
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2175F4B4C81511EFAC69C117C4F9AE02.roa
File: 2175F4B4C81511EFAC69C117C4F9AE02.roa (raw, json)
Hash identifier: nX1GMrA+JkCZiTcJAnAXvDcG+cphe0JZV6hKPZlhmKw=
Subject key identifier: 8E:92:72:2E:20:D0:DC:EF:D0:47:42:4C:1E:29:61:76:F1:C3:76:DA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E48D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2175F4B4C81511EFAC69C117C4F9AE02.roa
Signing time: Sun 31 May 2026 16:54:46 +0000
ROA not before: Sun 31 May 2026 16:54:45 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 136332
IP address blocks: 103.89.56.0/22 maxlen: 24
103.190.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58509 (0xe48d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:54:45 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c67d5-7e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:bf:6f:f7:2b:ab:59:fb:a9:aa:d4:1e:2d:
fd:f7:ad:8d:b8:eb:d7:39:ed:f9:e7:46:3e:6f:14:
a5:16:3b:20:73:c8:af:ea:8d:05:58:d8:32:10:5c:
85:d6:fd:61:1a:fa:4b:36:39:c2:4a:2f:d2:66:3b:
06:97:58:1a:3d:38:2e:56:cc:56:2a:f9:3d:c6:5b:
ed:d1:db:e3:6e:09:ca:96:10:b9:d2:c5:68:c6:eb:
bd:42:ae:fe:e2:4b:cd:8c:6c:49:02:72:47:c6:f9:
cc:48:84:52:75:36:ea:e0:c7:26:4f:6e:3c:87:bb:
04:51:e8:ad:6b:3f:f3:15:6d:77:8a:2f:47:40:a4:
34:90:ac:25:24:ce:55:ff:c6:b7:6e:34:9e:4a:7e:
48:f4:ff:b4:51:df:4a:2f:02:8a:a2:36:b3:1a:aa:
d4:d5:81:7a:e4:7c:22:14:f0:db:e8:da:9c:0d:e5:
06:73:66:80:27:99:1c:b6:a8:1e:fb:c9:f2:db:ed:
04:51:94:4f:83:0f:34:ad:c4:d0:74:fe:90:2e:5b:
1a:a0:1b:85:93:89:4c:3a:a7:80:97:0f:13:a7:2b:
ea:e1:d1:00:22:d3:4e:85:ac:52:37:52:57:64:f8:
66:73:86:3e:71:f8:4b:2e:72:20:06:bd:48:e2:6e:
18:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:92:72:2E:20:D0:DC:EF:D0:47:42:4C:1E:29:61:76:F1:C3:76:DA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2175F4B4C81511EFAC69C117C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.89.56.0/22
103.190.252.0/23
Signature Algorithm: sha256WithRSAEncryption
96:cd:a8:ed:39:05:92:4e:10:c9:3a:70:34:b6:6e:d5:b7:f3:
a0:48:15:40:fa:d6:ab:80:56:42:f5:46:f2:0e:eb:1a:06:02:
3c:0c:8e:50:ad:9b:c2:1d:fe:d0:0e:43:f0:4f:7f:23:3a:d6:
e7:5a:60:d5:7f:43:55:e5:30:4d:6d:6b:8d:3f:40:cb:4d:cb:
dc:f4:36:95:91:6c:39:8a:fd:95:b5:83:8e:5b:1e:bd:64:cc:
1d:0f:6f:51:2d:ca:c5:69:5c:2b:ae:72:bf:52:b1:95:f3:95:
e7:5d:94:f9:80:4f:e2:15:59:3e:f3:35:87:3f:11:13:82:93:
7a:86:c5:75:fd:cb:4a:2d:b6:65:9e:d5:30:d1:d8:f3:66:77:
ef:14:8c:a6:29:85:91:9b:57:6c:00:61:65:f0:c8:f1:4b:9f:
72:d1:f8:39:bc:70:83:3d:d4:f7:4f:f1:23:67:92:a3:ef:72:
58:f4:f9:90:c7:9c:19:ad:d4:72:1f:aa:50:76:cb:ca:d3:7b:
03:e9:c2:c3:df:2e:62:d4:ed:a1:f1:bc:fc:99:55:5a:01:9f:
cf:12:49:a4:99:7c:48:7b:28:78:50:e2:ab:21:df:e4:2b:0a:
c2:e8:4c:09:0f:69:50:a9:0f:43:5f:e0:c0:1c:ae:a9:af:1e:
c5:d0:ef:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:06:45 2026 by rpki-client