
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7B1689E066411EDA7A8DF3BC4F9AE02.roa
File: A7B1689E066411EDA7A8DF3BC4F9AE02.roa (raw, json)
Hash identifier: 19qcSoK8UzlVx72IvBc8QPPSBz4CKeKX43aZ/dn+FVw=
Subject key identifier: B6:E5:B9:5A:7B:49:1C:1E:B2:F3:BB:F0:4D:28:89:A7:7D:D5:3B:D4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F741
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7B1689E066411EDA7A8DF3BC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:49:10 +0000
ROA not before: Mon 06 Jul 2026 17:49:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 103.173.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63297 (0xf741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:49:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bea96-62c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:36:50:e7:ea:d2:6b:7d:01:9d:49:42:78:
c7:fa:3a:92:53:96:d6:80:2b:7b:b5:2f:e5:28:15:
69:17:08:cd:6c:3f:f3:5f:90:5f:08:0b:34:5d:93:
2c:ef:a7:b3:28:e7:c0:8c:3e:da:fb:3b:61:57:88:
e8:a7:57:8e:0a:96:c6:21:ef:2d:21:1e:21:61:a1:
2f:31:bc:f2:db:1a:ea:8d:5b:ef:bc:98:b8:07:b1:
b5:59:21:ef:79:c3:2a:27:34:e2:0a:30:12:83:ed:
5d:5e:2a:05:6d:ff:6e:f4:02:bd:87:39:82:aa:8e:
b9:bd:62:9e:33:7d:b4:18:2d:99:6d:f7:00:57:ae:
d9:49:d4:99:f6:6d:27:84:db:ab:ea:04:7f:f7:55:
1b:a1:64:d9:3d:8a:f7:e4:2c:e1:6d:78:16:f8:e9:
11:74:ac:ab:b8:cb:70:89:35:51:1c:a9:32:ff:0c:
2f:0f:bf:89:09:af:2e:7f:20:43:82:de:e2:cf:d9:
84:42:a6:56:b2:ae:4c:20:83:68:a4:c1:25:15:93:
58:51:f0:05:e0:c8:1f:1e:32:d3:70:c7:17:5d:64:
e3:28:f7:2e:80:e3:ea:49:2f:5d:6f:14:91:33:52:
9b:33:03:5b:90:55:6e:13:f6:1f:9f:c0:23:8d:66:
bf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E5:B9:5A:7B:49:1C:1E:B2:F3:BB:F0:4D:28:89:A7:7D:D5:3B:D4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7B1689E066411EDA7A8DF3BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.197.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:c5:07:4e:9a:d1:20:49:91:79:15:ca:9f:e9:bd:c3:83:82:
68:f0:f0:6f:dc:87:ef:8b:14:c0:9f:71:b0:c9:43:f2:1a:e7:
96:e8:08:69:2a:36:d5:cb:95:ab:68:ad:1f:cc:44:21:db:4d:
bc:e3:63:28:91:05:a7:a4:73:45:e4:83:98:9b:81:53:c6:d3:
d5:9f:f4:1b:25:29:52:a3:20:14:e5:1c:e4:28:d0:b8:de:a9:
d0:cb:03:ed:60:0d:89:6f:39:1d:6b:0f:e9:d3:87:d2:b2:9e:
4b:56:b3:27:1c:a8:e8:be:a8:45:28:d1:8c:25:70:a3:05:4d:
aa:61:da:99:7b:23:59:29:d3:80:98:78:d8:b8:8c:1d:73:a7:
64:02:86:4c:12:d6:66:81:67:10:16:80:01:7d:53:cd:54:86:
4b:d6:dd:c7:80:cf:20:1e:9e:10:da:d0:f5:50:ae:d0:bf:bd:
89:31:86:0b:f2:55:b4:84:37:38:7a:2d:d9:58:fd:23:22:c1:
1b:9a:d0:02:a4:40:cd:46:f1:90:ea:cc:3c:3c:0f:92:e7:07:
ba:c7:37:ba:e7:06:9d:f3:b4:b7:ea:ac:c2:49:0c:ff:8a:bc:
89:e8:e7:c9:b6:55:99:af:6c:dd:65:fe:1a:a8:98:19:88:06:
57:ca:4d:74
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAPdBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3NDkxMFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmVhOTYtNjJjMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALycNlDn6tJrfQGdSUJ4x/o6klOW1oAre7Uv5SgVaRcIzWw/81+QXwgLNF2T
LO+nsyjnwIw+2vs7YVeI6KdXjgqWxiHvLSEeIWGhLzG88tsa6o1b77yYuAextVkh
73nDKic04gowEoPtXV4qBW3/bvQCvYc5gqqOub1injN9tBgtmW33AFeu2UnUmfZt
J4Tbq+oEf/dVG6Fk2T2K9+Qs4W14FvjpEXSsq7jLcIk1URypMv8MLw+/iQmvLn8g
Q4Le4s/ZhEKmVrKuTCCDaKTBJRWTWFHwBeDIHx4y03DHF11k4yj3LoDj6kkvXW8U
kTNSmzMDW5BVbhP2H5/AI41mv2cCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBS25bla
e0kcHrLzu/BNKImnfdU71DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E3QjE2ODlF
MDY2NDExRURBN0E4REYzQkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGetxTANBgkqhkiG9w0BAQsFAAOCAQEAjcUHTprRIEmReRXKn+m9
w4OCaPDwb9yH74sUwJ9xsMlD8hrnlugIaSo21cuVq2itH8xEIdtNvONjKJEFp6Rz
ReSDmJuBU8bT1Z/0GyUpUqMgFOUc5CjQuN6p0MsD7WANiW85HWsP6dOH0rKeS1az
Jxyo6L6oRSjRjCVwowVNqmHamXsjWSnTgJh42LiMHXOnZAKGTBLWZoFnEBaAAX1T
zVSGS9bdx4DPIB6eENrQ9VCu0L+9iTGGC/JVtIQ3OHot2Vj9IyLBG5rQAqRAzUbx
kOrMPDwPkucHusc3uucGnfO0t+qswkkM/4q8iejnybZVma9s3WX+GqiYGYgGV8pN
dA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:21:18 2026 by rpki-client