
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa
File: 4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa (raw, json)
Hash identifier: 8hPdJ+q+s4j61afe+3Feh7lBjaDcubwrfYqwZ4evmJc=
Subject key identifier: DA:24:EF:3D:4C:F6:36:68:E1:44:96:A4:4F:A8:1E:4D:D6:36:F4:EB
Certificate issuer: /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Certificate serial: 1A78
Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa
Signing time: Wed 22 Apr 2026 17:20:46 +0000
ROA not before: Wed 22 Apr 2026 17:20:46 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 135523
IP address blocks: 103.70.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:24:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6776 (0x1a78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Validity
Not Before: Apr 22 17:20:46 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69e9036e-0e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:70:e8:b7:de:9f:31:34:23:0e:1f:dc:24:c1:
36:d5:c0:61:c8:a2:47:01:53:7c:a2:d5:3a:b6:57:
95:91:39:95:8b:f0:4b:eb:6f:68:84:25:7c:f2:77:
da:07:9d:3b:ac:dc:7e:48:d9:0c:01:c8:77:8f:60:
d6:5c:74:fa:d3:8a:23:bb:12:9e:ff:ec:4c:75:b9:
eb:d3:c0:49:a2:d1:b0:a8:17:85:77:58:7f:ab:00:
97:7e:5d:d8:23:7f:44:d5:c4:11:17:b9:e3:55:ea:
78:c0:d7:16:3d:b2:84:54:47:f1:40:58:c1:70:af:
4a:97:d0:66:3c:a9:f5:fb:15:0a:2e:1e:74:11:62:
5c:88:77:ca:9d:bc:7d:f3:21:e2:14:c9:d2:f5:35:
d9:59:63:a2:f9:1f:8b:36:34:2b:4e:93:56:4e:14:
48:75:f1:3b:e7:90:1b:83:c9:5f:7f:fe:19:03:11:
07:6d:5e:24:04:c7:69:26:b5:c7:87:50:d2:cd:b4:
c0:34:2d:41:6b:90:18:9a:5a:bd:f5:e6:5c:e0:f8:
c0:fa:59:3c:c3:c3:e5:9e:14:26:a5:39:e2:0a:9d:
11:cc:e9:f3:31:4e:a5:04:7d:1d:b1:e3:49:f8:af:
6e:ab:f2:23:f7:43:41:cc:84:5b:56:b1:33:9c:a1:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:24:EF:3D:4C:F6:36:68:E1:44:96:A4:4F:A8:1E:4D:D6:36:F4:EB
X509v3 Authority Key Identifier:
keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.70.251.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:e9:36:06:9c:b6:5c:0b:b1:91:3c:cc:05:a4:ff:7b:93:6c:
a3:e8:11:a0:f5:8c:48:13:37:11:27:ba:55:0b:2d:f5:aa:d0:
65:0f:fc:bc:74:66:ad:00:0d:9f:ec:6a:98:60:3c:84:28:db:
45:c2:dd:1b:f7:17:42:f6:83:ad:4c:50:f8:e0:a6:2d:92:19:
76:df:00:7e:e4:17:e5:0b:cc:b2:20:6b:77:f9:39:14:7b:79:
15:66:9c:27:5a:33:40:b9:e2:e6:a6:5a:bf:bd:79:27:eb:65:
8e:69:ca:bc:24:73:5f:85:cb:34:34:c5:0b:00:87:42:e7:6b:
fc:97:0c:15:e6:43:09:62:3a:07:a7:be:9c:cf:b0:4b:c9:36:
cd:80:5f:5b:71:07:50:86:0b:72:7e:58:f7:93:02:11:0d:be:
76:60:a0:61:3a:b0:9c:01:de:2b:49:00:6c:fe:9c:4c:fb:8c:
4b:e1:68:f2:fc:9f:dd:fd:2e:25:95:47:9d:ed:d3:7d:b3:be:
d7:c4:54:77:9e:9c:93:d6:88:02:72:ec:5c:76:42:ba:80:96:
f8:57:2e:68:b0:b7:63:7f:6f:86:5e:63:fb:af:b6:03:1f:ac:
a6:a1:ba:19:a8:af:fb:c9:fd:9d:e6:44:d3:2d:f6:84:6f:e2:
ca:c5:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:27 2026 by rpki-client