
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12571360324911F1A0832E17B0833773.roa
File: 12571360324911F1A0832E17B0833773.roa (raw, json)
Hash identifier: M+vY+Kq0/FJY5LG8hcvQRuvZox2079egsprHT/zgDH0=
Subject key identifier: A9:9E:2C:A1:7E:E6:9B:CB:86:C1:59:46:52:3A:7A:23:50:3D:2A:21
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DDD8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12571360324911F1A0832E17B0833773.roa
Signing time: Wed 08 Apr 2026 08:30:47 +0000
ROA not before: Wed 08 Apr 2026 08:30:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150618
IP address blocks: 103.68.87.0/24 maxlen: 24
2001:df1:d240::/48 maxlen: 56
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 11:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56792 (0xddd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 8 08:30:47 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69d61236-f12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:ef:d4:bf:17:9b:c4:be:38:c8:35:89:ee:
7d:b7:69:52:75:0d:89:be:07:80:f6:f8:45:e5:02:
e1:5d:74:38:84:63:dc:13:55:04:5f:ee:6e:60:34:
bf:8a:6f:be:a3:1b:9a:7f:df:9a:ee:bc:ee:42:76:
93:0a:0c:b9:f9:22:16:be:82:5b:b4:78:1c:48:a4:
40:9a:5d:e6:26:26:97:20:7c:8d:0e:6c:9c:0e:5b:
de:50:6d:b1:cc:33:b0:e9:c5:f1:a1:2f:ee:f4:87:
9e:3e:41:be:f0:0d:5b:33:88:cf:54:07:7d:91:f4:
82:83:1f:10:44:53:39:28:87:49:34:e1:54:24:54:
f7:0e:0b:9a:1e:fc:24:78:d1:d2:30:02:15:28:b7:
52:b0:b3:3d:6f:93:56:1f:f7:ee:92:cd:8c:16:70:
d2:da:91:99:82:75:e8:f2:3f:49:1b:eb:96:3b:e1:
df:2c:73:6c:50:e0:27:02:1f:41:52:30:a0:2d:68:
9f:4b:86:58:d9:e5:48:31:78:26:ce:b9:a4:d3:ec:
24:3f:bb:bf:5f:0a:a6:26:a7:87:c9:07:3b:ad:8e:
e5:bb:c8:77:4f:be:b9:61:03:4b:f8:d7:85:09:6d:
bf:80:3b:f0:51:a8:a8:e6:33:4f:db:17:b3:b9:2f:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9E:2C:A1:7E:E6:9B:CB:86:C1:59:46:52:3A:7A:23:50:3D:2A:21
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12571360324911F1A0832E17B0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.68.87.0/24
IPv6:
2001:df1:d240::/48
Signature Algorithm: sha256WithRSAEncryption
0a:bc:08:1f:f6:b4:22:c4:f9:fe:d7:09:ef:c2:cc:af:d3:a1:
77:50:5d:ca:e0:68:3f:a9:68:f4:77:74:95:4e:db:e5:dc:56:
87:85:ed:81:ff:d0:8e:65:78:0f:59:a7:a7:86:48:4b:0f:66:
9c:a5:4d:03:99:3a:94:8e:cf:35:f6:39:7c:00:be:fc:65:a9:
e2:31:4c:71:a7:00:2b:fc:61:df:2f:b7:ec:7d:7b:f1:36:09:
be:20:b7:87:6d:a0:dd:ac:0b:09:4f:e1:40:e4:ee:62:06:ad:
ba:50:ad:02:5a:e9:12:d5:56:aa:0b:5a:4a:41:38:d7:b4:dc:
50:d3:43:d4:8a:9a:08:43:1d:1d:58:39:3a:24:6a:d8:52:75:
e7:2e:1e:ab:54:28:cb:ab:07:9f:7e:42:6c:68:8a:37:5a:3f:
51:5d:f9:d8:c1:dd:91:eb:e9:5d:5d:57:fe:52:70:f7:af:5d:
25:d8:66:cd:27:e9:f2:94:9b:3f:b7:cc:4d:31:82:e1:a4:68:
9b:76:c5:4c:0c:3e:f4:b1:fc:91:6a:c9:b0:43:32:58:06:26:
e5:82:f9:84:39:7e:8b:f0:04:9a:38:4f:e4:c9:94:5a:fc:d5:
9b:db:12:7e:66:b7:38:35:76:a0:b6:45:6c:b9:8f:d8:b7:28:
ba:46:31:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:41:42 2026 by rpki-client