
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E628B712FF3B11EF8BD3FF83C4F9AE02.roa
File: E628B712FF3B11EF8BD3FF83C4F9AE02.roa (raw, json)
Hash identifier: QMwqIIZ+LqD03iAdMQA4yeDWhLQpaGgERPs9ixuzoQg=
Subject key identifier: D4:7F:A7:BB:72:FE:B3:02:3F:20:CA:A4:B0:C2:FB:0C:2D:4A:BE:D9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F763
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E628B712FF3B11EF8BD3FF83C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:50:19 +0000
ROA not before: Mon 06 Jul 2026 17:50:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40627
IP address blocks: 103.129.102.0/23 maxlen: 24
2400:f8a0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63331 (0xf763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:50:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4beadb-5ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:99:5d:b4:b2:24:31:9e:04:06:c8:9e:8e:86:
52:eb:d5:65:fa:36:c3:ec:54:63:00:87:14:81:dd:
9a:92:d4:2c:66:d5:4f:7e:a5:f5:e3:00:5e:82:d7:
62:9d:9a:e3:cf:2e:e3:64:16:97:97:74:66:a0:3d:
ce:a5:7c:25:0a:54:4b:f6:b0:d2:75:81:4f:17:70:
92:c6:eb:97:52:11:0d:be:68:e1:fa:0f:5b:d4:6c:
e5:31:a9:61:37:b8:87:86:4b:34:05:32:77:10:0d:
5b:f6:7b:93:11:39:27:ea:ab:e5:f8:83:39:07:28:
dd:4f:0b:68:94:ff:c3:c5:d8:77:48:36:4c:ed:cf:
38:00:8a:bc:02:94:8f:cd:f6:c9:ef:63:22:91:d8:
d3:cd:87:9c:77:63:5d:e3:a0:ff:47:93:93:59:ce:
cb:dd:53:ed:3f:03:dd:72:95:ff:2a:3a:cf:d6:23:
4b:a4:ee:e4:3e:d3:54:42:4d:33:eb:c8:0b:43:31:
00:17:bf:64:e9:ef:59:39:55:c8:78:ac:7d:80:82:
e0:e8:27:60:7b:18:58:88:bd:11:72:8c:15:e9:0d:
d4:2d:51:32:a6:ba:81:87:ac:e9:56:66:4a:75:c8:
81:f7:e3:4e:88:40:4c:ed:d4:84:b0:b3:38:7a:72:
85:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7F:A7:BB:72:FE:B3:02:3F:20:CA:A4:B0:C2:FB:0C:2D:4A:BE:D9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E628B712FF3B11EF8BD3FF83C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.129.102.0/23
IPv6:
2400:f8a0::/32
Signature Algorithm: sha256WithRSAEncryption
21:0d:79:7c:18:76:1f:f0:28:2d:94:cd:e6:4f:1e:a3:74:20:
35:4d:18:7e:33:40:ee:82:d1:86:13:94:2e:cb:67:15:8c:16:
88:12:da:b1:c2:61:9c:b4:2a:79:27:9d:26:85:1b:3e:50:c1:
be:28:1b:77:a3:5a:90:74:3a:eb:7d:cd:18:c5:3b:95:29:08:
2e:14:bf:95:b4:59:8a:12:e6:ef:ff:2c:cc:f8:4e:4e:00:2b:
2e:c4:e3:e4:65:48:e4:e5:33:72:40:ec:46:fb:19:5c:86:6b:
1c:63:1d:82:1a:40:0d:d7:f7:c7:54:52:6b:cf:40:3e:d6:1d:
58:89:73:bb:68:26:95:2b:43:67:ea:a3:69:c5:60:6b:9f:b3:
b9:c5:af:9a:8f:4a:df:c2:bb:37:35:3a:63:81:99:94:7a:4d:
25:c6:8a:5c:26:07:21:a7:fd:9a:81:5e:8a:c3:95:99:a1:48:
30:98:a5:4b:0d:42:05:64:2f:11:15:86:b2:e9:d1:e1:a6:c4:
75:d3:73:4a:20:ce:cb:17:3e:32:e5:58:63:5a:58:ac:31:d5:
4b:9c:53:a7:56:bc:ea:8c:d3:8e:a6:fa:7a:2e:0d:af:df:a7:
26:7d:f9:01:ae:43:f2:30:57:17:af:96:d6:a9:25:66:d1:eb:
f5:90:14:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:54:28 2026 by rpki-client