec:ca:1f:a6:1b:
e8:05:d0:3f:a4:73:5b:8e:dc:d2:c8:3b:68:47:8b:69:b6:74:
81:84:96:c1:d8:a4:0c:03:74:72:49:63:69:8a:26:1a:3e:b2:
88:98:00:ef:19:43:59:d8:8f:e5:3d:56:47:44:fc:57:a2:14:
8e:1e:80:43:7b:60:55:31:06:bf:c7:58:2d:5b:51:d6:60:c5:
c0:da:0e:53:ae:ff:0b:da:11:f5:a8:8b:dc:17:18:83:29:87:
f8:bf:76:96:2f:f0:cf:07:34:b0:27:67:29:0d:6a:d0:b8:e3:
01:b0:eb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:17 2026 by rpki-client