
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/154E6D9C453811EBAD39C03FC4F9AE02.roa
File: 154E6D9C453811EBAD39C03FC4F9AE02.roa (raw, json)
Hash identifier: y59WL1/MGotkgAvwDtwYhEQWjZRqlZedth9WB2Y9z08=
Subject key identifier: 73:CA:15:06:9D:54:A4:61:66:8D:4A:85:2D:BB:1E:AA:63:71:AB:43
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E6F5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/154E6D9C453811EBAD39C03FC4F9AE02.roa
Signing time: Sun 31 May 2026 17:14:54 +0000
ROA not before: Sun 31 May 2026 17:14:54 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 141477
IP address blocks: 103.160.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59125 (0xe6f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:14:54 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6c8e-de68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:77:68:af:49:82:29:eb:51:1e:1f:36:7d:
45:5f:1e:f4:cb:f8:b6:0c:4a:02:bf:87:26:91:67:
31:5f:a6:3b:fa:20:8a:75:97:01:07:ba:59:92:48:
8f:13:0b:3d:b3:d5:b7:41:8b:d1:f6:e0:07:e9:ec:
cb:62:b5:b2:f9:b9:fd:13:3c:ee:61:06:59:63:6c:
5a:8d:14:9e:66:27:50:5c:c2:2d:3d:ad:2b:70:e2:
05:1a:a2:c9:0a:f2:34:06:84:6a:d9:ac:53:0f:c0:
0a:fa:53:15:90:fe:be:7a:cc:71:bb:29:f6:b4:42:
db:78:46:5b:e3:73:3e:05:53:8c:ba:89:fb:b5:5f:
c4:05:c4:37:18:65:37:a4:ee:44:db:15:c9:95:3c:
62:ca:89:df:29:46:a2:d2:79:eb:63:c6:50:9a:35:
be:f4:33:c8:6b:15:32:84:6f:bd:e4:bc:69:c8:33:
ee:97:67:8b:a3:a2:0c:b3:2b:1b:cf:51:b7:3e:dc:
e6:48:00:59:62:aa:ff:2e:87:8a:07:2b:71:db:fe:
7d:be:7b:21:c8:d7:39:18:69:48:ca:10:7b:a3:c9:
b5:ea:b8:d0:ac:5b:8b:c3:fc:9e:d5:96:ad:3f:de:
61:57:79:ec:bd:ed:ad:c1:76:b0:63:e6:d6:f7:54:
0f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CA:15:06:9D:54:A4:61:66:8D:4A:85:2D:BB:1E:AA:63:71:AB:43
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/154E6D9C453811EBAD39C03FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.160.209.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a2:b4:ad:c1:d0:d2:c6:17:09:b1:2a:66:ae:f8:59:d3:33:
75:19:09:ea:69:d6:a6:dc:51:ba:54:b5:bc:fa:ee:e0:1d:59:
75:23:ce:38:1f:0d:94:39:4e:5d:3f:98:a8:7a:e9:ef:2d:d1:
d4:c9:ce:06:4a:5e:bd:7f:ca:76:b3:ab:35:09:8e:aa:18:a2:
1e:c4:93:6f:8a:15:14:42:e5:bf:02:f5:33:97:57:84:cc:ae:
e6:79:f9:eb:fb:0d:51:87:3f:41:c0:39:73:43:e2:47:70:1b:
eb:8c:95:48:66:b5:66:24:de:a0:89:fb:f0:cf:eb:ef:4f:74:
c2:b4:1b:98:27:d5:00:f0:74:e8:64:7a:d5:50:01:4d:3a:86:
95:f1:0f:5e:61:73:9c:38:ef:1c:b4:18:ad:dd:69:ff:b7:8d:
3d:7b:e2:5c:e3:45:9c:8c:be:1b:26:05:70:dd:7e:2f:ff:33:
6a:fc:d3:75:7a:ee:71:92:cd:50:e6:81:8d:98:d7:0f:64:1c:
ea:78:42:f7:c7:42:7b:53:08:41:84:1f:a6:b4:6c:bd:fa:b3:
5d:5f:95:ba:7a:b2:93:95:4a:7b:cd:48:ca:a2:57:4a:c3:df:
0b:39:a8:64:96:fd:21:49:7d:f9:0d:53:46:ab:fd:c2:21:00:
ae:75:2b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:18 2026 by rpki-client