
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAD6E7AEB67411EDA32C9C33C4F9AE02.roa
File: FAD6E7AEB67411EDA32C9C33C4F9AE02.roa (raw, json)
Hash identifier: R6in3ieOkpIHdrKMDRMFLRiWy1G+Pt2aIN4xRVrBPWU=
Subject key identifier: 87:9A:C6:AD:58:AF:CB:4B:7F:71:A6:D5:D1:3E:85:24:38:94:97:A1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F5A0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAD6E7AEB67411EDA32C9C33C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:35:08 +0000
ROA not before: Mon 06 Jul 2026 17:35:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150633
IP address blocks: 103.83.28.0/23 maxlen: 24
2400:dba0::/32 maxlen: 32
2400:dba0::/40 maxlen: 40
2400:dba0:100::/40 maxlen: 40
2400:dba0:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62880 (0xf5a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:35:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be74c-f694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:d7:a8:4e:87:70:10:d6:bb:ef:b3:75:3d:
a3:58:9f:a5:4d:3b:3b:4f:4f:1e:80:b1:cf:92:ae:
29:bd:f7:8d:f8:41:be:29:26:6a:e4:f4:04:88:30:
29:3c:0f:d0:bd:ae:64:38:73:0f:6f:2d:52:9c:13:
27:49:cf:13:f4:a9:83:89:4f:e8:5e:15:5a:1d:28:
ee:a7:6d:1b:fd:e2:29:5c:86:58:5a:e6:4d:66:5a:
34:5f:0f:35:2a:a8:be:bf:d4:05:d7:37:46:a8:fe:
ab:1b:6d:13:9f:67:5c:ea:73:00:44:2a:f6:17:c4:
b3:42:fa:2d:e4:16:bf:96:93:88:42:71:5e:ac:e2:
d5:0d:69:86:d0:bc:3d:5a:94:62:69:60:10:6e:f4:
b5:f0:2a:89:42:95:27:7f:f6:ad:e6:52:f0:e1:55:
7d:fc:7e:ff:39:1f:8f:5f:50:89:64:17:75:7b:b3:
cc:e2:08:0e:88:d8:b5:57:af:23:1a:16:51:cc:14:
f8:91:1f:d4:a6:62:df:67:93:4c:1d:e6:eb:bc:bc:
62:fe:ee:8c:17:7f:25:43:80:9f:9e:da:f7:57:07:
16:e3:e7:30:1d:1c:e9:38:14:fd:f4:74:dc:61:7c:
e4:5c:8b:0b:79:3f:55:ff:5b:75:07:fd:13:83:c0:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9A:C6:AD:58:AF:CB:4B:7F:71:A6:D5:D1:3E:85:24:38:94:97:A1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAD6E7AEB67411EDA32C9C33C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.28.0/23
IPv6:
2400:dba0::/32
Signature Algorithm: sha256WithRSAEncryption
53:16:ad:14:0e:06:6c:4d:81:59:0d:f7:02:9a:84:8b:fc:f7:
b0:4a:53:b9:5c:23:84:7e:ef:ed:78:47:cc:a9:41:74:29:ef:
2b:58:8b:d4:a4:7a:11:7a:3f:d5:25:3f:4d:55:3b:14:c0:4b:
30:0c:35:3c:57:a3:80:b6:f3:3e:17:c7:a2:46:8c:44:43:9b:
4f:2b:23:28:ed:3a:27:71:bb:51:6b:90:c3:db:b2:47:7c:83:
c3:b1:f1:f5:56:64:8c:7b:79:aa:58:29:32:82:6e:04:77:64:
de:6d:3f:e1:d4:f0:76:72:34:41:0f:73:a5:fc:40:db:1c:84:
46:ad:75:16:d9:c9:b3:86:a3:cd:e5:33:54:c2:58:80:18:5e:
39:ab:5a:25:e7:0a:d5:02:f9:35:b8:59:9c:fb:e6:9b:70:33:
fb:98:28:c7:ab:1d:c5:fc:b4:57:ad:8f:6c:89:54:88:62:f5:
9b:9b:64:71:66:61:51:da:ef:11:79:a3:27:41:af:c3:96:de:
24:35:08:69:e0:7b:ac:de:96:5e:36:c3:d1:68:db:85:61:9a:
9a:09:bb:72:fc:6a:0a:06:3b:c4:3f:dc:2f:b3:9f:c1:c3:18:
55:94:76:f6:ec:7a:5c:d9:f2:bf:64:fd:dd:f2:ad:0b:32:58:
6d:92:e3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:44 2026 by rpki-client