
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/18B5AF9EBDCB11EA8AB8267EC4F9AE02.roa
File: 18B5AF9EBDCB11EA8AB8267EC4F9AE02.roa (raw, json)
Hash identifier: chiKykuewQici8spAKzMG9lQ4Uw2Forf0iwbrZhNl9g=
Subject key identifier: F2:F2:92:30:83:9F:A4:8D:00:B0:E7:F7:3B:19:83:91:B0:C8:EC:90
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E4AB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/18B5AF9EBDCB11EA8AB8267EC4F9AE02.roa
Signing time: Sun 31 May 2026 16:55:43 +0000
ROA not before: Sun 31 May 2026 16:55:43 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 136372
IP address blocks: 103.81.139.0/24 maxlen: 24
103.95.234.0/24 maxlen: 24
103.104.202.0/23 maxlen: 24
103.171.106.0/23 maxlen: 24
2001:df5:b9c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58539 (0xe4ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:55:43 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c680f-cc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:de:24:92:6c:9e:9d:48:2b:ab:1c:c6:c2:
2a:a0:1c:d5:53:a7:38:c3:f3:49:be:d5:f4:98:29:
84:c3:57:fc:6a:5d:12:15:0f:59:00:28:f2:28:3a:
db:17:a6:32:0e:f3:84:6e:55:ef:09:be:00:19:a4:
0b:38:06:e8:9d:9c:e6:f9:58:90:85:9a:55:41:7f:
82:7b:a5:06:4e:c1:92:09:54:19:d7:22:cb:8c:e3:
e6:79:ad:34:cd:58:34:cd:19:a8:ea:6e:e1:9f:d5:
57:2b:48:55:31:44:c9:41:42:97:6b:dc:d0:be:91:
61:8c:f1:ac:9d:d5:e1:9f:23:78:97:17:fc:e2:40:
43:96:fb:ae:c8:d1:7e:f9:9a:15:96:22:0e:15:f3:
2c:65:b8:f3:76:73:ad:5d:58:5c:36:f4:3e:12:04:
e9:41:42:fe:f4:14:b5:b7:5c:6c:05:70:83:9f:ed:
1f:04:a8:b1:20:40:c0:a0:7d:1e:f3:c1:c4:01:ea:
53:cd:01:e2:70:c7:85:b9:d1:ed:8e:0a:45:ef:89:
c4:89:b7:6b:cf:96:c0:ab:a0:2d:69:f2:f3:18:49:
37:90:2d:d8:04:42:ca:55:08:95:54:9d:49:41:7f:
a1:d1:4b:89:64:c9:dc:8d:c2:e4:32:11:a6:66:ba:
2f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F2:92:30:83:9F:A4:8D:00:B0:E7:F7:3B:19:83:91:B0:C8:EC:90
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/18B5AF9EBDCB11EA8AB8267EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.81.139.0/24
103.95.234.0/24
103.104.202.0/23
103.171.106.0/23
IPv6:
2001:df5:b9c0::/48
Signature Algorithm: sha256WithRSAEncryption
1f:72:e7:6f:ce:d5:bc:fe:f6:8d:6b:45:76:90:7f:3e:bb:11:
9f:09:c2:23:44:e3:95:8f:a9:32:3a:d6:37:b7:a8:a9:1b:6c:
e7:9a:4b:18:76:68:fa:89:cb:13:dc:52:67:83:44:6b:7d:2a:
70:51:4f:a7:07:36:10:a2:c0:5a:19:82:74:da:6b:bf:01:25:
05:2d:fa:3f:fd:59:36:5d:4d:ae:ba:f5:b0:c9:05:b5:98:41:
d5:57:66:99:eb:bd:05:2f:5e:32:06:77:bc:0e:67:9e:ce:4c:
94:7d:b0:a8:20:46:e6:d5:c9:1d:2b:e8:40:3f:dc:08:49:46:
88:96:8a:41:1a:3f:00:99:85:0c:50:a4:d6:24:47:e1:e9:7a:
57:98:6e:88:cb:c4:97:21:7e:24:dd:60:ef:d5:f6:7a:1b:b2:
65:aa:21:c5:77:a2:2d:1e:20:45:9a:cd:8e:0b:18:01:4b:83:
6c:7f:1f:c5:a0:b6:d3:ee:75:c1:68:2a:c4:6f:64:1c:aa:61:
3c:b7:f4:d2:4e:d2:80:91:40:07:3f:6a:79:12:8e:9e:90:22:
68:cd:22:00:30:58:3c:65:6a:b3:e5:c5:70:5b:a9:47:84:f4:
5c:89:11:1a:36:a7:c2:27:43:41:37:ab:e3:5d:a2:71:72:9e:
19:de:29:00
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIDAOSrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2NTU0M1oXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzY4MGYtY2M1ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM143iSSbJ6dSCurHMbCKqAc1VOnOMPzSb7V9JgphMNX/GpdEhUPWQAo8ig6
2xemMg7zhG5V7wm+ABmkCzgG6J2c5vlYkIWaVUF/gnulBk7BkglUGdciy4zj5nmt
NM1YNM0ZqOpu4Z/VVytIVTFEyUFCl2vc0L6RYYzxrJ3V4Z8jeJcX/OJAQ5b7rsjR
fvmaFZYiDhXzLGW483ZzrV1YXDb0PhIE6UFC/vQUtbdcbAVwg5/tHwSosSBAwKB9
HvPBxAHqU80B4nDHhbnR7Y4KRe+JxIm3a8+WwKugLWny8xhJN5At2ARCylUIlVSd
SUF/odFLiWTJ3I3C5DIRpma6L6ECAwEAAaOCAoMwggJ/MB0GA1UdDgQWBBTy8pIw
g5+kjQCw5/c7GYORsMjskDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE4QjVBRjlF
QkRDQjExRUE4QUI4MjY3RUM0RjlBRTAyLnJvYTBCBggrBgEFBQcBBwEB/wQzMDEw
HgQCAAEwGAMEAGdRiwMEAGdf6gMEAWdoygMEAWerajAPBAIAAjAJAwcAIAEN9bnA
MA0GCSqGSIb3DQEBCwUAA4IBAQAfcudvztW8/vaNa0V2kH8+uxGfCcIjROOVj6ky
OtY3t6ipG2znmksYdmj6icsT3FJng0RrfSpwUU+nBzYQosBaGYJ02mu/ASUFLfo/
/Vk2XU2uuvWwyQW1mEHVV2aZ670FL14yBne8DmeezkyUfbCoIEbm1ckdK+hAP9wI
SUaIlopBGj8AmYUMUKTWJEfh6XpXmG6Iy8SXIX4k3WDv1fZ6G7JlqiHFd6ItHiBF
ms2OCxgBS4Nsfx/FoLbT7nXBaCrEb2QcqmE8t/TSTtKAkUAHP2p5Eo6ekCJozSIA
MFg8ZWqz5cVwW6lHhPRciREaNqfCJ0NBN6vjXaJxcp4Z3ikA
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:16:49 2026 by rpki-client