
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/17558278BDCB11EA8AB8267EC4F9AE02.roa
File: 17558278BDCB11EA8AB8267EC4F9AE02.roa (raw, json)
Hash identifier: Wsp1YoKVVyLlOi2eRFFRrJOLG6o+D6XjsMpTCxTivWQ=
Subject key identifier: 0F:3A:40:D2:00:E8:92:17:D8:C8:26:40:00:94:FA:AF:57:50:C5:42
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E410
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/17558278BDCB11EA8AB8267EC4F9AE02.roa
Signing time: Sun 31 May 2026 16:50:45 +0000
ROA not before: Sun 31 May 2026 16:50:45 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 135756
IP address blocks: 103.74.169.0/24 maxlen: 24
103.112.83.0/24 maxlen: 24
2407:6e40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58384 (0xe410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:50:45 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c66e5-7655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:84:6b:39:db:02:86:ae:a4:a8:20:02:c0:
45:88:63:83:ac:1b:45:8d:12:0f:e4:a2:57:c4:37:
df:75:34:ba:db:6c:31:73:ef:ac:c6:8e:8b:cb:89:
8b:a6:49:15:9f:ba:c0:fa:79:b8:00:2a:55:d7:a1:
cd:75:5d:45:05:d5:d1:f0:33:aa:76:73:3b:c4:b5:
b6:65:79:b1:ae:ca:4d:8f:2f:42:da:5d:d1:26:f4:
eb:95:d8:71:1d:4e:c6:52:7e:fe:83:9a:7d:c4:f8:
67:57:84:93:c7:70:51:3b:bd:f8:65:45:8a:f6:ef:
fb:9d:6e:11:88:ea:33:23:61:56:c1:8b:b2:0c:4b:
b6:ff:49:0a:2c:71:f1:bc:ce:e1:cb:8b:04:44:3d:
af:7b:4a:b8:fd:f4:0c:95:0f:c3:cd:41:dd:1b:69:
fb:eb:9b:29:29:72:d9:f9:28:41:61:75:94:c9:98:
2b:d8:f5:e3:64:6f:cb:37:12:80:06:63:fb:da:46:
f1:61:8e:f5:14:9e:82:62:9b:4e:d3:12:5b:4c:68:
5c:72:ee:bb:7b:f1:04:ca:b5:8c:5f:58:8d:1d:9b:
fd:d0:05:33:08:05:c5:e5:05:f4:4d:03:46:ce:9d:
51:6b:b1:75:23:77:04:4d:16:07:3c:d4:6d:9c:ef:
80:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3A:40:D2:00:E8:92:17:D8:C8:26:40:00:94:FA:AF:57:50:C5:42
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/17558278BDCB11EA8AB8267EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.74.169.0/24
103.112.83.0/24
IPv6:
2407:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
65:9f:d6:2d:f4:9a:59:07:09:ab:c0:09:74:b1:45:0b:22:7c:
76:6c:0c:8a:19:a6:1a:a1:49:42:17:57:e3:07:fb:a7:d0:7c:
06:b5:67:c2:61:97:62:95:d5:f3:91:0d:56:40:d7:d8:82:a6:
a8:2f:d8:66:4d:89:8e:65:66:29:9d:5f:99:45:b9:ca:06:25:
ca:43:e1:54:e6:e4:89:6e:f5:f9:d3:eb:c9:10:72:fb:da:65:
c2:50:6e:e4:eb:68:09:21:b8:ca:b8:cb:ed:ac:a0:55:8f:35:
ee:fc:34:f7:bf:29:51:04:00:99:fa:9d:87:aa:56:7d:de:d4:
6b:c0:50:c7:14:18:1a:3d:d1:eb:0f:31:28:6d:b7:24:2c:4c:
b9:76:f4:bf:ce:95:01:21:ee:ab:60:9a:c6:ff:ba:1d:3d:46:
b7:fb:d8:f5:f3:79:f8:93:c2:6c:5f:e5:ea:6d:d3:39:de:a1:
19:02:c6:62:0f:20:8d:e0:06:f9:18:5a:ed:c2:56:a3:23:c2:
c4:0e:be:29:79:c3:74:4b:c3:b8:a3:d0:77:9d:9e:ac:67:de:
92:f1:f4:bd:23:96:e8:c5:cb:a5:cc:08:34:4a:9a:e2:ed:0e:
77:0c:57:0e:62:16:8b:26:83:81:8e:26:36:b1:7e:b5:fe:a0:
ce:82:6a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:06:41 2026 by rpki-client