
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/ED905CE8CF6E11ED915AD729C4F9AE02.roa
File: ED905CE8CF6E11ED915AD729C4F9AE02.roa (raw, json)
Hash identifier: UCZT4HlQxE5/CxEJDXt/c4/8UOjUdEYG/b8XVIPU8ic=
Subject key identifier: 71:D6:4A:CB:44:C8:4F:9E:1A:93:E8:12:A1:15:0B:94:AB:EC:47:21
Certificate issuer: /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787
Certificate serial: 0766
Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/ED905CE8CF6E11ED915AD729C4F9AE02.roa
Signing time: Tue 28 Jul 2026 02:43:12 +0000
ROA not before: Tue 28 Jul 2026 02:43:12 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 141753
IP address blocks: 103.21.56.0/23 maxlen: 24
103.163.165.0/24 maxlen: 24
2407:2a40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl
rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1894 (0x766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CAB7, serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787
Validity
Not Before: Jul 28 02:43:12 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a681740-8a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:24:46:13:7d:61:5d:be:0d:3b:74:5f:aa:
63:61:a5:50:60:c5:c4:b5:c8:0a:68:91:04:6f:a3:
eb:12:d1:ab:ae:20:b7:60:f6:e5:1a:d2:7b:cd:18:
6b:96:79:5a:fd:af:16:a8:c0:34:d8:32:72:b7:fb:
99:02:bc:8a:70:53:2c:4a:be:54:ce:59:65:23:05:
df:03:18:83:7c:29:3a:25:c1:46:ce:16:06:b9:de:
97:df:44:5a:b7:6c:aa:df:46:56:36:05:fc:c1:f0:
e8:fc:0b:54:9e:e1:c9:b4:f8:56:69:06:e2:ef:04:
84:04:1c:0f:b9:14:05:56:14:58:6f:62:bc:7b:e5:
bb:e5:8d:57:92:f7:ac:b3:3a:4b:23:36:46:c5:f6:
ad:8f:1a:b7:c5:96:54:fc:9d:fb:14:42:f4:fa:69:
22:a6:e1:cd:67:8e:29:50:be:3a:7c:34:a8:e0:76:
a1:0e:8a:2d:a9:eb:0b:34:f8:f6:6c:33:80:c0:9d:
93:b8:07:0b:73:42:21:b3:79:30:99:1c:9c:cc:9b:
27:fb:75:48:43:17:64:94:aa:4d:d8:b8:21:3a:57:
b2:71:15:5a:ce:92:61:48:fc:8e:cf:88:6b:9e:68:
d3:09:ee:af:27:a7:9c:04:b1:c2:40:be:62:29:e4:
d5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D6:4A:CB:44:C8:4F:9E:1A:93:E8:12:A1:15:0B:94:AB:EC:47:21
X509v3 Authority Key Identifier:
keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/ED905CE8CF6E11ED915AD729C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.21.56.0/23
103.163.165.0/24
IPv6:
2407:2a40::/32
Signature Algorithm: sha256WithRSAEncryption
46:a8:13:db:8f:7c:f4:b8:e5:dc:95:31:e1:ae:54:69:c6:ee:
9a:0e:a8:1e:30:8e:f0:42:db:75:27:91:29:56:af:f7:c7:dc:
40:46:ef:05:63:cf:41:37:09:f6:78:f5:b7:27:d1:35:8b:e1:
2c:d3:50:fd:9a:9f:28:4f:61:03:7e:45:0a:d6:d0:58:6d:ba:
5c:9b:3d:ac:8d:93:d6:55:b9:18:f1:ac:a6:27:bc:74:c9:23:
22:3f:de:9f:bc:27:94:27:09:60:06:03:08:92:d6:9d:5f:c9:
49:7d:15:3c:12:c6:4a:31:5c:9e:ec:80:1f:a6:ac:40:e2:21:
8f:f7:26:a1:05:46:b9:8d:30:ff:6a:73:0d:71:23:45:6d:48:
e6:a9:fe:a2:16:c7:95:5b:ea:7c:a6:27:04:d8:80:b4:dc:e5:
56:6e:1b:b2:54:af:29:45:63:40:65:83:7b:cb:9e:a1:47:41:
0a:4a:08:77:8c:4d:c0:01:c3:a9:90:46:da:16:f9:b5:21:1b:
6a:81:6c:0a:0b:f8:e6:7e:29:16:6d:d7:87:7b:e1:b8:f2:68:
5f:b4:71:35:44:97:a4:b6:ca:6e:08:42:43:08:16:af:f0:30:
6c:1c:57:11:17:df:48:82:82:52:65:56:a6:98:4a:fa:ac:1c:
3c:c3:b8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:59:31 2026 by rpki-client