
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52182E6E2A5111EF8CAAC111C4F9AE02.roa
File: 52182E6E2A5111EF8CAAC111C4F9AE02.roa (raw, json)
Hash identifier: loIsr75eRkdLK9xgOc3CcOa+3Y32Mxvq2QS/aMncKco=
Subject key identifier: F2:A0:DC:7F:5E:2D:31:3E:59:43:64:83:F9:D1:66:79:25:39:16:B2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EDEA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52182E6E2A5111EF8CAAC111C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:29:57 +0000
ROA not before: Mon 06 Jul 2026 16:29:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132335
IP address blocks: 103.87.172.0/24 maxlen: 24
103.152.79.0/24 maxlen: 24
103.156.20.0/23 maxlen: 24
103.165.118.0/24 maxlen: 24
103.165.119.0/24 maxlen: 24
103.172.92.0/24 maxlen: 24
103.173.68.0/24 maxlen: 24
103.180.163.0/24 maxlen: 24
103.182.163.0/24 maxlen: 24
103.187.238.0/24 maxlen: 24
2001:df0:c1c0::/48 maxlen: 48
2001:df7:6880::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60906 (0xedea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:29:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd805-6da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:8d:61:c7:11:c0:58:15:17:62:2c:d1:49:
3d:5c:cc:b8:06:02:c2:d5:a4:bf:8c:f7:b0:5e:1e:
75:64:c4:cd:be:64:e9:95:e7:3f:77:81:25:88:9d:
3f:65:fe:ab:fa:56:d0:01:fe:f6:ff:93:a9:f6:0d:
f9:78:d1:69:59:c6:1f:f2:f0:4f:84:53:c7:a6:cc:
d4:e3:97:47:bf:05:07:c9:78:da:b7:17:2a:4e:59:
f6:04:df:df:7f:2d:34:67:d3:98:ca:45:f4:47:7f:
34:51:67:48:0c:27:2f:16:43:ab:d0:8b:c7:30:83:
68:44:99:e1:4f:1f:14:3d:ce:25:6a:54:30:87:fb:
86:ab:ef:4c:bb:76:bd:22:05:b0:03:76:1d:cf:67:
45:59:65:42:03:4a:53:cb:f7:8d:35:0b:d1:b9:ef:
57:42:9f:cf:42:3b:59:1e:b4:73:b7:14:b7:26:57:
fa:6a:21:ae:16:49:a4:15:ba:5c:9d:f6:b0:58:ea:
75:85:10:b0:cc:bc:61:7b:4d:9c:5f:e2:55:e3:19:
ea:5a:14:85:02:44:23:1a:52:13:7b:4c:ff:cf:76:
ba:0d:55:33:17:47:8e:7d:5a:3a:09:18:e5:b3:dc:
66:3f:f7:22:22:40:2f:39:d3:03:df:ae:9b:1a:83:
86:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A0:DC:7F:5E:2D:31:3E:59:43:64:83:F9:D1:66:79:25:39:16:B2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52182E6E2A5111EF8CAAC111C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.87.172.0/24
103.152.79.0/24
103.156.20.0/23
103.165.118.0/23
103.172.92.0/24
103.173.68.0/24
103.180.163.0/24
103.182.163.0/24
103.187.238.0/24
IPv6:
2001:df0:c1c0::/48
2001:df7:6880::/47
Signature Algorithm: sha256WithRSAEncryption
4b:74:ba:ce:86:1f:7f:70:72:5d:10:3a:77:51:4a:60:ba:d0:
ef:ea:c2:92:79:aa:8d:ed:ab:d2:cc:d2:19:a3:ad:2f:a3:1c:
f2:8c:35:f6:95:8e:af:11:8b:aa:84:37:ed:37:03:a6:7a:5c:
b7:c9:23:50:bf:dd:16:19:43:77:2b:64:d2:df:77:1f:9a:41:
54:e7:45:92:5c:0c:0e:20:ec:e8:42:89:a1:67:1e:a0:3b:c0:
3d:c6:ae:0f:d4:d6:68:a3:29:2c:1b:7e:13:db:cf:e9:c5:c0:
4f:0c:94:7a:2f:f4:b5:05:fa:a4:e5:60:f3:f3:ac:ff:9a:13:
b9:d3:c8:49:aa:db:36:26:d1:b2:85:17:f4:82:b9:bc:2b:68:
f0:67:54:ec:b9:e3:cd:b7:6d:e5:cb:18:91:51:8a:9a:c2:05:
e8:7c:1c:68:ad:0a:68:12:35:7c:41:d4:a2:4c:97:01:48:26:
d2:30:fe:68:c9:c2:43:a4:b4:6c:f3:68:fb:c4:71:2c:f1:da:
62:cd:33:81:4f:fa:16:f6:0a:ea:0e:d6:79:dd:a8:ba:67:24:
7e:09:79:f4:54:6b:8d:00:39:ad:7c:0d:3a:33:64:63:f8:e6:
cb:ff:02:d8:80:d6:11:2d:d6:17:97:1c:e6:29:4a:35:84:cb:
9c:11:67:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:13:31 2026 by rpki-client