
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/C0681BF2CF4911EF8531B085C4F9AE02.roa
File: C0681BF2CF4911EF8531B085C4F9AE02.roa (raw, json)
Hash identifier: FuAuOSeZqyhv7xBUkLpYtgZN4CG+Zmtssp+xgIjrFpk=
Subject key identifier: 94:F6:47:D9:B6:D8:96:C4:DB:E2:B9:97:57:4E:94:00:63:1A:4E:76
Certificate issuer: /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial: 07CB
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/C0681BF2CF4911EF8531B085C4F9AE02.roa
Signing time: Mon 06 Jul 2026 22:23:27 +0000
ROA not before: Mon 06 Jul 2026 22:23:27 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 932
IP address blocks: 43.254.216.0/22 maxlen: 24
103.238.224.0/22 maxlen: 24
103.244.88.0/22 maxlen: 24
116.206.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:11:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1995 (0x7cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Validity
Not Before: Jul 6 22:23:27 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4c2ade-9954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:49:46:aa:8d:19:24:0f:62:b7:d4:b0:2c:
65:51:fd:4f:44:68:f5:f2:1f:cf:ad:8c:dc:d8:1e:
9a:79:1a:e5:37:85:5c:61:dd:58:5b:00:20:8e:14:
d1:7d:f9:e3:a9:c1:43:d8:ac:42:c4:98:b8:04:f4:
9f:c2:54:58:26:b6:0c:1e:46:e5:99:00:31:d5:cf:
b6:d9:8b:77:93:6f:49:d5:04:9e:0c:95:9e:d0:58:
48:c9:e8:cc:d3:66:a8:d9:55:d4:bb:ea:f8:b3:18:
85:68:72:7d:ad:7d:c9:70:ac:47:cd:16:a1:75:b6:
7b:ce:84:75:3e:7e:8a:2c:97:b7:f3:70:7d:97:52:
91:71:ed:9e:2a:8e:15:60:9e:90:db:8b:88:48:33:
5c:a7:35:d1:2f:f2:87:13:2c:b7:24:a7:ba:bb:df:
4a:a5:dd:c0:17:54:17:cf:f4:4d:cd:f2:5e:48:fc:
7a:60:df:be:47:5d:b6:60:a0:13:8f:a7:b1:8b:49:
47:b3:6c:8e:0f:ca:d3:6f:bc:4d:1d:2a:c9:0d:3d:
54:40:27:0d:81:3f:71:fe:37:79:5e:3f:e1:ee:08:
36:6a:ae:27:86:17:e3:23:72:24:87:b1:59:49:8a:
e0:12:62:ec:c8:e9:15:8a:37:a9:ad:a3:09:94:49:
35:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F6:47:D9:B6:D8:96:C4:DB:E2:B9:97:57:4E:94:00:63:1A:4E:76
X509v3 Authority Key Identifier:
keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/C0681BF2CF4911EF8531B085C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.254.216.0/22
103.238.224.0/22
103.244.88.0/22
116.206.176.0/22
Signature Algorithm: sha256WithRSAEncryption
90:01:9c:f1:3b:b2:f4:01:b0:b6:98:3b:8c:53:fe:ec:e2:6b:
b9:48:0d:1d:85:1d:69:00:57:83:18:ff:69:8b:0c:b6:c7:49:
4b:17:92:77:de:39:48:68:9e:a3:60:c2:e3:82:b1:28:1b:15:
56:f8:8e:a9:a2:11:8d:ef:e1:c4:67:83:b9:1a:1a:ed:49:1b:
ad:cc:ad:70:5d:45:b3:32:15:ba:56:14:8f:1c:14:5e:fe:17:
67:0b:35:83:07:54:15:5d:4a:81:70:54:66:c5:1a:87:68:12:
b7:54:8e:13:d0:d7:31:b9:dd:db:63:34:38:0b:c0:30:43:24:
f0:cb:5c:13:c7:9d:81:f5:d6:f3:e9:74:e3:a3:7c:90:59:28:
4a:27:e7:8c:8e:74:8a:95:41:65:9d:e0:c1:e9:aa:71:e4:9c:
2a:2b:f1:aa:e7:b4:7d:e1:f7:a6:b0:6e:62:bb:b0:a1:26:93:
22:d4:24:47:db:69:06:1c:bb:09:f7:d5:c1:5c:e9:ca:68:43:
b2:60:e2:9d:d3:21:d0:23:29:52:f1:96:f4:2f:9a:98:5f:f0:
03:86:39:8d:9b:a8:b3:9b:e2:40:86:2d:7b:6c:75:36:42:1a:
c1:9b:b3:fc:f2:49:79:1d:a3:c9:b4:75:16:26:9f:85:05:67:
66:66:58:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:27:02 2026 by rpki-client