
$ rpki-client -vvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/3BEF1820AFBA11EA8449B980C4F9AE02.roa
File: 3BEF1820AFBA11EA8449B980C4F9AE02.roa (raw, json)
Hash identifier: CYtTamBw2WXxPcIM3rrSk3dBYaMWIxNwfk91+jxjXp8=
Subject key identifier: E3:FE:A9:58:AC:9E:21:A9:1E:31:BE:87:04:9A:D8:1F:C4:50:52:2F
Certificate issuer: /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Certificate serial: 09AD
Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/3BEF1820AFBA11EA8449B980C4F9AE02.roa
Signing time: Thu 28 May 2026 20:24:24 +0000
ROA not before: Thu 28 May 2026 20:24:24 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 135386
IP address blocks: 103.118.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl
rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2477 (0x9ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915418F, serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Validity
Not Before: May 28 20:24:24 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a18a478-7a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:90:0b:34:8d:02:fc:20:b6:d4:3c:40:a5:
e9:2b:f5:8b:d2:c2:35:99:13:19:ce:37:4e:82:0d:
c9:d4:c7:e9:58:9d:c5:68:30:de:9b:e0:7b:65:d8:
4e:e6:25:cc:e2:d0:ed:f6:7e:4d:29:82:46:f1:fd:
14:c7:0e:af:53:06:db:a6:86:a0:fb:30:f3:12:c8:
5d:ca:62:be:0e:e0:0f:ea:29:6c:ca:b0:92:10:9f:
b7:c4:67:64:8e:b0:6b:7a:77:81:2d:37:38:a1:f5:
10:c6:5d:59:c5:af:02:c0:55:26:e5:ef:46:e9:24:
e8:7f:46:e3:a2:be:dd:02:4d:69:7c:db:67:8d:c7:
80:58:61:3b:f1:af:14:bd:2c:e7:32:fa:20:78:0c:
dd:ce:7d:f0:73:ed:4f:a5:27:85:e9:37:1a:36:f2:
a3:63:00:61:62:8d:fd:29:9c:d5:e9:29:1a:e9:6f:
2b:5f:48:d7:aa:45:03:35:39:fd:60:47:15:c5:6c:
ed:f9:f2:bb:24:b3:34:ae:d4:08:bf:9f:8b:50:90:
6c:6e:cb:0c:47:29:45:02:d3:60:22:5f:c8:5e:8e:
24:94:1f:1e:d8:d7:37:34:a6:83:c1:be:c3:41:2b:
c0:95:d2:fc:38:83:3b:d2:2f:d0:bf:41:7e:22:65:
c7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FE:A9:58:AC:9E:21:A9:1E:31:BE:87:04:9A:D8:1F:C4:50:52:2F
X509v3 Authority Key Identifier:
keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/3BEF1820AFBA11EA8449B980C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.118.48.0/23
Signature Algorithm: sha256WithRSAEncryption
44:aa:2d:ef:50:19:5e:96:97:59:04:d7:06:01:25:07:3b:64:
25:1c:52:43:18:c4:4a:f7:ad:b7:94:ee:67:62:55:75:1d:bc:
ae:a0:6f:9a:90:e9:14:c1:b1:2d:d6:31:a4:50:b2:58:5b:3e:
34:e1:5b:f8:3c:01:fc:9f:ee:5b:9c:b3:2a:aa:ce:28:d8:49:
92:59:50:13:14:05:69:b3:36:d2:f3:e8:72:60:19:72:65:98:
e8:0f:6f:22:7f:bd:fe:0d:ba:b4:d6:cb:d4:94:78:3c:13:e2:
4f:2c:b4:c8:37:10:d2:2c:66:65:13:c6:84:6c:12:d8:d9:34:
f5:5a:ad:cd:e6:ce:79:8e:9d:33:dc:0d:2b:2c:74:f2:9a:f0:
06:f0:d2:b7:1a:0f:b4:a5:09:cd:60:29:59:f0:7c:f7:91:6d:
2a:34:c6:57:cb:76:41:7a:70:55:dd:b2:2d:7f:0c:47:93:34:
85:53:17:b9:06:a7:c2:35:87:f4:4b:48:01:d4:27:8f:af:84:
b8:47:c4:7a:87:6e:8b:50:df:1c:23:6b:36:06:c8:a5:a0:f8:
dc:f8:f1:77:15:5e:0f:83:e2:b6:23:32:9d:38:19:15:42:10:
03:4d:70:2f:bc:fc:93:12:db:87:f0:d4:1c:07:a6:ba:ca:ef:
54:2b:e7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:21:54 2026 by rpki-client