
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1DBA318CE4E111ED90315A7AC4F9AE02.roa
File: 1DBA318CE4E111ED90315A7AC4F9AE02.roa (raw, json)
Hash identifier: XP3SMYHKcM+0hELfOAYVfbFe+YihN7309LwyOYIOzrM=
Subject key identifier: FB:EC:A5:3D:73:EA:79:52:B9:AC:3D:40:2B:2E:36:24:AC:15:AA:A6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E5F3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1DBA318CE4E111ED90315A7AC4F9AE02.roa
Signing time: Sun 31 May 2026 17:06:20 +0000
ROA not before: Sun 31 May 2026 17:06:20 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 138743
IP address blocks: 103.137.36.0/24 maxlen: 24
2001:df3:c4c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58867 (0xe5f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:06:20 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6a8c-7be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2c:02:7d:4c:98:d6:f3:9f:b2:ec:36:83:6d:
98:f4:ea:17:e4:d1:f5:ac:0f:b6:c8:b5:b7:f7:86:
a9:46:c0:26:17:46:1e:68:65:ed:3c:6e:fb:87:8a:
ff:6b:63:8c:75:fc:f0:ff:e5:d7:6a:24:f7:16:0a:
74:34:01:4c:41:ac:80:c3:ef:97:ad:8a:f7:07:94:
db:97:d2:91:86:1a:8d:1e:6b:1d:b8:98:be:29:a5:
d9:ae:21:c9:4d:b8:b4:e2:7b:80:77:bb:f4:78:33:
cb:8b:db:7a:c6:d7:6f:a0:82:32:1e:35:aa:27:bf:
e4:54:32:fb:ea:f8:39:ee:f5:94:92:89:2b:bf:5c:
6c:74:ac:e3:d6:8d:10:a5:b3:ce:6e:1e:4f:69:fa:
f1:e1:88:b8:80:2a:d7:8f:37:33:42:c2:72:9d:ed:
3a:71:22:2a:ea:da:27:40:02:08:57:ab:db:c8:31:
c0:59:76:a6:3d:03:cb:6b:c3:72:2a:92:46:15:dd:
b1:95:83:94:f4:f5:8a:52:b2:d5:d9:e6:76:13:6b:
be:12:b3:c9:e9:2e:6f:28:7d:87:3f:3b:ed:71:bd:
75:51:83:26:3e:32:56:29:ab:78:b6:f7:f0:68:b0:
9a:7a:43:b5:50:9f:ad:f7:15:c6:5f:47:91:cd:f1:
ef:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EC:A5:3D:73:EA:79:52:B9:AC:3D:40:2B:2E:36:24:AC:15:AA:A6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1DBA318CE4E111ED90315A7AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.36.0/24
IPv6:
2001:df3:c4c0::/48
Signature Algorithm: sha256WithRSAEncryption
43:46:82:d8:d9:01:56:c0:0b:e7:87:e6:03:82:bd:e0:82:0f:
f1:56:77:1f:f5:8b:20:04:66:37:94:cf:4b:f1:c3:3b:68:c2:
dc:4b:f4:dd:18:fc:a3:d9:7b:c8:98:18:64:17:4d:21:b9:c2:
e2:53:68:35:5c:fa:43:54:23:3d:e3:28:a8:15:39:4d:96:fa:
22:33:37:00:e6:fc:c5:1a:e2:f1:27:a4:28:d9:4c:6a:d9:5b:
e5:fb:ce:ea:a8:a9:9e:2b:0a:04:3e:99:ae:28:29:44:89:7e:
bb:ce:f6:4c:1f:f7:56:35:42:39:b8:67:be:1a:70:7a:d9:2d:
f3:3a:52:11:18:12:ae:2b:cc:8a:40:49:85:88:53:5c:b9:1f:
57:27:4a:d1:66:db:9d:4a:99:03:3c:16:0e:5e:37:ec:c4:bf:
7f:e2:99:b9:5c:b2:6a:51:09:b1:4b:64:26:1b:46:85:37:37:
e6:26:6a:7e:ef:48:71:57:c5:4e:62:85:f0:b1:eb:15:95:e7:
45:dd:06:7c:85:12:c2:a0:e4:76:82:04:14:50:76:67:fe:5c:
2e:08:23:36:82:9f:3a:cd:09:23:71:c6:00:53:2f:d3:7f:82:
9c:e9:42:f6:c0:db:f7:61:f0:83:e0:06:5b:93:a8:fa:37:c8:
02:24:1b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:25 2026 by rpki-client