
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8052DCC0E7811EEB9B42577C4F9AE02.roa
File: F8052DCC0E7811EEB9B42577C4F9AE02.roa (raw, json)
Hash identifier: kZjnOnjhswHX8OA7aSEzMjlGXWoZE60cZ+tQBr+9O80=
Subject key identifier: F7:96:8E:1C:B2:F0:05:C0:5D:90:1A:87:98:78:2B:55:80:D6:7E:EE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F5D1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8052DCC0E7811EEB9B42577C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:36:42 +0000
ROA not before: Mon 06 Jul 2026 17:36:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151117
IP address blocks: 103.145.166.0/24 maxlen: 24
103.247.241.0/24 maxlen: 24
2001:df2:5340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62929 (0xf5d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:36:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be7aa-4e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:2c:77:91:69:d4:55:e4:a5:33:4a:d5:b6:
7d:58:11:e3:80:ab:5e:fa:0e:e2:15:31:f9:81:2c:
a6:32:18:3e:45:68:52:b8:fe:40:9a:a4:09:3c:b2:
38:34:a4:ba:fd:54:55:3a:42:3c:46:75:bd:32:f7:
b4:12:a2:53:60:2a:7a:fe:51:14:f0:3f:19:8d:7c:
74:f7:14:a8:8b:46:49:75:cb:e2:2e:84:b3:52:18:
e1:50:f4:0f:d6:dd:4c:12:2b:7b:38:21:29:16:38:
1c:0e:2a:ef:85:70:6c:2b:6e:13:c2:59:b3:68:72:
d1:a1:39:c4:d8:b8:ba:3b:94:44:7f:52:d0:e6:67:
2c:86:44:06:40:e0:76:0c:d8:11:44:a1:03:da:55:
36:40:b6:8f:69:06:cc:d7:8f:27:f5:3a:ad:68:0e:
2b:08:6b:d2:1a:46:e0:21:e9:b7:e9:75:d9:b5:09:
d2:3f:03:89:26:98:5d:8c:78:90:fb:fd:bc:94:d3:
ed:10:4a:33:d3:eb:a7:ce:b2:fa:54:65:46:0a:b3:
11:8a:55:48:cf:51:e5:71:37:8a:40:1e:9c:58:c3:
86:07:4b:b6:0b:42:6a:e4:b6:6f:92:64:e6:9d:c1:
d5:25:93:b4:85:63:c1:d4:94:4e:4e:05:ab:86:78:
32:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:96:8E:1C:B2:F0:05:C0:5D:90:1A:87:98:78:2B:55:80:D6:7E:EE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8052DCC0E7811EEB9B42577C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.145.166.0/24
103.247.241.0/24
IPv6:
2001:df2:5340::/48
Signature Algorithm: sha256WithRSAEncryption
a6:c1:e9:3d:de:d6:04:39:24:8a:74:85:97:09:7a:15:57:17:
ab:6c:44:94:1c:1d:9a:55:b4:a2:18:55:88:75:58:e3:aa:7c:
06:0d:12:e7:94:b6:63:de:ef:52:70:ad:ba:7b:91:e0:2f:85:
69:03:b6:40:25:b7:86:09:57:4e:8f:fd:86:31:b0:10:98:0e:
f1:f4:83:38:fe:35:b3:a2:e4:15:42:72:86:85:43:77:4e:ca:
05:1d:08:19:28:56:39:4c:00:86:36:c9:90:f3:3d:a8:02:d5:
27:12:f3:ee:56:5c:5c:df:b6:d6:01:85:9e:09:b9:56:e9:07:
9f:d5:0b:2a:cf:7d:00:f7:d2:e7:23:52:ba:81:b8:c8:ba:a3:
81:aa:58:a3:8a:c6:0c:23:07:c1:f9:d8:e6:67:1d:20:29:37:
df:bc:d2:01:8b:8f:37:53:9b:81:7e:2e:3d:ef:bb:5d:15:89:
08:2e:6f:1a:6f:70:f7:cd:12:f4:5b:99:04:58:5b:89:fb:02:
f7:fd:91:45:ca:9f:b3:54:70:14:7f:33:4d:3c:d8:ec:ce:3b:
65:08:b6:75:f2:d2:c4:15:56:9a:4a:a5:d7:12:93:42:d0:d7:
cd:8c:56:53:1c:2e:62:20:af:6c:d9:a2:77:cc:01:01:7a:b5:
96:c6:f0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:14 2026 by rpki-client