
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/CC23ED70990811F08BF0CB55C4F9AE02.roa
File: CC23ED70990811F08BF0CB55C4F9AE02.roa (raw, json)
Hash identifier: +E2YvC30N7G4XyfUFImEIGM741TQeBV6oc6cEcKy0A4=
Subject key identifier: 85:AD:9C:EB:7F:0F:2C:D4:B5:4B:4B:E3:9A:60:70:FF:2F:DD:65:BB
Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial: 366A
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/CC23ED70990811F08BF0CB55C4F9AE02.roa
Signing time: Sat 18 Jul 2026 15:10:37 +0000
ROA not before: Sat 18 Jul 2026 15:10:37 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 45845
IP address blocks: 103.250.135.0/24 maxlen: 24
202.51.66.0/24 maxlen: 24
202.51.70.0/24 maxlen: 24
202.51.72.0/24 maxlen: 24
202.51.73.0/24 maxlen: 24
202.51.77.0/24 maxlen: 24
202.51.79.0/24 maxlen: 24
202.51.94.0/24 maxlen: 24
2405:6600::/32 maxlen: 32
2405:6600:201::/48 maxlen: 48
2405:6600:600::/48 maxlen: 48
2405:6600:701::/48 maxlen: 48
2405:6600:702::/48 maxlen: 48
2405:6600:703::/48 maxlen: 48
2405:6600:709::/48 maxlen: 48
2405:6600:c00::/48 maxlen: 48
2405:6600:c43::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13930 (0x366a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Validity
Not Before: Jul 18 15:10:37 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5b976d-ef36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:3f:f6:8e:81:e4:2f:7c:26:8f:c6:8c:f8:
27:2e:fa:f8:8d:e7:d5:6a:03:a6:e9:5e:b9:da:c8:
80:27:d6:dc:9f:cd:84:61:f6:00:8c:d0:ab:20:9b:
b5:a5:91:3d:0c:8a:a6:6a:22:f6:02:ca:5c:be:cf:
4d:96:c0:78:06:34:97:82:8e:c3:6a:d7:11:35:28:
04:a3:43:90:03:5f:76:28:e8:8b:36:a0:29:8d:c6:
47:37:b0:bd:0f:b7:b5:b1:ec:8a:99:d7:5a:34:e1:
3a:99:7e:5f:d5:ca:1e:61:24:83:bd:35:c8:d9:99:
77:e1:57:ea:c1:c8:0b:05:a4:fb:cb:41:17:09:a5:
d2:1f:78:96:0c:d0:9f:92:37:a0:82:71:ef:18:64:
ca:b8:1e:60:04:c6:f1:72:a4:f9:44:6d:d3:7b:c4:
d7:40:88:23:45:7b:b1:34:7e:fe:5e:c4:83:02:f8:
7d:2b:1d:88:d4:57:9c:24:45:df:d0:c0:93:b5:61:
56:aa:17:3a:02:b6:ee:67:7b:3c:da:ad:46:7c:c5:
53:af:a8:fb:57:88:0a:52:8a:12:a4:30:9c:0d:ad:
40:c4:c1:aa:11:3e:5e:10:73:7c:37:3d:30:b4:1c:
b1:dd:df:6c:59:63:8f:f3:2f:4b:8a:5c:1b:c9:ca:
5c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AD:9C:EB:7F:0F:2C:D4:B5:4B:4B:E3:9A:60:70:FF:2F:DD:65:BB
X509v3 Authority Key Identifier:
keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/CC23ED70990811F08BF0CB55C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.250.135.0/24
202.51.66.0/24
202.51.70.0/24
202.51.72.0/23
202.51.77.0/24
202.51.79.0/24
202.51.94.0/24
IPv6:
2405:6600::/32
Signature Algorithm: sha256WithRSAEncryption
6d:4f:81:40:87:53:14:93:4f:0e:44:6c:4b:1c:66:32:97:77:
3a:ba:74:e9:b1:18:10:85:5f:d7:13:75:26:fe:9c:35:d6:aa:
a0:c8:32:80:5c:c5:8c:ce:06:b6:72:a2:5d:88:6e:c0:b9:d4:
c8:68:0b:5e:d2:a5:6e:48:25:4c:e7:d7:c4:d2:52:5e:b4:c1:
9b:c2:e7:8d:75:ed:dd:37:e7:56:cc:9f:c6:15:6a:13:c8:62:
a9:e2:76:20:41:27:40:28:f1:20:1c:fb:2b:f5:84:1c:0c:05:
1b:9e:98:6a:f9:e7:5d:c2:e8:49:74:cf:7e:fd:0b:4e:32:31:
f4:d4:40:5c:9b:28:08:2b:07:db:74:ff:b4:35:a4:ec:2e:40:
1c:f9:19:b1:c5:f8:84:d0:44:3b:08:86:17:c3:e4:6b:88:a9:
f3:3b:a2:d7:37:06:30:b4:9c:d1:d1:a1:c6:dd:4f:da:91:5f:
9a:4b:b1:58:f8:2a:a6:5b:28:28:52:2a:83:35:7a:44:f6:df:
9a:00:36:ce:69:a1:49:a3:1e:8b:c2:60:f5:8d:db:49:0a:d3:
af:d5:66:03:24:67:27:23:c3:79:78:a7:49:fd:22:d0:7e:1c:
bb:e1:d0:0a:65:68:3d:47:dc:94:65:3e:32:52:24:cf:f1:59:
54:60:40:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:46 2026 by rpki-client