
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/128C8D62C36711EF9BC0BB70C4F9AE02.roa
File: 128C8D62C36711EF9BC0BB70C4F9AE02.roa (raw, json)
Hash identifier: ZU76FAHcifrNjbQPx5B06G56lRzuxGq+ZYVYibnzS/c=
Subject key identifier: 14:E5:DD:8F:56:74:4A:5A:E4:30:5C:57:F9:16:81:CC:13:7C:AA:E2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E695
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/128C8D62C36711EF9BC0BB70C4F9AE02.roa
Signing time: Sun 31 May 2026 17:11:50 +0000
ROA not before: Sun 31 May 2026 17:11:50 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 140180
IP address blocks: 103.155.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59029 (0xe695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:11:50 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6bd6-fbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:15:21:be:7d:e4:34:36:31:df:32:bd:13:ff:
9b:7c:d8:a5:90:b7:b6:eb:99:b4:28:a5:79:63:57:
2e:79:54:30:3f:ea:e5:97:75:9a:f2:7c:e2:72:b4:
e2:65:99:9d:32:5f:03:e7:0a:4e:21:35:2d:4f:2b:
4d:14:59:db:6f:2b:6e:00:9b:ac:67:00:e5:84:c8:
a8:45:d1:b1:d1:d5:e6:6d:bb:92:83:b1:eb:0b:89:
29:79:80:2b:54:31:72:4a:a6:79:4b:42:b4:22:a3:
c3:ac:2b:c7:05:f2:a4:79:11:bf:ba:74:44:69:3a:
42:a3:71:98:4c:34:a4:8e:ba:be:e2:1a:90:12:3d:
8a:c3:24:18:c9:43:5b:29:e3:61:f1:f8:a1:63:14:
d5:95:8f:78:5e:6c:e7:b9:8d:f8:44:aa:e5:6b:38:
4a:96:9e:67:de:b1:60:71:e4:a6:49:d5:8b:da:dc:
04:8a:ce:32:74:b7:7b:a9:3f:86:5f:bf:ba:59:c3:
c8:69:51:fc:57:8d:a2:63:45:3c:96:63:1a:c8:90:
da:77:2f:ec:93:31:56:06:33:c1:e1:e9:17:60:66:
a9:31:6d:2f:2a:d1:1f:b9:18:53:a9:2c:e2:e8:46:
1e:3d:67:d2:e8:ad:59:da:8e:7c:3e:a6:08:b2:e1:
40:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E5:DD:8F:56:74:4A:5A:E4:30:5C:57:F9:16:81:CC:13:7C:AA:E2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/128C8D62C36711EF9BC0BB70C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.108.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:8c:46:b4:b8:b1:d6:2a:e0:3f:35:8e:87:cb:ae:77:58:da:
7c:86:bf:c9:73:06:28:47:46:e1:58:85:f4:23:5a:9e:46:09:
97:8a:ce:53:bb:1c:fd:ff:85:63:58:4b:46:3d:8d:0f:3a:75:
7f:ee:75:23:7f:c7:d6:f2:64:e6:93:0f:36:a9:67:fe:d1:11:
23:9c:4c:c5:43:02:27:ab:fa:19:69:ff:f8:ed:79:b2:5c:a8:
5a:13:66:13:5b:11:91:a6:81:74:52:9d:41:1f:33:fc:65:05:
67:42:40:57:27:26:5a:76:5e:f0:54:fc:88:63:b2:83:09:b8:
f4:03:a3:22:e1:0f:01:f4:d3:64:90:1b:4b:b1:5f:20:f8:1d:
e1:b3:09:85:43:26:c7:ea:08:b1:aa:81:0a:d4:56:81:a4:15:
22:68:12:09:d1:b7:b8:81:c5:8c:5a:58:ca:71:65:41:fc:51:
53:c5:46:69:94:9a:2f:cc:d9:7b:27:78:a5:a5:59:98:03:3e:
e9:50:67:0b:51:6b:10:aa:9a:91:b0:ca:42:78:36:c1:c5:6d:
c6:1c:d1:16:c6:7b:20:0d:26:be:4f:d4:4c:e8:95:38:86:ef:
4f:b8:72:92:53:f4:45:1b:d7:f2:79:20:7f:78:47:fa:73:35:
b4:e0:fa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:52 2026 by rpki-client