
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3301DF6D28411EC9C3B000EC4F9AE02.roa
File: F3301DF6D28411EC9C3B000EC4F9AE02.roa (raw, json)
Hash identifier: hgEP+qWKXVo6gaJ8SmPL/6H2NzaLVQ9CLdfC7FkQ244=
Subject key identifier: CF:6E:D0:29:0B:18:56:FF:15:6F:CF:C5:0A:40:24:29:C7:39:D5:C9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F4CF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3301DF6D28411EC9C3B000EC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:28:17 +0000
ROA not before: Mon 06 Jul 2026 17:28:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149531
IP address blocks: 103.182.164.0/23 maxlen: 24
2001:df2:a4c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62671 (0xf4cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:28:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be5b0-576b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:91:b3:53:22:79:47:21:4d:df:25:55:59:
8c:08:4d:0a:1e:f2:e5:2f:19:45:47:d5:e9:2d:33:
66:27:a2:3d:ce:ac:68:6d:b0:ae:bb:dd:81:8e:43:
a0:83:19:8a:9c:93:07:86:b9:63:2b:4e:85:35:83:
ab:d3:5a:3b:15:36:f5:7a:00:cc:90:2d:a6:02:53:
b0:eb:ac:88:41:a3:4f:e9:89:a2:fe:a3:3c:42:3e:
cf:ee:36:c8:64:c0:61:2e:99:00:2b:40:15:c3:a9:
91:6a:61:6b:5e:e2:f0:fb:fd:fa:cf:6a:b9:4c:f1:
78:eb:f4:b5:9f:56:5e:56:36:01:e0:1c:1b:bb:e1:
8e:0a:7e:4d:da:89:63:dc:ba:93:11:4b:3b:02:74:
78:2b:00:35:48:ef:ba:90:98:93:ea:25:33:a8:4c:
d7:c3:b2:ec:01:2d:35:83:f9:73:1e:e6:ef:f6:45:
8b:49:25:8d:a7:f3:1d:6b:90:cc:78:6c:02:b6:f6:
0a:38:39:53:2e:63:2e:23:c9:c4:06:5b:cc:ea:e3:
8e:37:b6:ca:87:23:f8:21:29:bc:f0:12:3c:d3:4b:
69:e1:dd:ea:ae:b7:7b:6b:70:ea:10:ed:0e:67:4e:
87:d2:7e:07:af:2b:0e:7f:4b:fa:c5:be:a5:d9:51:
78:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6E:D0:29:0B:18:56:FF:15:6F:CF:C5:0A:40:24:29:C7:39:D5:C9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3301DF6D28411EC9C3B000EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.182.164.0/23
IPv6:
2001:df2:a4c0::/48
Signature Algorithm: sha256WithRSAEncryption
6e:3b:ca:0d:cb:d0:6a:98:d9:0f:a5:ca:1a:34:05:32:05:48:
31:c5:dc:28:e7:6f:0b:1e:26:4d:29:21:6d:34:6f:96:6c:59:
87:93:40:0f:fa:2e:50:4a:22:66:d6:ba:7e:58:eb:02:fb:b2:
7b:6c:f1:d0:77:3e:b7:75:e5:eb:5f:4f:d3:da:4c:5c:26:59:
61:7a:a2:3a:de:c5:94:6a:23:ab:6b:da:04:2b:56:9e:c6:67:
15:57:81:e9:04:fd:8c:26:b8:d4:c4:d8:8d:d5:96:8c:95:55:
2b:fa:1d:1a:6a:18:77:49:ed:76:28:36:08:e5:18:9d:43:9a:
78:bc:3e:75:77:fb:c9:5d:bf:06:e6:79:67:22:f7:75:28:dd:
80:44:91:14:c0:c1:a2:e3:bb:36:bb:ea:8c:3c:1c:9b:f7:f5:
d6:ac:5f:48:ae:bd:84:ca:00:0f:a0:9c:f2:0c:8a:98:2e:67:
78:cb:cd:c9:f3:42:7e:15:4c:ea:2c:51:ef:a9:40:56:58:be:
9a:06:b4:57:28:fc:83:14:e3:e8:99:21:35:2a:12:84:a1:43:
34:a6:99:85:a6:db:04:ee:6c:b3:82:29:1a:3b:2b:b5:23:9f:
4e:90:d9:0c:05:f9:a2:06:40:93:88:f1:d7:9e:68:dc:a6:8f:
76:3b:41:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:44:19 2026 by rpki-client