
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0BB8ABE2F26F11EF9376B112C4F9AE02.roa
File: 0BB8ABE2F26F11EF9376B112C4F9AE02.roa (raw, json)
Hash identifier: jJA0jQtiPIlUao7cTV+vioTbCvMF+mFzPnjMJeAmV3w=
Subject key identifier: 59:EA:91:4A:D6:17:32:BB:55:01:22:EA:74:E9:64:96:70:D9:3C:5E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E768
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0BB8ABE2F26F11EF9376B112C4F9AE02.roa
Signing time: Sun 31 May 2026 17:18:37 +0000
ROA not before: Sun 31 May 2026 17:18:37 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 141842
IP address blocks: 103.168.75.0/24 maxlen: 24
103.172.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59240 (0xe768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:18:37 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6d6d-4e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e4:4f:b7:a3:34:04:d2:ff:61:df:ac:e0:0f:
9a:35:44:44:b1:a7:4e:70:2d:d7:85:38:d1:ac:97:
9d:af:2c:a8:3c:16:76:a9:80:e0:08:35:12:d4:f4:
f7:fa:e5:b2:0d:f9:e3:75:05:99:a0:05:fb:e6:ca:
a1:78:b1:59:8a:67:47:a6:bb:7f:99:48:34:ed:35:
08:8e:92:b0:0c:bb:1f:1c:17:34:80:a7:cd:1a:06:
ed:06:58:ca:77:e5:98:c3:1a:02:63:76:ad:8d:cd:
be:c6:43:81:38:43:cf:06:5b:5c:83:9e:10:41:72:
56:95:ff:13:88:4d:8c:04:3f:56:7f:01:71:12:49:
69:83:58:99:e6:f7:a8:f6:3b:fc:92:ea:3e:a1:23:
8a:30:4b:e9:99:9b:19:00:66:7d:5c:d4:e5:64:74:
7e:76:43:9d:ac:45:07:ef:8b:f7:64:21:a8:96:d8:
3c:66:23:e8:c9:c5:77:f2:74:88:bd:ac:de:7b:9c:
97:2c:82:e8:f4:cd:53:43:88:79:3f:3d:b1:0f:09:
d8:45:09:0e:11:77:7d:a1:30:0d:52:43:81:1f:cc:
6b:ea:95:0d:f4:9b:82:08:89:4f:cd:78:74:fd:ac:
ea:ca:da:65:97:69:79:f6:a9:ea:fb:7b:26:57:e1:
d1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EA:91:4A:D6:17:32:BB:55:01:22:EA:74:E9:64:96:70:D9:3C:5E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0BB8ABE2F26F11EF9376B112C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.75.0/24
103.172.48.0/23
Signature Algorithm: sha256WithRSAEncryption
31:76:79:40:a7:35:3e:28:08:a2:e0:50:fb:5c:77:50:c4:8d:
3f:a4:5f:75:14:94:58:0c:13:ee:e8:56:8d:b5:88:80:eb:3b:
21:f6:ff:fb:36:60:7d:36:5a:c9:0a:15:c8:da:b6:cc:ca:87:
d6:67:65:6f:0a:8f:3b:06:52:3d:06:db:17:2b:65:69:98:a9:
84:f1:80:61:d8:b8:d2:da:71:8b:4a:96:b8:96:84:db:14:7b:
c0:28:99:d7:31:54:d7:db:52:cb:ad:ae:52:b7:bb:ed:76:64:
22:2d:d7:be:0a:ef:29:1e:d9:38:a4:91:52:aa:c0:99:07:ad:
ef:3b:53:70:76:5b:02:c9:7b:d2:ef:73:11:a2:b8:70:1e:e0:
12:dc:f4:54:a3:07:3e:6b:35:22:cc:03:44:de:57:b1:ef:f4:
a9:59:b7:25:e8:74:06:89:73:dd:77:22:f5:18:8f:68:42:29:
9f:8b:3a:ec:ee:00:3d:d9:15:11:5b:5d:6e:ae:c3:04:c5:97:
40:34:52:0a:27:2c:c3:9b:a1:8d:8a:8e:a9:3c:d1:74:2d:be:
d7:c3:52:22:50:82:5f:e1:94:52:f0:4b:0d:4f:b5:26:a0:0d:
0d:58:f1:0f:d6:87:4a:bf:3f:e9:b7:fe:33:9a:63:6c:ce:cd:
08:bd:23:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:48 2026 by rpki-client