
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/24ACC542BEB311EF9D1D0156C4F9AE02.roa
File: 24ACC542BEB311EF9D1D0156C4F9AE02.roa (raw, json)
Hash identifier: vpRDeMNhQkIYTA0SBwPIZ0YPPC8sQBOy5VAD2JuUjzQ=
Subject key identifier: 25:E4:6D:AC:B4:7F:F2:E3:53:FD:03:C1:C1:1C:92:62:F4:8A:BE:54
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F92B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/24ACC542BEB311EF9D1D0156C4F9AE02.roa
Signing time: Thu 23 Jul 2026 07:21:54 +0000
ROA not before: Thu 23 Jul 2026 07:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135269
IP address blocks: 103.75.80.0/24 maxlen: 24
103.75.81.0/24 maxlen: 24
103.111.70.0/24 maxlen: 24
103.171.50.0/24 maxlen: 24
103.173.42.0/23 maxlen: 24
103.216.68.0/23 maxlen: 24
103.216.70.0/23 maxlen: 24
157.119.200.0/23 maxlen: 24
157.119.202.0/24 maxlen: 24
157.119.203.0/24 maxlen: 24
2400:c7a0::/32 maxlen: 36
2401:d8a0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63787 (0xf92b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 23 07:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a61c111-3358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:4d:84:26:d3:c6:79:46:f4:c0:38:82:e9:
b7:4f:b3:65:03:5b:27:64:9d:93:6a:86:e4:bb:27:
d1:74:59:ea:11:1c:38:2e:bc:16:8d:f8:b6:c9:6e:
b6:85:ac:e8:48:97:20:37:fc:cf:82:76:01:6c:3f:
c7:ea:5a:b5:bf:ec:06:49:36:c7:4d:28:f5:d1:02:
eb:7b:43:3e:ca:38:34:40:14:10:9c:50:6e:42:3f:
65:e2:6a:9f:0f:42:bd:1e:29:ab:86:d9:75:0d:ae:
a1:83:9c:35:3a:56:cc:dd:95:c3:88:c1:b2:4b:ab:
f9:2a:dd:83:2a:3e:d0:c6:ea:71:91:1d:6a:95:55:
fc:bf:c0:c1:46:58:6b:2d:8e:62:a7:71:22:90:0d:
34:29:3b:31:0d:cd:46:77:9f:0b:5a:96:c1:fe:21:
3d:14:f6:d4:e8:7f:50:b0:3f:be:ec:d9:aa:f0:92:
23:33:4c:6a:fe:af:92:8c:84:1c:a4:44:c7:d3:b3:
e8:24:1b:a9:5a:77:d1:12:7d:e6:34:45:3a:2f:b2:
8d:df:e0:9a:e2:bb:f1:36:64:fe:9c:8f:d0:77:31:
93:67:e1:8d:4d:9e:45:0d:ae:10:f8:9c:cb:89:59:
c9:1a:66:07:8e:3c:70:d7:bc:41:5f:72:5b:55:ff:
98:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E4:6D:AC:B4:7F:F2:E3:53:FD:03:C1:C1:1C:92:62:F4:8A:BE:54
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/24ACC542BEB311EF9D1D0156C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.75.80.0/23
103.111.70.0/24
103.171.50.0/24
103.173.42.0/23
103.216.68.0/22
157.119.200.0/22
IPv6:
2400:c7a0::/32
2401:d8a0::/32
Signature Algorithm: sha256WithRSAEncryption
5c:ba:ae:c5:76:98:03:8a:96:01:79:e5:5e:1e:53:88:ae:de:
de:12:ca:03:6c:68:0e:f8:55:d6:68:93:4e:5f:50:2a:06:32:
a9:aa:ae:ec:65:91:30:e9:dd:91:42:ab:b5:e3:7a:a2:c9:b2:
da:42:4d:80:f5:d1:de:40:de:0a:5d:5b:31:a8:ae:36:81:68:
a1:ff:3e:6b:72:b2:8e:47:1c:c7:59:5a:1d:f4:15:3b:04:e9:
73:eb:9e:98:69:6d:7e:ca:b4:5e:fe:6a:0c:e9:f9:2a:eb:75:
2e:a3:cd:e2:cb:1b:9f:7c:53:1f:54:f2:64:3d:8b:9c:2d:76:
0b:6a:e1:44:3a:b8:06:a5:e5:c4:e7:13:ea:9b:35:43:80:6a:
9f:f6:5a:3f:0a:0c:66:dd:65:fd:bd:14:c5:0d:e8:6f:f3:78:
41:96:b5:90:b9:aa:01:57:67:b6:fd:82:5b:9b:72:1e:1a:00:
08:de:8c:4a:a7:33:04:26:17:36:ef:9b:c1:00:a8:e7:b5:ce:
be:b6:2a:ce:b2:c3:06:b4:ad:4f:fe:7e:27:aa:97:55:06:9e:
59:d3:6b:1d:8a:56:4c:fd:93:3f:ef:de:b1:c2:b2:8e:fc:3c:
69:85:a9:bd:fb:17:7c:e1:61:22:41:e9:17:b7:d8:58:08:13:
c5:67:6f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:52:23 2026 by rpki-client