
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F5C7D0AEB27B11EDA534877FC4F9AE02.roa
File: F5C7D0AEB27B11EDA534877FC4F9AE02.roa (raw, json)
Hash identifier: K3/f86B6MpnFX4TpPbrjztDH7JZDQRuL56ALxLRYfWY=
Subject key identifier: 3C:7E:5D:7A:9A:E6:47:4C:71:63:13:6A:16:38:30:65:A4:4C:44:6C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F56B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F5C7D0AEB27B11EDA534877FC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:33:29 +0000
ROA not before: Mon 06 Jul 2026 17:33:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150570
IP address blocks: 103.91.224.0/23 maxlen: 24
2001:df2:2c0::/48 maxlen: 52
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62827 (0xf56b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:33:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be6e9-378f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:e3:9b:b4:ed:e0:a8:fc:ce:26:0a:50:06:
2c:de:3d:58:59:ac:97:7a:ba:5c:d2:06:45:74:2a:
ad:0c:7e:41:45:f7:f8:bb:d2:2e:0a:f0:4a:1c:90:
69:e5:a3:68:d5:61:29:90:9d:0f:38:67:9d:d9:e9:
5c:ba:f7:82:5e:db:6f:a7:57:c0:e6:74:b1:06:fa:
56:f2:c1:7d:d8:ab:2d:eb:c9:7c:ba:ef:81:a0:a6:
83:b5:07:e7:1d:70:3c:63:de:d2:57:8f:60:7b:58:
5e:0a:10:e8:2f:0f:2f:36:d0:77:0e:33:b5:44:bd:
c2:81:80:f4:e5:37:9b:5b:aa:2f:a2:80:84:03:18:
e7:1f:b1:0b:8e:2c:63:c8:65:cf:26:a3:49:7f:25:
b7:bd:1c:31:1b:b9:a9:99:08:d5:fc:6c:34:f1:21:
72:66:1e:6a:34:13:41:73:9c:09:55:34:f8:0a:d7:
0e:c3:0f:43:87:35:1f:4e:8f:49:15:e8:9d:e8:99:
ec:f8:c7:0e:af:f3:0d:26:68:f9:00:48:25:17:f7:
99:41:b6:ab:03:0a:05:6d:5e:57:c5:23:01:c7:46:
67:f6:dd:a5:2f:7f:39:6f:bb:1b:51:61:36:8a:db:
bc:b9:06:53:6b:fb:fe:c0:e7:c7:87:56:f5:8a:b7:
44:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7E:5D:7A:9A:E6:47:4C:71:63:13:6A:16:38:30:65:A4:4C:44:6C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F5C7D0AEB27B11EDA534877FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.91.224.0/23
IPv6:
2001:df2:2c0::/48
Signature Algorithm: sha256WithRSAEncryption
2e:9c:b6:53:e8:2e:24:b6:3e:f1:3a:2f:36:32:31:91:4c:d0:
e3:45:84:2d:ee:50:61:53:fc:7a:cb:2c:58:13:a1:09:63:ca:
43:c8:22:9f:80:3d:d0:fc:55:0d:80:a8:6c:ef:ca:de:50:79:
81:a6:9e:3e:c8:59:af:27:93:30:6d:f0:cc:df:11:34:d3:3b:
9a:85:39:b0:be:9d:66:ea:78:c7:35:d0:62:24:35:7d:be:c7:
b5:ee:25:93:2f:52:c4:4f:4a:8e:78:49:e1:4d:f5:ca:fb:89:
bd:fe:b3:bb:2d:c9:38:57:fe:0f:61:9c:e8:aa:f8:28:3a:18:
19:4e:1b:6b:ec:e4:4d:78:3e:72:6c:70:a5:f5:52:e7:fc:f8:
22:6c:2d:05:35:35:b2:7c:d8:24:e3:92:e1:2d:47:ff:aa:fa:
3e:d8:c5:e0:79:03:30:8a:f4:bb:0d:12:c5:67:ba:44:fb:1a:
cd:87:5f:57:38:33:63:d3:94:6e:ea:8d:45:b6:b9:bf:7e:be:
f8:3f:78:23:84:85:91:2a:18:be:a0:79:ea:e3:63:e9:45:d6:
7d:af:0e:f2:db:de:81:ba:66:86:60:55:7e:ab:ae:74:2f:fe:
18:3b:15:71:e4:a1:ac:e6:e8:c3:27:32:da:40:fc:39:7f:13:
2c:36:38:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:10 2026 by rpki-client