
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1A667F98411A11EC841B9420C4F9AE02.roa
File: 1A667F98411A11EC841B9420C4F9AE02.roa (raw, json)
Hash identifier: jYTDRqxR+Hz1AntjYHERMx+gOVwLOcMp+eNmDO9lYSY=
Subject key identifier: 5A:F7:C8:8E:A1:CE:D3:26:D2:15:26:B5:D3:00:3B:C0:91:FF:7D:8B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E83D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1A667F98411A11EC841B9420C4F9AE02.roa
Signing time: Sun 31 May 2026 17:25:40 +0000
ROA not before: Sun 31 May 2026 17:25:40 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 147240
IP address blocks: 103.83.2.0/23 maxlen: 24
103.115.0.0/23 maxlen: 24
103.175.90.0/23 maxlen: 24
2001:df1:6ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59453 (0xe83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:25:40 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6f14-a2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:d0:2e:c8:9b:24:69:6b:fb:6d:72:4f:e7:
ef:1d:08:b0:93:a0:19:1d:a8:0c:60:d1:3b:94:f4:
16:7a:55:5c:bb:71:48:64:d9:8a:92:6f:5f:98:65:
af:85:f7:25:96:b7:24:f4:5e:11:80:7d:63:6e:c2:
e0:fb:5b:b8:3d:c9:08:99:91:19:d8:8c:d6:36:3f:
f7:52:fc:52:85:50:15:d5:19:60:74:6e:2a:50:f2:
3e:14:02:e7:43:3f:3a:21:69:ff:7e:9b:56:16:7f:
79:94:02:6e:bc:c6:b1:4b:e6:d5:91:76:b2:09:99:
3d:64:fc:ff:ec:33:42:d2:1b:97:62:a6:f2:5b:7f:
23:f0:d7:3e:41:04:8f:6b:ac:a4:59:69:74:ed:11:
bb:db:59:0f:db:31:c8:20:62:a5:3e:f0:43:fa:60:
1b:a7:ee:ac:7d:56:dc:98:a9:b5:8e:31:ec:9d:9a:
6a:ec:68:7a:7f:68:cd:b7:ee:eb:1c:46:b6:0a:10:
aa:6f:fb:e5:c0:81:93:63:c0:ea:17:b9:44:79:81:
15:05:57:60:81:c6:cf:b6:53:5b:8f:79:a3:1a:5f:
45:03:64:ad:87:3b:c9:ee:d6:b7:97:99:b4:88:c4:
9b:21:72:67:49:00:32:ad:e6:5d:58:d0:26:17:bc:
ff:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F7:C8:8E:A1:CE:D3:26:D2:15:26:B5:D3:00:3B:C0:91:FF:7D:8B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1A667F98411A11EC841B9420C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.2.0/23
103.115.0.0/23
103.175.90.0/23
IPv6:
2001:df1:6ec0::/48
Signature Algorithm: sha256WithRSAEncryption
08:16:f0:a1:1c:dc:62:04:8e:1b:16:00:50:4e:ec:1a:ba:74:
c1:d3:5a:35:63:6e:67:9c:04:b4:02:68:1f:86:e4:3b:78:f1:
e2:ef:0d:3b:fc:87:67:e7:40:4f:95:eb:68:56:78:f2:62:cc:
98:71:9a:55:4c:2c:81:9a:58:26:52:85:a9:75:88:47:cf:00:
ff:d9:06:c9:2a:1b:46:0a:05:69:cf:65:f8:7e:90:c1:34:58:
f9:84:c1:96:4d:82:65:54:81:99:82:34:9a:8c:b6:0b:e7:ee:
11:d4:df:73:eb:1e:ec:ad:5d:39:ab:4e:15:f2:8f:fd:ba:39:
b1:e5:ac:dd:cf:db:48:8b:49:86:a3:34:aa:e5:4e:7c:1f:a3:
5e:76:42:9f:ce:00:75:c4:db:14:fe:c2:45:08:ec:9b:15:16:
0f:e9:a2:f6:a1:16:55:ad:ce:78:67:3f:8f:aa:ff:94:ac:21:
5d:e8:ee:04:8a:3e:d6:88:c2:7b:fd:fb:e2:5a:91:f6:1a:1a:
70:f4:f3:38:66:cd:96:1f:20:f7:4d:07:a5:cc:a1:f1:9c:61:
85:08:a6:25:86:d1:27:74:54:0b:3c:29:fe:41:69:c8:7d:8d:
9b:21:ad:42:17:3b:a1:86:c2:6c:26:fd:59:07:d5:1f:50:6c:
69:70:43:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:13 2026 by rpki-client