
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa
File: 4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa (raw, json)
Hash identifier: nrJDd2QA1UNVG+vt7JNddT/n01oYQdaHjEbfsoIybfQ=
Subject key identifier: 33:7E:A1:2A:9A:9E:45:AD:77:9D:E3:14:09:AA:38:70:68:A7:72:6F
Certificate issuer: /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Certificate serial: 1AAB
Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa
Signing time: Wed 22 Jul 2026 17:17:31 +0000
ROA not before: Wed 22 Jul 2026 17:17:31 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 135523
IP address blocks: 103.70.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6827 (0x1aab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Validity
Not Before: Jul 22 17:17:31 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a60fb2a-75d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:83:95:7a:65:76:82:05:65:bc:42:ca:dc:
54:89:f7:7e:b2:97:65:66:a5:70:db:5c:b6:32:08:
05:e6:7e:89:4a:37:53:6d:29:1a:01:aa:ca:f0:f5:
c8:9c:3e:47:62:dc:b1:cd:b7:c9:e4:07:72:a8:7a:
3d:23:ea:49:54:fd:83:c2:6a:93:a7:f5:96:9d:13:
f5:fd:87:49:5c:09:e7:c5:18:af:1a:0f:99:df:db:
99:ee:ac:f9:5a:d0:f4:97:d6:6f:4e:56:ad:b7:be:
25:f8:98:fd:3c:87:0c:77:c4:7d:61:6d:a1:a5:54:
a3:0b:9c:2a:b3:4b:e4:de:10:30:c6:54:69:9f:6f:
72:5e:ee:ca:bc:43:90:0d:6e:31:bb:db:31:39:5e:
cb:ba:34:1f:f0:24:0c:e9:57:2e:70:57:96:23:be:
5d:a2:59:d1:5e:75:b4:42:9d:c3:0c:1e:2d:11:90:
c1:1e:26:f3:5a:32:8e:23:60:e9:90:8b:4c:bf:8a:
13:d6:c0:f2:d0:42:6f:05:bd:c8:01:83:4d:88:b9:
d6:59:51:af:82:8c:ac:3e:94:74:b8:3f:b5:b4:d2:
54:ca:fa:e7:e7:44:11:ca:76:2b:e9:e9:86:8a:0e:
27:57:12:a3:cf:19:24:35:97:ca:cc:89:d8:7c:75:
1f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7E:A1:2A:9A:9E:45:AD:77:9D:E3:14:09:AA:38:70:68:A7:72:6F
X509v3 Authority Key Identifier:
keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.70.251.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d9:70:6d:73:3f:f5:8c:71:37:83:06:20:e8:03:3e:d7:e7:
c6:83:dd:1e:cd:d5:1a:7b:25:7d:cf:8e:79:b8:89:7c:eb:91:
2b:ba:d4:ed:8c:5b:d1:fb:b4:9c:c8:fd:81:72:5a:9c:52:c0:
f8:43:c0:f3:61:be:f5:e4:f3:46:ca:48:a6:09:01:69:0f:f9:
a9:5a:c4:96:11:0b:8f:95:08:da:9e:c6:d6:51:fa:c2:7f:b3:
0f:30:06:67:e6:61:15:91:cb:af:68:04:f9:f0:b6:f8:c2:29:
61:9a:29:90:c1:f9:63:f4:e6:7b:d9:1f:80:69:16:75:80:56:
89:92:91:75:a8:1b:b6:17:da:9e:b0:73:d7:96:05:92:f9:4a:
dd:21:30:72:25:76:05:d0:dc:d1:de:56:07:9a:4b:7d:10:d1:
69:6b:e4:f2:0a:5b:aa:6c:da:97:b3:b7:73:f6:92:23:2c:84:
49:79:79:17:2b:51:a5:57:4b:43:1c:3f:5a:25:4d:e6:5c:9f:
7a:6c:9b:b9:1c:0b:21:79:d5:31:f0:e0:89:cc:08:99:fc:52:
bc:d7:68:8f:e5:4e:fe:7f:54:4e:f8:73:55:40:03:74:7d:d8:
bf:57:d0:db:10:12:28:e9:50:57:50:0a:43:d9:2a:f4:f8:63:
da:5c:b1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:37 2026 by rpki-client