
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/269D55EA662B11F0857BB574C4F9AE02.roa
File: 269D55EA662B11F0857BB574C4F9AE02.roa (raw, json)
Hash identifier: rk1iewZ73LEY7GJ8iSN9mLn16lIVwoDTdXdsdvpQvxc=
Subject key identifier: 3B:F0:E7:CC:1D:0B:CE:A0:71:8E:02:27:BF:3E:D4:08:1C:63:B6:91
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E203
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/269D55EA662B11F0857BB574C4F9AE02.roa
Signing time: Sun 31 May 2026 16:33:43 +0000
ROA not before: Sun 31 May 2026 16:33:43 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 132923
IP address blocks: 43.228.228.0/22 maxlen: 24
103.85.90.0/24 maxlen: 24
103.156.142.0/23 maxlen: 24
103.159.38.0/23 maxlen: 24
103.215.158.0/23 maxlen: 24
103.240.32.0/22 maxlen: 24
2405:8340::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57859 (0xe203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:33:43 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c62e6-9078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:fe:27:89:3a:c7:e2:90:e0:86:a5:a1:c6:
73:f3:8f:78:f9:96:fd:c9:1d:54:22:71:39:92:91:
f8:6a:23:91:0f:be:cf:48:18:d2:81:8c:ae:ba:87:
a7:9e:d2:ed:65:b1:06:aa:40:b4:51:5d:b2:20:36:
1d:2e:30:ab:91:58:78:84:ca:35:05:66:e3:21:a2:
70:62:2f:a1:5c:a3:63:96:d8:80:fb:d2:7e:50:cd:
36:8b:43:96:07:7d:7e:ea:66:c5:7b:8c:26:d4:01:
f0:e8:11:b9:66:64:8a:b9:2f:23:60:e9:d2:65:c0:
83:6a:4a:8f:01:60:5e:c5:54:c5:72:e5:28:74:1d:
ef:df:11:57:24:9b:31:a9:87:44:5b:c4:a2:be:d7:
a9:a7:f1:ed:a4:4c:1b:a9:02:c6:1a:7b:7d:20:32:
c4:63:36:c8:1d:89:2b:40:79:bf:30:a8:ad:c0:44:
6b:de:bf:60:70:f2:6c:74:81:3a:a9:43:26:5d:94:
2a:dc:f2:cb:76:62:a7:a9:74:32:f7:65:ce:7f:81:
52:8f:00:a7:7e:51:00:e5:63:03:d9:66:8b:e7:29:
05:76:d5:f9:51:92:28:0a:0b:a5:df:2b:50:18:68:
f2:69:5e:c1:93:09:2e:9d:fd:f9:8a:d7:31:62:fb:
c8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F0:E7:CC:1D:0B:CE:A0:71:8E:02:27:BF:3E:D4:08:1C:63:B6:91
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/269D55EA662B11F0857BB574C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.228.228.0/22
103.85.90.0/24
103.156.142.0/23
103.159.38.0/23
103.215.158.0/23
103.240.32.0/22
IPv6:
2405:8340::/32
Signature Algorithm: sha256WithRSAEncryption
9f:eb:37:2f:eb:4e:30:73:be:4c:c7:1f:51:5e:90:44:11:08:
0a:8d:b3:3c:d7:9a:b8:d3:bd:08:ea:14:ba:cf:80:f0:65:4f:
bb:81:6c:e1:a3:98:ae:d9:39:0b:8a:c3:c5:a7:f3:34:f4:c6:
21:5d:8e:c5:54:bd:41:6c:b0:c8:f9:ae:42:9f:c0:0c:c1:36:
03:f1:5d:d7:60:fe:b4:45:db:14:dd:ba:e7:61:7c:dc:11:ad:
f0:bd:e5:52:25:70:61:49:21:42:ba:3e:79:8c:a0:e9:b1:fa:
6c:28:c2:48:e3:bb:ec:a0:f4:82:f9:fe:74:e0:fc:d1:82:a8:
3b:10:6e:d8:aa:a0:79:f6:39:3d:9d:28:d1:49:54:94:2b:4c:
1e:38:0e:49:1d:9f:39:c0:95:20:a7:bb:e4:a7:7e:b6:9b:bd:
de:5a:ee:d9:9d:3a:ec:3d:26:a1:45:f7:54:6a:79:a4:c4:28:
fc:1f:b2:48:8b:8e:0e:58:0d:8a:58:56:7d:80:42:49:1c:88:
7f:62:01:85:61:4c:81:f5:b2:c4:74:4f:48:99:8d:7b:e8:2b:
1f:f8:4b:41:88:29:fb:92:ab:6a:52:38:fb:31:29:c3:8f:3e:
d9:1e:0b:12:b5:ce:45:3e:ec:47:34:da:18:14:0c:f6:d5:9a:
a2:91:17:9a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:28 2026 by rpki-client