
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C8C7738BDCB11EA8AB8267EC4F9AE02.roa
File: 1C8C7738BDCB11EA8AB8267EC4F9AE02.roa (raw, json)
Hash identifier: RIDEyz0umIvpcWpZ/qfYkIFETmSeiRnxKSiRB07RrPw=
Subject key identifier: 59:52:2F:CD:5E:2B:22:3F:6E:E9:21:46:BF:51:33:6A:8D:92:15:EA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E518
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C8C7738BDCB11EA8AB8267EC4F9AE02.roa
Signing time: Sun 31 May 2026 16:59:11 +0000
ROA not before: Sun 31 May 2026 16:59:11 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 137108
IP address blocks: 103.109.134.0/23 maxlen: 24
2001:df4:4500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58648 (0xe518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:59:11 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c68df-2bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9c:96:c6:b3:98:42:5e:46:a8:67:bd:34:81:
99:01:73:b7:be:ed:73:6e:3a:fe:e8:92:56:26:e7:
2b:01:5c:39:39:d9:18:84:d0:fa:dc:6d:b7:1b:d1:
64:8b:98:78:47:4f:ba:07:d1:2a:ca:94:2d:71:fd:
40:be:15:44:86:98:29:16:1c:8f:26:51:93:9e:73:
08:e1:4b:80:34:3e:e3:85:46:83:7a:c5:c9:b0:a7:
f1:99:6f:bb:fd:be:7b:04:ef:97:c7:b9:df:f6:59:
14:98:ce:0c:02:44:6c:2d:94:67:69:70:c3:61:46:
70:40:30:ab:e6:c1:bb:f7:cf:96:21:8e:af:b2:18:
c2:86:84:91:ca:ad:87:6f:fe:cc:25:95:36:90:1d:
6c:e7:d7:83:8b:6e:7f:ec:a5:96:8c:b2:5b:3c:8f:
df:ba:d7:b5:eb:cc:a9:22:56:6d:32:3f:b7:fa:f5:
80:b0:c9:f9:7f:9c:95:11:83:64:0a:a2:5f:89:58:
47:80:23:00:1f:d9:d6:bc:d1:08:2b:b1:04:07:45:
fd:a9:89:9c:5f:3e:70:57:68:1d:6b:85:56:8a:7d:
d9:9e:07:c3:74:c7:f5:f6:09:1d:a4:1b:1c:fd:f0:
9b:ae:60:f8:60:3e:d4:2f:09:0f:23:e3:a8:a3:a4:
a4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:52:2F:CD:5E:2B:22:3F:6E:E9:21:46:BF:51:33:6A:8D:92:15:EA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C8C7738BDCB11EA8AB8267EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.109.134.0/23
IPv6:
2001:df4:4500::/48
Signature Algorithm: sha256WithRSAEncryption
04:ca:7d:53:53:ac:b8:21:28:6b:7c:80:d2:fd:6e:fb:53:86:
ac:95:c1:50:2f:9b:30:2e:10:28:42:29:54:3d:1a:60:92:84:
9e:4b:b0:e6:e3:36:69:cd:ee:33:bf:b7:34:5c:16:11:a9:96:
ad:2c:f4:0b:49:e8:21:d2:9d:af:12:3f:be:c2:21:46:87:d3:
99:74:21:d1:99:11:4f:27:c1:4a:96:7f:52:c0:4d:28:34:15:
44:74:ed:82:3d:d9:e3:7e:2d:c3:9f:81:7d:51:2c:c7:e3:0e:
cb:76:9b:9a:dc:fb:fa:9b:ff:8f:51:79:ca:13:4d:75:fe:c5:
40:11:ce:fa:18:f9:0b:42:c7:91:09:09:ff:88:7a:4a:9b:cf:
e2:60:5d:89:67:9b:67:93:38:19:da:bd:51:e1:59:20:ac:ae:
d1:a1:48:cb:c7:41:40:a1:2e:83:b2:f6:59:eb:17:30:aa:48:
b0:e2:28:5a:87:57:ac:e1:d3:28:d1:48:bf:54:18:69:d6:8c:
a0:d8:cc:9e:47:5d:12:bf:a5:5d:32:47:fa:b9:31:2a:80:1a:
75:cf:16:8c:b7:6b:4a:2e:0d:3e:41:38:6c:02:f9:ef:10:8c:
37:38:9f:65:3a:36:34:bc:53:aa:a5:d8:61:e3:1e:0d:28:82:
39:8a:b5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:33 2026 by rpki-client