
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F45C1B625B9E11EF86C6DE5BC4F9AE02.roa
File: F45C1B625B9E11EF86C6DE5BC4F9AE02.roa (raw, json)
Hash identifier: oqB+CZsT1XKRIzjwdbFJo0njJCJiPItVE2v3S8EhvSQ=
Subject key identifier: 03:5F:20:AB:2C:4D:AB:21:DB:81:23:B9:1B:A0:9A:D4:53:67:0C:EF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EE34
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F45C1B625B9E11EF86C6DE5BC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:32:31 +0000
ROA not before: Mon 06 Jul 2026 16:32:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132961
IP address blocks: 103.224.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60980 (0xee34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:32:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd89f-1bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:55:61:f8:7a:3d:80:be:33:82:dd:65:8c:
b0:e6:24:9c:fe:4b:80:0a:1b:04:5a:75:91:d8:16:
f8:9e:a4:d5:44:c0:81:f7:6f:77:d5:dd:9c:57:2c:
7b:01:e6:8f:c4:64:87:7f:bf:cb:f3:dd:6b:e7:ab:
41:c3:b2:6e:66:24:63:54:0a:84:0c:16:a7:8d:d3:
d7:19:3d:3d:08:24:65:05:29:3c:cc:4d:13:9f:14:
16:8c:0a:1e:3e:c2:f9:05:e5:a6:94:2f:bb:c8:7f:
05:bd:bf:ab:74:bf:19:0d:85:54:9b:54:68:5c:ae:
39:83:54:87:5b:fa:3d:b0:e7:c0:99:6f:3f:22:e1:
17:27:c5:ca:2c:98:7d:9c:55:7a:3a:39:9b:a3:44:
e3:dc:a0:7c:68:1b:d4:3b:e8:30:92:08:9d:79:c2:
49:f1:b3:77:f5:cd:63:ae:d9:54:25:0e:d6:c7:78:
f3:a4:85:44:c0:16:c6:da:27:fa:e0:94:e6:f1:69:
74:1d:60:98:28:b2:d2:25:0f:50:19:a7:86:ae:f9:
b7:dc:74:13:55:f0:a9:97:7d:f0:7b:81:ac:5e:dd:
f4:57:a3:d3:53:28:99:4f:f5:4f:06:1c:c2:6d:fe:
90:26:ad:93:84:28:46:15:cc:46:d5:66:a7:9a:7b:
72:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5F:20:AB:2C:4D:AB:21:DB:81:23:B9:1B:A0:9A:D4:53:67:0C:EF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F45C1B625B9E11EF86C6DE5BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.224.36.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:cd:0c:84:aa:c7:6d:89:97:c1:b3:10:a6:d3:39:3a:99:3f:
3d:c1:74:bb:c6:4c:77:b5:1a:2b:99:be:a6:dc:e9:ee:b2:08:
b4:e7:98:4c:61:5e:a1:06:e7:ad:9c:42:da:e3:c0:aa:d1:11:
7e:b8:1a:45:f5:ec:ac:dd:4d:22:40:97:d2:c7:c5:0b:bb:0a:
c1:46:98:54:70:96:d7:56:dc:a9:6c:3c:b0:65:79:72:22:ee:
cd:44:9d:75:51:e6:a9:ff:71:fd:a7:a0:b7:e3:ad:92:53:d0:
bb:ce:a0:f5:57:cb:32:3b:3e:66:e8:03:2d:04:97:46:a2:62:
2c:67:33:08:9b:15:ae:53:7d:46:b9:3a:1f:22:a4:d0:f6:68:
0a:52:e8:40:84:30:90:8e:2d:26:de:7c:bc:ff:5a:29:0b:2d:
9d:be:0c:c3:35:dd:f7:62:58:bd:35:15:cf:2a:ba:8f:eb:31:
a6:9c:49:1f:40:c2:5b:2c:a2:c1:bb:5a:30:84:b6:fe:5b:a2:
b4:bb:75:12:f4:e7:6f:f7:71:a3:84:47:27:4b:a2:d4:e0:72:
71:a9:49:47:41:aa:c8:25:52:86:f9:bd:c5:39:99:1f:b9:bf:
34:16:a2:34:3c:bc:96:4a:79:86:7d:07:c9:cf:ed:c0:7e:57:
30:a1:04:f4
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAO40MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2MzIzMVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmQ4OWYtMWJmNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKmnVWH4ej2AvjOC3WWMsOYknP5LgAobBFp1kdgW+J6k1UTAgfdvd9XdnFcs
ewHmj8Rkh3+/y/Pda+erQcOybmYkY1QKhAwWp43T1xk9PQgkZQUpPMxNE58UFowK
Hj7C+QXlppQvu8h/Bb2/q3S/GQ2FVJtUaFyuOYNUh1v6PbDnwJlvPyLhFyfFyiyY
fZxVejo5m6NE49ygfGgb1DvoMJIInXnCSfGzd/XNY67ZVCUO1sd486SFRMAWxton
+uCU5vFpdB1gmCiy0iUPUBmnhq75t9x0E1XwqZd98HuBrF7d9Fej01MomU/1TwYc
wm3+kCatk4QoRhXMRtVmp5p7cqECAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQDXyCr
LE2rIduBI7kboJrUU2cM7zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y0NUMxQjYy
NUI5RTExRUY4NkM2REU1QkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmfgJDANBgkqhkiG9w0BAQsFAAOCAQEAsM0MhKrHbYmXwbMQptM5
Opk/PcF0u8ZMd7UaK5m+ptzp7rIItOeYTGFeoQbnrZxC2uPAqtERfrgaRfXsrN1N
IkCX0sfFC7sKwUaYVHCW11bcqWw8sGV5ciLuzUSddVHmqf9x/aegt+OtklPQu86g
9VfLMjs+ZugDLQSXRqJiLGczCJsVrlN9Rrk6HyKk0PZoClLoQIQwkI4tJt58vP9a
KQstnb4MwzXd92JYvTUVzyq6j+sxppxJH0DCWyyiwbtaMIS2/luitLt1EvTnb/dx
o4RHJ0ui1OBycalJR0GqyCVShvm9xTmZH7m/NBaiNDy8lkp5hn0Hyc/twH5XMKEE
9A==
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:57:09 2026 by rpki-client