
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F220124E665111F18749A8547447A888.roa
File: F220124E665111F18749A8547447A888.roa (raw, json)
Hash identifier: 3GmvegLHi2VeoTXjAw6XZMe3XtxU6je+BSxkxXCb3Z8=
Subject key identifier: 10:42:7F:4C:4D:D2:81:18:64:2E:C2:1F:30:34:4B:45:5C:C7:8B:3D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: ECEC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F220124E665111F18749A8547447A888.roa
Signing time: Fri 12 Jun 2026 11:29:17 +0000
ROA not before: Fri 12 Jun 2026 11:29:17 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 153289
IP address blocks: 103.172.59.0/24 maxlen: 24
2001:df4:d440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60652 (0xecec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 12 11:29:17 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a2bed8c-cd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cd:1b:c1:b1:56:02:c4:28:7f:1e:8f:30:c0:
b2:61:14:c3:d9:89:e2:8e:68:8c:62:35:8d:22:27:
53:75:bb:23:2e:be:af:68:41:e4:ba:7a:86:c9:3d:
1c:fb:2b:1e:48:09:df:62:6d:ea:6e:57:ee:97:1e:
e3:64:eb:5d:e6:15:eb:c9:f4:16:4d:5f:1a:36:91:
f4:e0:22:3a:00:cf:b3:0b:03:9c:3a:82:6d:0e:57:
53:d2:a4:1b:44:10:4e:d9:c7:ae:c8:71:7a:2f:81:
75:5c:7b:d2:44:09:54:d7:0d:35:53:ce:cb:94:cf:
72:8a:7f:19:66:d6:09:df:29:4e:0e:63:92:f8:06:
f9:ab:e0:47:6d:de:86:4b:08:2c:0a:1b:45:c9:d2:
0a:9e:79:89:22:d8:95:1d:b8:32:b4:75:d8:ab:97:
c9:ce:a4:3f:dc:3d:3f:03:e3:8d:df:74:7b:ad:71:
83:a1:05:1d:ea:f0:e0:11:71:29:bb:c3:5b:29:13:
50:6d:5e:5e:cb:9e:c9:c6:21:ae:55:67:e4:9b:2d:
df:10:cc:ac:95:9a:3e:58:20:5e:f1:ec:84:be:4f:
c6:2e:4c:dd:e7:ee:56:15:5a:bd:91:eb:5b:0b:e1:
c7:2c:df:1f:7c:d9:dc:ca:8b:27:b0:62:fc:b9:e8:
26:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:42:7F:4C:4D:D2:81:18:64:2E:C2:1F:30:34:4B:45:5C:C7:8B:3D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F220124E665111F18749A8547447A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.59.0/24
IPv6:
2001:df4:d440::/48
Signature Algorithm: sha256WithRSAEncryption
b2:b6:b3:a8:08:be:eb:42:16:0a:04:f4:aa:04:d9:be:98:7f:
b6:40:e3:e4:45:3e:25:b6:37:7d:33:43:25:65:e3:83:b2:3d:
ec:8a:dd:03:35:52:0e:97:96:f8:e9:20:97:fc:0e:7e:f1:20:
3d:50:e5:53:85:c6:8c:bc:66:6a:f7:25:b7:d0:86:3e:eb:33:
02:fb:c6:76:96:b4:d3:f5:8e:0c:18:86:86:d0:f5:4e:7b:2c:
66:33:61:96:c3:86:5c:25:a3:31:46:1e:74:fa:bd:c9:8c:3b:
e8:a3:5e:a0:d6:ac:11:b3:d6:a4:6f:61:68:93:37:97:91:93:
12:0f:5c:e2:c5:27:ea:e4:1b:41:13:ca:79:7f:b7:b2:8a:c8:
bd:65:62:b8:9e:f0:5b:3d:3c:54:40:4c:f1:3b:ed:de:67:5c:
f3:c1:89:84:5f:d3:d1:7a:59:8d:ca:0b:75:a4:9e:8c:ba:cf:
17:d2:46:c8:4d:a9:9d:e8:74:79:f9:29:e8:98:f9:d2:8a:5e:
76:98:78:66:5c:a4:0e:b4:2c:03:81:2c:80:6b:5d:5f:c9:d4:
a8:d1:60:50:e8:ed:1f:38:4c:17:bf:a0:45:3c:c1:e9:be:01:
77:8a:bb:67:d1:a6:ed:66:b1:82:59:80:bc:72:68:97:9c:f2:
b6:4c:2a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:39:16 2026 by rpki-client