
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/18B7AAD4C84611EBAEB6C550C4F9AE02.roa
File: 18B7AAD4C84611EBAEB6C550C4F9AE02.roa (raw, json)
Hash identifier: wpGebpn3Zy2thpnB37UPhdoNQvW0h4SSVmpZ2vSAHMY=
Subject key identifier: 68:65:CE:09:5C:7F:B4:6F:70:18:4E:C4:BC:F2:A1:AA:75:65:09:09
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E542
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/18B7AAD4C84611EBAEB6C550C4F9AE02.roa
Signing time: Sun 31 May 2026 17:00:34 +0000
ROA not before: Sun 31 May 2026 17:00:33 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 137165
IP address blocks: 103.105.44.0/22 maxlen: 24
103.167.48.0/23 maxlen: 24
103.174.128.0/23 maxlen: 24
103.175.4.0/23 maxlen: 24
103.175.6.0/23 maxlen: 24
103.176.132.0/23 maxlen: 24
2001:df0:fc0::/48 maxlen: 48
2001:df7:c680::/48 maxlen: 48
2001:df7:e080::/48 maxlen: 48
2001:df7:e180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58690 (0xe542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:00:33 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6931-311b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:1d:c7:56:dd:f8:fd:eb:2c:f1:27:c6:d8:
3e:b9:7d:51:28:ff:a8:00:3d:64:a1:26:3d:80:18:
94:a0:17:90:7c:4e:3e:36:07:a6:21:28:b0:49:cc:
62:0e:5e:1c:64:f6:3b:40:16:a4:74:12:6b:51:db:
79:42:20:0a:f0:2a:3b:83:bb:68:0b:d5:76:07:64:
cf:9c:d2:d0:26:4d:3b:ac:1d:12:9a:3a:aa:6c:54:
b5:f1:52:06:be:60:2b:b0:69:1a:b8:f7:bf:82:14:
13:62:7e:83:05:97:44:98:23:14:3c:b0:e8:13:8f:
0e:9c:d8:9f:cb:91:32:13:b3:ba:58:ed:6f:d4:a7:
6f:fb:8f:35:66:58:15:dc:56:a8:e9:fd:ef:3d:e2:
44:0e:c6:2a:5c:3d:2c:a9:79:14:c0:00:bc:2d:d7:
f1:ab:cb:63:94:54:e6:da:b3:05:43:49:ab:f9:6a:
3d:11:9b:7b:ff:a8:eb:e8:50:d0:e1:df:59:ad:51:
26:a3:24:28:d1:9f:3c:f5:01:55:ed:17:8c:14:6f:
08:c4:ed:56:64:b8:2b:e7:28:61:4e:5f:fa:9e:4b:
eb:ec:ff:df:e1:78:cd:48:3e:d5:2b:86:73:38:3d:
6e:1e:ae:e0:60:cf:0c:4a:07:87:19:b9:77:62:34:
35:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:65:CE:09:5C:7F:B4:6F:70:18:4E:C4:BC:F2:A1:AA:75:65:09:09
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/18B7AAD4C84611EBAEB6C550C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.105.44.0/22
103.167.48.0/23
103.174.128.0/23
103.175.4.0/22
103.176.132.0/23
IPv6:
2001:df0:fc0::/48
2001:df7:c680::/48
2001:df7:e080::/48
2001:df7:e180::/48
Signature Algorithm: sha256WithRSAEncryption
25:a4:8f:69:c4:ac:e4:58:8e:40:23:7a:6d:6b:60:79:92:11:
a3:a4:b2:14:46:02:64:51:c6:0b:e4:c0:5b:92:13:e7:90:d1:
73:6a:d4:a1:0e:ad:38:0e:eb:02:1f:43:23:a2:0a:2c:c7:f4:
3c:f3:c0:81:fb:53:e1:ed:f3:a0:29:48:c2:98:24:ca:90:7c:
22:52:98:a7:60:da:8a:a3:bc:e3:87:c7:a5:e7:93:e3:31:55:
ec:e8:47:c2:76:ac:bd:04:22:3f:be:21:4c:d0:c5:d2:59:9c:
71:e6:d4:68:45:77:5d:bf:fd:80:7d:1c:93:0d:56:eb:fe:dd:
fd:2d:b4:2b:14:8d:ae:f2:77:3c:ab:e1:12:07:53:68:e8:70:
7c:0f:3b:7c:1d:90:dd:c1:1e:a4:04:40:d9:5c:8e:e0:10:33:
a8:b0:17:2a:62:5a:98:49:72:55:6b:ff:65:ec:7d:65:94:72:
54:c1:5c:7e:ec:4c:a2:69:f9:64:f0:ae:92:44:3b:eb:91:0f:
55:17:7d:a0:b5:08:f4:a7:cc:df:ac:db:64:20:2c:81:b4:13:
3f:e5:f2:c8:78:4c:b5:cc:7b:5b:4e:a8:52:f0:3c:ae:44:43:
7d:1a:a2:f7:a3:06:c2:cb:b5:71:55:42:79:be:41:60:6e:79:
bd:96:05:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:32 2026 by rpki-client