
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/C2EFC706CAAE11EBA95C5E64C4F9AE02.roa
File: C2EFC706CAAE11EBA95C5E64C4F9AE02.roa (raw, json)
Hash identifier: 4mnGG9mctkzjRMjeZiJm8EP2Ry3MqPxpfShzQMCXH5g=
Subject key identifier: EF:CF:16:8D:1D:52:69:60:22:C2:A0:77:5A:C6:C3:F3:90:AC:4C:E8
Certificate issuer: /CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
Certificate serial: 068D
Authority key identifier: 71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/C2EFC706CAAE11EBA95C5E64C4F9AE02.roa
Signing time: Wed 22 Jul 2026 23:24:12 +0000
ROA not before: Wed 22 Jul 2026 23:24:12 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 138246
IP address blocks: 103.168.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl
rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1677 (0x68d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7B61, serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
Validity
Not Before: Jul 22 23:24:12 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a61511c-f987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3d:ad:84:5d:04:b8:f7:42:81:db:47:ec:92:
8c:d0:77:1b:47:80:b2:7a:52:8d:04:b6:bb:ec:08:
9e:03:6c:c1:a8:28:bb:87:43:8a:fd:ae:a4:ca:f4:
d0:1f:01:ce:92:5c:cf:fb:0d:b7:f7:10:a0:c0:df:
1f:c2:69:bc:97:56:f7:4a:60:1a:b1:4d:98:1b:ef:
05:4d:b2:8e:69:01:96:65:b4:b5:f9:b1:c9:9d:fe:
07:dc:1b:4e:d7:ad:4e:d3:34:d9:43:ff:4c:59:2f:
3c:5f:28:a6:e2:9c:4d:f6:a8:ce:b9:55:07:7c:de:
60:43:bc:16:bf:17:4c:68:a6:17:e9:3a:2e:4d:e2:
57:d8:1f:e3:77:4b:1e:04:cf:52:92:fc:25:98:02:
34:62:54:2f:37:b8:ef:c0:9a:55:ab:d9:b4:72:7b:
a9:40:1a:fb:7d:c8:da:da:51:e2:08:da:e0:0c:7f:
ec:d6:b6:64:db:67:ae:c0:54:62:ac:58:80:0a:d0:
92:82:e3:99:e5:48:f4:fe:53:eb:84:03:bd:74:19:
c0:8e:9e:f6:be:99:9e:ce:9f:33:e3:09:dc:b7:39:
ed:d8:8a:3f:e6:a6:22:92:05:d2:0a:9f:07:59:46:
c8:95:59:ab:bc:4a:c6:be:e1:c1:05:7c:66:b8:ed:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CF:16:8D:1D:52:69:60:22:C2:A0:77:5A:C6:C3:F3:90:AC:4C:E8
X509v3 Authority Key Identifier:
keyid:71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/C2EFC706CAAE11EBA95C5E64C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.18.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:21:8d:a9:bf:cf:ce:48:db:6e:8a:94:b5:15:cd:14:b0:c1:
74:41:e3:a9:3f:3a:ed:20:23:74:c6:49:8d:c4:26:04:87:99:
0e:c5:e6:a3:a1:6d:79:bc:85:b8:1f:86:8b:f5:ff:73:e1:f7:
e5:83:28:db:0c:53:01:25:1d:89:79:fe:2f:66:2e:51:5d:bf:
07:c1:19:07:87:94:1b:ab:f6:b9:24:a0:ff:26:a2:9c:d1:2e:
d5:b0:38:c7:17:fa:34:b9:61:c7:00:bd:64:e8:a1:f7:ae:f4:
d1:9b:67:ee:c8:2f:85:68:35:93:a4:f2:d0:df:fb:20:d3:89:
2e:e6:f5:20:e1:06:de:1a:74:b2:ec:89:ac:40:39:6e:d4:1b:
f6:9b:c8:f0:a8:93:c9:62:8b:cf:f2:62:a9:7b:0c:a9:18:a5:
13:49:7a:52:5b:6f:80:7a:ef:53:29:09:90:dc:d6:9d:0c:58:
8a:aa:6f:b2:67:e8:2e:77:35:97:c4:e4:b5:97:be:70:f1:ac:
cb:95:cd:a8:59:2a:a5:87:60:63:38:8b:09:f8:4d:b6:75:bb:
70:95:9b:54:2a:8c:8f:1e:82:8f:94:60:87:ab:f2:9d:99:28:
68:ec:7d:35:39:5d:6c:f5:96:11:bb:4d:dd:58:f6:27:6f:38:
15:56:25:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:00:52 2026 by rpki-client