
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F36066086CB011F1B20C35898447A888.roa
File: F36066086CB011F1B20C35898447A888.roa (raw, json)
Hash identifier: 4zO4OTwMbi6cs0CEz9q9djqWruSIt/qlFOWMRq0Hv6Y=
Subject key identifier: 1F:F8:63:D9:C2:FA:48:C4:D7:09:0E:BB:7E:36:9A:AE:4F:6A:C3:4F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F305
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F36066086CB011F1B20C35898447A888.roa
Signing time: Mon 06 Jul 2026 17:12:56 +0000
ROA not before: Mon 06 Jul 2026 17:12:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141318
IP address blocks: 103.159.102.0/24 maxlen: 24
103.159.103.0/24 maxlen: 24
2406:cf40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62213 (0xf305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:12:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be218-9d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:84:eb:e0:ff:58:5a:ca:22:d3:46:2a:ea:d8:
0f:17:16:52:8d:3f:83:47:5a:26:a3:64:14:5d:64:
c6:26:89:45:99:fa:07:09:68:2e:2d:e6:dd:2a:36:
bb:4d:41:64:24:c7:34:64:fd:55:91:6e:73:b3:e5:
4b:a3:70:59:0f:ba:e3:32:b8:08:34:d5:54:06:22:
b1:62:68:44:02:9d:91:a7:ee:f5:6a:74:90:72:d4:
d6:ed:28:8f:60:37:08:8e:f7:d6:89:f9:3f:1f:6f:
7e:c8:81:23:69:8d:b6:ae:82:56:40:68:aa:2a:5d:
8f:e7:26:33:00:c2:10:8b:10:c8:c8:83:9a:f4:c0:
8f:67:2c:05:06:f5:f5:74:e9:64:90:6e:8d:d2:bd:
50:93:ca:16:ac:af:0b:ee:61:58:17:1d:54:fa:cf:
d9:0c:bd:60:61:ae:85:6a:8b:d1:e0:ac:cf:ff:ee:
be:03:02:7e:cc:84:ba:66:9b:ea:e0:95:cf:4e:b1:
bb:ef:0e:33:3d:d6:cd:b3:a1:40:df:7e:5e:e4:cd:
82:c8:8f:95:01:af:41:45:6b:0b:96:ce:94:92:c4:
6b:46:96:a8:89:41:2d:90:b9:2c:51:05:4f:b6:4d:
61:12:5b:e5:78:24:77:57:1f:00:f3:7e:f2:c4:db:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F8:63:D9:C2:FA:48:C4:D7:09:0E:BB:7E:36:9A:AE:4F:6A:C3:4F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F36066086CB011F1B20C35898447A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.159.102.0/23
IPv6:
2406:cf40::/32
Signature Algorithm: sha256WithRSAEncryption
58:49:9e:00:26:b9:0d:b2:61:44:c2:d9:6a:0d:f5:bc:8c:f5:
a7:75:97:ba:0c:e5:f5:52:aa:b0:87:43:88:af:57:c4:4a:67:
eb:c2:7b:18:4b:9f:5b:e2:60:b9:4d:1b:1c:e7:b4:f9:e3:3e:
90:5f:be:38:7a:53:1c:c1:9c:5c:35:1d:57:18:30:de:47:62:
cb:ef:34:03:9d:bb:df:1f:66:39:66:92:90:ad:13:f5:cf:3e:
ac:1d:e5:c5:74:8e:87:ad:15:10:44:dc:c2:8a:42:6e:bc:55:
52:6f:c5:3a:48:2b:47:8e:a3:89:c7:3b:c2:11:27:2e:6a:ee:
ef:0c:d5:0b:26:6c:eb:33:36:02:23:01:a0:03:ff:1d:62:5b:
ed:d6:ac:35:a4:92:30:14:ab:7a:41:2c:35:35:b1:e3:a7:5d:
45:1d:d3:be:c0:84:af:21:e9:7d:e3:43:c8:72:c2:e2:62:ec:
69:94:dd:9c:2a:04:a4:64:93:56:6b:5b:c2:f5:86:0a:76:39:
a4:5f:ce:1a:ad:3a:1d:13:11:8b:da:f0:f5:dd:f1:9c:6b:5c:
14:dd:b3:52:52:0f:e9:37:5a:3e:aa:2f:27:46:fd:51:0f:d5:
9b:bf:b5:5f:50:fd:d3:2d:e1:ca:c0:5b:a0:a3:ac:4a:76:d8:
e2:bf:48:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:23 2026 by rpki-client