
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10BD3660FDAF11ECAC854871C4F9AE02.roa
File: 10BD3660FDAF11ECAC854871C4F9AE02.roa (raw, json)
Hash identifier: G6rAndPE9S08AvKbf0wq1XJw6XdoyB4m4tgOBtDOPDM=
Subject key identifier: 2C:50:75:7F:1C:25:A6:84:BC:13:0A:7F:92:13:32:DC:39:FE:22:A2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E8C7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10BD3660FDAF11ECAC854871C4F9AE02.roa
Signing time: Sun 31 May 2026 17:30:16 +0000
ROA not before: Sun 31 May 2026 17:30:16 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 149554
IP address blocks: 103.189.48.0/24 maxlen: 24
2400:d920::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59591 (0xe8c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:30:16 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7027-2947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:52:06:47:e0:50:0a:2b:49:d0:55:e5:d3:
27:a7:04:7e:ec:28:76:33:c7:c8:d8:0b:66:1e:c8:
48:55:75:bf:fc:e6:39:ce:8e:7b:fe:30:47:97:0d:
b2:91:18:72:05:a1:ba:d8:94:aa:0b:ea:d4:17:c0:
39:b5:48:51:77:02:c8:5b:3c:b1:b2:a9:a8:32:57:
90:f8:29:28:73:ce:14:5b:1b:aa:e2:b0:bb:34:63:
87:1e:50:c3:be:eb:3f:a4:de:df:0c:28:8a:21:cf:
79:39:0f:4b:62:02:73:01:61:62:70:d6:f7:71:86:
57:00:b7:8d:ce:1d:5a:a1:1c:52:3b:03:97:a4:27:
c2:fc:73:b0:45:fb:0f:94:3a:ce:e0:a0:d2:49:36:
01:bd:5f:22:d4:9d:bc:48:89:c3:82:63:40:e6:17:
a5:fc:83:b8:d1:f7:98:da:89:9a:3f:ed:23:0e:c2:
d5:77:43:c4:bf:e3:2c:2d:82:e2:88:85:a8:37:11:
25:52:b4:51:8c:54:b6:13:b4:06:03:97:c3:38:70:
ac:44:c3:dd:c2:f5:38:91:27:6e:51:2e:59:61:84:
ba:9d:e4:71:b5:ef:ec:07:2e:fb:50:de:1b:04:41:
ac:65:c6:a1:25:f4:0d:73:d1:f1:8a:87:95:60:cb:
90:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:50:75:7F:1C:25:A6:84:BC:13:0A:7F:92:13:32:DC:39:FE:22:A2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10BD3660FDAF11ECAC854871C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.189.48.0/24
IPv6:
2400:d920::/32
Signature Algorithm: sha256WithRSAEncryption
2d:c2:04:70:99:08:f4:1b:1b:de:2a:7d:64:00:bf:18:a4:3c:
79:3a:83:6f:7e:fe:0c:d2:58:18:1d:4f:af:4a:28:64:df:9d:
1d:da:f0:1a:88:11:25:51:05:de:a6:ac:2f:2d:84:bc:84:d4:
65:84:10:80:15:0a:0d:82:14:15:31:aa:e6:90:05:8b:3c:31:
49:a5:eb:df:d7:85:71:8f:24:c7:0b:8b:70:52:2b:d6:f8:58:
95:47:2e:58:57:c4:f4:79:0f:31:72:11:d6:21:fb:a3:94:67:
eb:b3:b3:d8:9c:98:d8:65:08:a0:55:e5:8a:0a:93:53:4d:75:
00:11:a6:f1:09:a8:09:e1:b7:5c:da:f4:ff:44:e2:27:7e:63:
82:73:0a:21:ef:92:0b:29:fd:55:50:66:a4:19:f5:33:eb:3f:
22:da:15:92:95:f4:5b:a9:c0:ef:9a:27:86:4c:5a:b1:3f:91:
84:a5:64:bd:e2:10:60:0a:22:95:66:50:74:68:71:de:18:4c:
c8:34:77:05:01:78:50:38:e7:73:ff:1f:8d:31:32:3d:81:c5:
ee:6a:16:e8:88:0a:2d:69:5c:db:bf:72:1a:8d:e3:e7:6e:d6:
e0:d6:7c:ec:ec:9d:40:5e:e7:81:b9:86:6c:54:92:49:fb:d4:
19:9a:35:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:15 2026 by rpki-client