
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14E95DB6008E11EF8A421558C4F9AE02.roa
File: 14E95DB6008E11EF8A421558C4F9AE02.roa (raw, json)
Hash identifier: XW8AfR1EgHUan/ZqOpFQ/qGw9YmEgCtCSWwK27zIisc=
Subject key identifier: 39:7A:98:30:C0:3E:91:7B:EC:A5:97:2A:F7:0D:23:4F:B1:40:FB:EF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E9BB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14E95DB6008E11EF8A421558C4F9AE02.roa
Signing time: Sun 31 May 2026 17:38:29 +0000
ROA not before: Sun 31 May 2026 17:38:29 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 151126
IP address blocks: 103.133.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59835 (0xe9bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:38:29 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7215-3381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b4:db:f7:84:e4:13:e5:80:98:d7:01:27:8f:
af:1f:d2:f3:83:db:32:69:ab:1b:e4:e5:3a:36:63:
75:7c:86:e9:39:12:73:40:f2:f8:0f:da:d5:9c:bf:
4e:eb:63:27:51:79:50:fe:5f:1d:c1:91:12:97:ff:
96:a2:aa:66:44:64:51:06:f7:74:38:fc:15:9c:aa:
0c:6d:99:3c:cd:fd:c6:43:56:44:75:9c:72:c0:4e:
fb:85:98:a0:1e:39:3b:81:7a:e1:f1:46:93:80:80:
1b:74:fd:b4:c3:c6:cd:f3:83:07:03:a6:0d:58:9d:
0d:49:ff:2b:aa:db:59:26:df:df:2e:e4:2d:26:03:
15:f6:47:2c:fc:c6:34:24:c9:6f:43:31:d7:6c:37:
ad:ee:7e:fd:8a:c6:35:f6:0d:c7:ca:61:17:95:57:
b0:7e:ec:36:ff:8c:3a:96:9d:b5:b2:ad:49:f1:ac:
03:df:f4:67:09:3a:ac:ac:91:6e:96:af:52:95:7d:
3a:d6:43:f3:bc:3f:85:67:94:77:f0:e9:32:7b:0e:
97:f2:87:91:06:32:e8:04:87:34:c4:18:3c:5f:b2:
34:2e:d0:34:12:d7:5b:8c:b4:59:72:b0:3d:8f:61:
4d:58:50:1f:3b:1a:77:e7:76:b8:93:22:f3:f7:43:
18:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7A:98:30:C0:3E:91:7B:EC:A5:97:2A:F7:0D:23:4F:B1:40:FB:EF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14E95DB6008E11EF8A421558C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.133.156.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:a2:75:95:bd:74:00:a4:dd:83:1f:62:5d:47:fb:56:4a:1a:
7a:fe:18:d2:7e:84:40:09:58:97:51:16:15:95:5b:4a:07:c4:
67:57:ea:48:02:2d:10:02:e0:6e:10:63:60:e1:28:11:8b:7c:
9e:25:02:80:30:ff:d2:0e:21:bc:fb:81:b2:44:02:e4:38:c5:
57:08:de:52:15:1c:1d:5d:fc:2f:b0:f1:98:3b:34:f1:62:10:
12:f2:ec:52:17:94:1c:31:a3:6d:15:27:dd:93:15:09:4d:3f:
51:72:20:a3:e9:93:b2:47:e1:21:5c:49:c5:b0:3c:a6:d2:51:
f6:0a:65:79:97:7b:e5:56:21:6f:63:cc:4d:ba:37:50:93:f8:
8e:91:59:09:41:17:8d:05:1f:0b:e7:ad:39:b3:67:8e:a6:99:
a2:e3:42:11:2a:3e:f3:e7:71:a9:bd:2e:94:40:45:72:05:59:
db:f0:77:f3:25:ce:ba:d0:00:c9:23:c6:d0:fc:a3:95:66:1f:
1c:fd:3c:be:45:c1:46:e6:8c:9a:f6:d3:a4:d4:97:28:83:82:
47:8c:88:15:19:4c:b5:20:51:0d:4a:0f:c1:e1:01:74:40:46:
5c:39:be:19:f3:52:df:17:1d:ce:44:ad:fe:6f:6f:c9:6b:68:
99:d5:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:05 2026 by rpki-client