
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D97AC950ABDD11EDAE837666C4F9AE02.roa
File: D97AC950ABDD11EDAE837666C4F9AE02.roa (raw, json)
Hash identifier: jKcbK4IEw6IX5DBWAj2PfbXbqhFpVe65Ce73aszMZHQ=
Subject key identifier: 65:5C:DE:9F:2B:09:44:79:E7:44:36:88:4D:E1:79:2B:B2:32:52:09
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 05A5
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D97AC950ABDD11EDAE837666C4F9AE02.roa
Signing time: Tue 07 Jul 2026 01:27:36 +0000
ROA not before: Tue 07 Jul 2026 01:27:36 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 17819
IP address blocks: 203.32.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Jul 2026 01:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1445 (0x5a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Jul 7 01:27:36 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4c5608-bf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:99:96:01:dd:13:b2:bf:28:f7:ba:7b:06:22:
34:62:4b:bb:c5:12:6a:0c:b5:f0:87:ba:55:b8:de:
71:be:26:e3:aa:22:30:ce:da:d9:81:c9:8e:2a:a8:
35:00:cc:26:8b:b3:dd:44:4d:0b:2a:51:af:05:8a:
65:96:5d:63:fa:7b:39:b3:75:9b:34:d3:5f:c1:b7:
de:62:50:fa:a5:85:8c:05:77:97:1f:2d:b8:03:cc:
d7:dc:71:94:b1:2a:26:8a:d6:2f:27:93:88:dd:af:
38:68:a0:3d:38:1b:38:42:1d:f4:b0:07:8e:05:75:
00:86:3d:41:31:84:83:51:8c:f8:5c:20:f4:b8:13:
c8:d1:bf:c3:e3:44:29:55:15:53:1a:80:46:ef:05:
76:8c:52:bf:33:84:41:a0:2f:6d:00:04:f7:6f:ec:
3e:90:7a:65:8e:b6:86:44:92:31:5d:1e:b6:e8:1b:
e6:b2:dc:8b:f6:04:9e:21:4a:88:d2:0a:10:f1:95:
9c:dd:3e:f5:8f:c5:00:d0:b3:f4:57:f4:2d:69:f2:
2a:fb:c7:8a:19:04:a0:20:b7:b3:41:31:e6:7f:f0:
53:88:24:fe:fd:fe:89:e0:00:fa:db:24:6f:67:7a:
db:09:e8:04:34:9f:13:66:15:57:26:89:c5:df:5b:
78:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5C:DE:9F:2B:09:44:79:E7:44:36:88:4D:E1:79:2B:B2:32:52:09
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D97AC950ABDD11EDAE837666C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.32.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:a3:2f:a7:e0:70:57:ca:1a:a4:b7:74:4a:82:1b:be:c1:b4:
bf:4a:12:62:5b:a4:4b:17:76:0a:b6:8c:c9:52:ce:38:e6:04:
97:29:96:09:e3:43:a0:13:cf:8c:08:34:af:9b:4b:1a:41:f0:
8e:93:e6:5d:21:93:46:f4:67:69:63:5c:dc:3f:11:d6:0c:92:
f6:26:87:5f:0b:98:85:5f:ea:85:f7:a9:88:13:08:9d:c9:3d:
44:23:1d:74:1b:a9:91:77:da:15:7c:57:aa:b3:88:19:32:a4:
71:74:74:c9:60:bc:f9:bc:ab:14:da:bf:b5:9a:20:d0:04:d2:
5e:81:73:47:2c:5c:34:06:aa:c2:de:61:29:37:37:39:92:22:
5f:ad:1a:6e:42:9d:5f:fe:9d:a8:24:e8:81:58:3d:34:94:9f:
af:ed:f4:cd:61:97:76:02:1c:15:20:54:58:5b:4c:50:76:f8:
a4:0a:0b:8b:f7:6c:4d:5e:87:61:c2:7d:3a:b0:13:43:ff:dd:
ec:6b:95:96:d4:aa:a8:c5:83:f0:17:94:3c:5f:7c:85:17:61:
94:69:b5:8f:6b:59:80:a4:e3:6d:25:40:4d:94:c6:f6:60:a8:
61:67:9e:e5:9e:9f:b1:42:7f:56:ea:d7:19:5f:4a:c1:29:7f:
22:19:bc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 10:51:48 2026 by rpki-client