
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/209CD00A7C9B11EFB1CA555DC4F9AE02.roa
File: 209CD00A7C9B11EFB1CA555DC4F9AE02.roa (raw, json)
Hash identifier: 1JStiFOXi7v+a5KVcezf/UmLEPkGhksyupVzYSNWdlQ=
Subject key identifier: 69:01:CD:77:53:32:7B:70:DF:1C:81:4B:16:24:F1:87:41:B3:2C:D0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E8CA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/209CD00A7C9B11EFB1CA555DC4F9AE02.roa
Signing time: Sun 31 May 2026 17:30:21 +0000
ROA not before: Sun 31 May 2026 17:30:21 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 149557
IP address blocks: 103.185.100.0/24 maxlen: 24
2001:df0:96c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59594 (0xe8ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:30:21 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c702d-fff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:eb:c9:78:7d:ab:01:b2:0d:4f:1b:90:31:12:
32:93:e0:66:f3:7d:07:59:44:d7:f5:3d:12:eb:95:
0a:11:f4:bf:bb:37:f2:43:c5:88:a8:8b:e5:14:5a:
f6:03:b0:75:d7:9b:dc:9a:63:78:27:b1:d2:45:e2:
ad:71:03:03:cf:18:aa:83:36:61:8a:00:6f:b7:77:
e9:ca:28:e8:42:2f:24:b7:66:74:8d:3a:3c:36:8b:
27:9e:db:2e:53:a9:34:f9:6a:49:1e:cf:97:0a:00:
68:74:ec:81:b2:7a:b3:6f:a9:73:66:0e:e5:50:2d:
bb:9c:89:28:c8:5d:0f:e6:a5:5b:34:25:14:62:3e:
07:95:a1:3d:d1:bc:7e:7b:9c:fd:b8:b2:7f:f6:40:
8a:6e:ff:77:c1:e2:31:99:01:d9:2a:2b:03:26:8f:
ea:3f:51:84:b6:39:59:ca:ee:70:6e:6b:7a:93:11:
85:55:73:ee:7b:c2:dd:07:89:a8:9d:7a:01:ea:49:
3b:a7:63:b5:4a:c2:9a:65:25:19:2a:36:32:04:33:
f2:64:bb:cd:f1:6a:a3:99:2a:ea:15:1d:9b:98:f4:
79:08:dd:d2:c8:6d:ab:48:c1:37:05:ab:8a:4d:69:
9c:6d:41:aa:1a:93:7d:e3:5d:32:31:93:7f:c9:d8:
19:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:01:CD:77:53:32:7B:70:DF:1C:81:4B:16:24:F1:87:41:B3:2C:D0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/209CD00A7C9B11EFB1CA555DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.185.100.0/24
IPv6:
2001:df0:96c0::/48
Signature Algorithm: sha256WithRSAEncryption
7c:9f:31:66:58:51:50:21:8b:91:7d:21:ed:5c:c6:83:13:37:
30:41:39:3f:21:f0:61:2a:b2:37:7f:8c:32:89:6f:a6:71:2c:
0e:6b:b2:2c:58:1b:01:60:39:48:c0:e7:1c:4b:d1:84:f7:c9:
21:b8:57:79:31:bc:ab:15:b4:f4:4d:0e:84:35:df:81:02:40:
cc:6e:8a:2c:a9:89:0d:4c:ce:4d:0b:23:ba:8f:e0:24:9b:67:
66:3a:e7:97:75:ff:b9:18:f1:29:e6:3c:fd:aa:05:b7:7e:e2:
8e:78:74:a7:06:5b:c2:09:81:31:25:d9:1f:6e:df:97:57:9b:
a9:29:2d:5c:0c:7f:e9:f9:2b:49:21:fd:bb:29:bb:6e:80:5d:
2d:07:c7:18:e9:e8:80:d4:fb:c0:b1:8a:f2:da:ae:21:b3:0c:
bd:e4:7b:d3:21:ce:9e:f4:85:08:cf:75:ed:e9:13:d2:1b:7b:
45:ad:da:77:3f:47:51:44:b7:54:dd:f4:af:0b:16:ba:a4:cb:
d6:77:a2:d5:ac:a6:df:69:b0:4b:d2:2f:85:43:35:a6:57:e9:
b8:79:8b:f7:a9:ac:45:e6:12:f7:51:88:07:c1:34:9e:c8:d9:
3e:b6:e5:36:b4:1d:c0:bf:53:86:8d:70:49:a3:dc:1b:7b:0f:
59:e1:52:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:08 2026 by rpki-client