
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/18DC10026A6911F18287CF148C47A888.roa
File: 18DC10026A6911F18287CF148C47A888.roa (raw, json)
Hash identifier: f5urIEiMMn7bTJnK6EndkOMWrKDIiWeFnU13yuaM8BM=
Subject key identifier: F9:81:F7:55:F1:B0:C4:25:75:EC:3E:C6:EB:1A:76:01:95:AF:D2:C8
Certificate issuer: /CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Certificate serial: 3592
Authority key identifier: A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/18DC10026A6911F18287CF148C47A888.roa
Signing time: Fri 24 Jul 2026 13:23:48 +0000
ROA not before: Fri 24 Jul 2026 13:23:48 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 198949
IP address blocks: 45.113.120.0/22 maxlen: 24
103.53.40.0/22 maxlen: 24
111.118.212.0/22 maxlen: 24
119.18.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13714 (0x3592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171753, serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Validity
Not Before: Jul 24 13:23:48 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a636764-8d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:64:e9:9e:67:33:ce:fc:e0:f4:4d:7e:80:
df:4e:76:47:26:0e:4a:4f:8b:47:7a:b0:63:59:47:
92:1e:00:13:b6:85:1c:69:43:fb:80:e3:48:06:10:
86:cb:25:5e:8e:ac:56:24:00:53:67:ed:27:8b:a9:
d6:5e:a0:90:e5:8c:6f:41:43:d1:a1:ab:07:75:25:
dd:f9:c2:43:f3:bc:82:f7:49:c7:7a:14:a1:a6:37:
01:8c:e2:5d:64:a1:30:6c:5c:8f:fe:15:ed:6d:f4:
8d:8e:4b:30:50:21:e6:c3:a9:55:0b:ad:be:a2:07:
69:ac:e3:e6:ff:5e:99:ef:3d:77:7e:89:5a:2f:14:
86:66:b5:1f:3f:fb:c1:14:b4:70:26:f7:08:5b:81:
92:c0:13:91:bd:b5:cd:21:6d:c0:d1:4d:05:d3:3b:
58:8e:d1:73:78:9f:0a:74:b5:ad:9c:ff:da:06:a9:
dd:b4:97:d3:d4:1a:6b:f4:90:4d:23:e1:a9:3f:74:
23:43:57:97:95:22:be:d6:78:05:8e:c3:3e:6d:5b:
7d:e3:b0:71:84:bc:71:e1:a7:bc:7f:5e:e9:78:cb:
24:8d:5f:83:32:05:8b:98:d7:38:c6:0c:57:77:17:
ea:c7:e1:98:e2:66:8e:70:16:20:35:49:ed:37:23:
e6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:81:F7:55:F1:B0:C4:25:75:EC:3E:C6:EB:1A:76:01:95:AF:D2:C8
X509v3 Authority Key Identifier:
keyid:A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/18DC10026A6911F18287CF148C47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
45.113.120.0/22
103.53.40.0/22
111.118.212.0/22
119.18.48.0/20
Signature Algorithm: sha256WithRSAEncryption
07:1e:12:8f:41:1f:89:5a:e4:3c:fc:3e:87:6e:fb:7e:4a:2c:
45:83:d4:95:f2:94:d3:62:56:cc:72:05:d3:ba:e0:fb:2e:20:
a3:58:38:68:d7:c1:76:d6:93:49:8f:91:3a:b9:6d:02:0d:27:
cb:e1:a3:f7:76:60:8c:1e:2a:df:52:2e:75:54:b8:40:6f:a3:
8d:58:ba:9c:e4:04:19:88:f1:83:70:f1:a5:50:88:67:b5:b8:
62:6d:b7:41:e6:a4:06:5a:62:62:87:92:c9:ba:14:57:da:9c:
29:d0:74:c2:3d:aa:86:cd:b7:7a:45:8f:a7:db:e9:b4:db:46:
b8:a7:79:72:85:b5:01:8e:e9:16:41:2d:f5:bb:3c:59:bf:08:
e8:27:b8:4d:e5:2c:07:1d:8b:11:06:8b:b7:23:be:09:a4:c3:
aa:69:68:0d:72:06:7e:7e:00:2f:7f:53:cf:cb:77:0f:86:d0:
53:a6:7c:9d:ad:d2:d1:1f:98:83:5e:29:d4:1c:19:4e:c9:4e:
66:a1:4e:a0:39:da:cd:90:b6:9a:67:74:a4:c0:9e:88:d3:4b:
b1:6f:30:af:31:1b:43:64:72:79:30:77:6d:01:81:6a:38:8e:
d6:3f:62:8b:38:4c:d0:99:50:1c:bf:c4:fb:cc:d4:b3:73:5e:
59:20:f4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:12 2026 by rpki-client