
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15E8D2B837BA11EC91248D3FC4F9AE02.roa
File: 15E8D2B837BA11EC91248D3FC4F9AE02.roa (raw, json)
Hash identifier: 1srL8cSJ5FAfAgC3JC8ov7aQUfqVY8AzY75uk+/gVvw=
Subject key identifier: 93:77:A0:C0:D5:E7:10:09:F8:CB:73:E8:D0:70:72:A7:1D:62:6E:CB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E7F2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15E8D2B837BA11EC91248D3FC4F9AE02.roa
Signing time: Sun 31 May 2026 17:22:59 +0000
ROA not before: Sun 31 May 2026 17:22:59 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 146895
IP address blocks: 103.173.44.0/23 maxlen: 24
2407:e140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59378 (0xe7f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:22:59 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6e73-3be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:23:14:85:34:8b:a3:9e:cc:3d:09:41:30:
58:40:fa:83:86:a8:77:6d:bb:5f:2c:2d:5b:83:ea:
09:fd:98:de:90:fb:0f:20:c1:76:e2:11:bf:79:96:
9c:4a:1f:f2:3d:37:11:41:b9:c6:6d:f6:b2:19:01:
55:6e:8a:0d:02:b4:41:9d:9a:e3:5c:3b:2f:47:55:
4a:ae:a1:6b:d6:38:85:d8:00:56:5c:a9:34:e3:54:
f5:7a:36:c8:fd:cc:4f:de:ef:16:d5:45:93:f3:6f:
36:e0:14:15:33:75:e8:8e:e0:4a:30:e3:c2:46:42:
58:a8:69:22:6c:15:ff:5a:2a:08:62:29:8e:b7:53:
b1:a0:89:5b:59:29:e7:57:30:c1:53:25:d5:38:c6:
48:ef:54:7b:a6:be:bf:82:b4:b1:3c:75:c9:be:9c:
a2:24:59:2d:ba:97:43:8f:3c:28:c9:28:e8:8a:0c:
7d:74:12:49:c7:50:be:fc:22:bf:d8:4a:5d:7e:f5:
6d:4f:5a:04:97:3a:d5:67:3a:78:e0:17:09:f3:a7:
cb:60:dd:9f:23:78:0a:6e:7d:78:2d:d1:ef:ea:4d:
3b:c2:2a:2d:23:e1:bb:83:8c:02:25:16:2b:02:1d:
97:45:f7:2c:d4:9b:08:4b:1b:e0:0c:ca:e5:35:45:
19:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:77:A0:C0:D5:E7:10:09:F8:CB:73:E8:D0:70:72:A7:1D:62:6E:CB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15E8D2B837BA11EC91248D3FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.44.0/23
IPv6:
2407:e140::/32
Signature Algorithm: sha256WithRSAEncryption
b2:0d:a1:fa:b5:c2:25:29:8f:e9:67:44:69:8b:c4:ed:2c:44:
0d:dd:3b:9d:11:2b:5d:c2:f6:b7:23:a7:aa:aa:12:c2:3e:5d:
96:5d:67:9c:be:65:62:0f:9c:10:ff:8b:08:a5:a5:07:0a:07:
70:6e:be:e3:cc:d2:29:3b:b6:4f:d1:4a:9f:74:ee:4f:7f:9a:
1e:f9:cf:57:90:45:a5:12:e4:e2:af:09:4b:d4:e7:d3:64:0d:
f7:5a:af:81:1a:91:27:43:da:85:ab:f7:0d:86:40:f7:cd:72:
82:16:86:41:81:3a:ce:06:c3:b9:4b:2e:cf:2e:1b:4f:06:2d:
e1:01:19:43:19:f4:74:44:ac:60:5f:c0:f9:9e:9e:67:b1:b7:
19:e0:83:43:28:c5:d9:70:b3:49:61:c5:df:ba:d8:a1:14:1a:
f4:63:78:82:1c:98:99:74:fb:e3:21:73:65:0b:a7:45:7e:7c:
96:d6:01:09:d7:b4:27:e2:18:11:03:59:85:59:41:31:e2:f5:
b9:1e:d6:3a:b7:93:57:02:4b:df:2b:3a:a4:d1:9f:b1:27:12:
fa:f0:7e:72:1f:64:d9:93:0d:4e:ab:f5:3e:05:ee:b8:c4:43:
cd:16:8c:0c:59:dd:b9:4f:72:a9:a0:50:74:fd:95:0f:40:81:
57:04:e0:e3
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDAOfyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MjI1OVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZlNzMtM2JlOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL5NIxSFNIujnsw9CUEwWED6g4aod227XywtW4PqCf2Y3pD7DyDBduIRv3mW
nEof8j03EUG5xm32shkBVW6KDQK0QZ2a41w7L0dVSq6ha9Y4hdgAVlypNONU9Xo2
yP3MT97vFtVFk/NvNuAUFTN16I7gSjDjwkZCWKhpImwV/1oqCGIpjrdTsaCJW1kp
51cwwVMl1TjGSO9Ue6a+v4K0sTx1yb6coiRZLbqXQ488KMko6IoMfXQSScdQvvwi
v9hKXX71bU9aBJc61Wc6eOAXCfOny2DdnyN4Cm59eC3R7+pNO8IqLSPhu4OMAiUW
KwIdl0X3LNSbCEsb4AzK5TVFGdkCAwEAAaOCAm8wggJrMB0GA1UdDgQWBBSTd6DA
1ecQCfjLc+jQcHKnHWJuyzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE1RThEMkI4
MzdCQTExRUM5MTI0OEQzRkM0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w
DAQCAAEwBgMEAWetLDANBAIAAjAHAwUAJAfhQDANBgkqhkiG9w0BAQsFAAOCAQEA
sg2h+rXCJSmP6WdEaYvE7SxEDd07nRErXcL2tyOnqqoSwj5dll1nnL5lYg+cEP+L
CKWlBwoHcG6+48zSKTu2T9FKn3TuT3+aHvnPV5BFpRLk4q8JS9Tn02QN91qvgRqR
J0Pahav3DYZA981yghaGQYE6zgbDuUsuzy4bTwYt4QEZQxn0dESsYF/A+Z6eZ7G3
GeCDQyjF2XCzSWHF37rYoRQa9GN4ghyYmXT74yFzZQunRX58ltYBCde0J+IYEQNZ
hVlBMeL1uR7WOreTVwJL3ys6pNGfsScS+vB+ch9k2ZMNTqv1PgXuuMRDzRaMDFnd
uU9yqaBQdP2VD0CBVwTg4w==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:18 2026 by rpki-client