
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27028C5CC6E811ECBBCD4363C4F9AE02.roa
File: 27028C5CC6E811ECBBCD4363C4F9AE02.roa (raw, json)
Hash identifier: lDGXqf1cLcVpEac27dO5X4SzAEk7To/wCQCsiVa6ODw=
Subject key identifier: 47:A8:62:B1:05:D3:3F:B8:81:8A:BD:67:8D:5C:33:CA:39:9B:DD:F8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E8F6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27028C5CC6E811ECBBCD4363C4F9AE02.roa
Signing time: Sun 31 May 2026 17:32:00 +0000
ROA not before: Sun 31 May 2026 17:32:00 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 149615
IP address blocks: 103.143.180.0/23 maxlen: 24
103.185.160.0/23 maxlen: 24
2001:df0:98c0::/48 maxlen: 48
2001:df1:9080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59638 (0xe8f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:32:00 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7090-a809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:79:1d:4e:6e:c7:57:1e:33:d0:29:4a:fe:c7:
11:39:3d:ce:3b:61:d9:03:1e:9a:ed:84:f9:e1:be:
bc:63:6e:24:ee:54:4d:cd:c4:e6:9e:4e:c1:ec:2e:
60:cd:f9:d9:09:75:81:7a:91:55:e5:bd:fa:75:af:
56:3b:34:b2:02:99:5e:91:39:ff:c2:2f:30:1f:1c:
25:67:c3:2b:c1:e2:df:d4:5b:a5:e4:a9:cc:5f:af:
7e:88:61:42:e0:34:11:2f:93:6c:e5:28:76:2a:54:
9c:4f:79:28:03:26:b2:37:a7:d9:8c:5d:9d:98:ae:
2e:17:7e:ff:57:bb:10:0f:9f:30:14:e6:85:93:16:
6f:6d:65:89:3b:cf:f8:52:b7:e9:9b:84:74:81:81:
00:4e:fc:5b:74:f1:d5:40:14:5e:94:c7:10:8b:ea:
a7:f1:69:38:3e:12:46:33:19:e7:5f:88:42:11:02:
2c:da:6b:9e:62:f7:a2:cb:dd:2b:3b:32:6a:b3:20:
dd:82:fa:12:5f:cd:dc:3a:0d:ea:06:3a:2a:a6:f2:
cd:5a:5d:53:70:b5:00:58:db:b4:87:18:f9:83:05:
d1:e6:ec:ed:ca:31:a5:2e:96:91:75:3a:67:02:fc:
42:e1:0a:83:c6:19:b0:59:a9:dc:8d:70:ce:77:c5:
5a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A8:62:B1:05:D3:3F:B8:81:8A:BD:67:8D:5C:33:CA:39:9B:DD:F8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27028C5CC6E811ECBBCD4363C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.180.0/23
103.185.160.0/23
IPv6:
2001:df0:98c0::/48
2001:df1:9080::/48
Signature Algorithm: sha256WithRSAEncryption
9c:4d:75:8d:b7:95:09:a1:ef:c4:fe:23:2d:66:ab:b1:4b:c9:
b5:48:0d:92:10:0b:0c:2a:24:70:aa:de:9a:62:85:29:25:55:
98:15:f1:9f:e5:dc:3d:64:c7:0e:0e:95:52:02:db:55:0d:ed:
97:68:3b:98:ff:ff:15:53:cd:c5:ba:d4:6c:90:f7:49:62:da:
11:4b:a7:f5:8a:2f:86:47:5d:ac:7a:05:9b:be:85:ce:b3:1a:
47:db:61:88:95:6f:a6:3f:aa:aa:bb:05:eb:cc:59:ae:53:f4:
7c:86:eb:92:c5:ec:71:fc:c2:f7:85:16:fc:18:4a:45:88:7f:
c0:01:c0:7d:e9:b8:38:1a:eb:d8:65:9c:8c:2d:63:e3:1e:18:
4a:43:c1:38:0c:bc:09:bd:b9:78:cf:07:6b:a1:90:14:f9:42:
80:6d:35:b9:ae:57:3a:6a:7a:e4:af:1f:2e:19:ee:a6:5d:dc:
7d:07:30:6e:dc:0f:13:02:4a:ed:5e:77:9b:dd:e4:05:7b:cd:
6f:d0:4c:45:b1:87:60:7e:e7:c8:e8:79:aa:56:94:cc:6a:65:
d7:cc:f9:8f:ae:ea:d9:b1:ba:39:2e:28:2b:b0:aa:0a:a2:06:
c6:9d:2c:92:53:99:b7:69:6c:6c:58:43:c8:6f:4d:59:56:80:
7d:cb:53:77
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIDAOj2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MzIwMFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzcwOTAtYTgwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANp5HU5ux1ceM9ApSv7HETk9zjth2QMemu2E+eG+vGNuJO5UTc3E5p5Owewu
YM352Ql1gXqRVeW9+nWvVjs0sgKZXpE5/8IvMB8cJWfDK8Hi39RbpeSpzF+vfohh
QuA0ES+TbOUodipUnE95KAMmsjen2YxdnZiuLhd+/1e7EA+fMBTmhZMWb21liTvP
+FK36ZuEdIGBAE78W3Tx1UAUXpTHEIvqp/FpOD4SRjMZ51+IQhECLNprnmL3osvd
KzsyarMg3YL6El/N3DoN6gY6KqbyzVpdU3C1AFjbtIcY+YMF0ebs7coxpS6WkXU6
ZwL8QuEKg8YZsFmp3I1wznfFWi0CAwEAAaOCAoAwggJ8MB0GA1UdDgQWBBRHqGKx
BdM/uIGKvWeNXDPKOZvd+DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI3MDI4QzVD
QzZFODExRUNCQkNENDM2M0M0RjlBRTAyLnJvYTA/BggrBgEFBQcBBwEB/wQwMC4w
EgQCAAEwDAMEAWePtAMEAWe5oDAYBAIAAjASAwcAIAEN8JjAAwcAIAEN8ZCAMA0G
CSqGSIb3DQEBCwUAA4IBAQCcTXWNt5UJoe/E/iMtZquxS8m1SA2SEAsMKiRwqt6a
YoUpJVWYFfGf5dw9ZMcODpVSAttVDe2XaDuY//8VU83FutRskPdJYtoRS6f1ii+G
R12segWbvoXOsxpH22GIlW+mP6qquwXrzFmuU/R8huuSxexx/ML3hRb8GEpFiH/A
AcB96bg4GuvYZZyMLWPjHhhKQ8E4DLwJvbl4zwdroZAU+UKAbTW5rlc6anrkrx8u
Ge6mXdx9BzBu3A8TAkrtXneb3eQFe81v0ExFsYdgfufI6HmqVpTMamXXzPmPrurZ
sbo5LigrsKoKogbGnSySU5m3aWxsWEPIb01ZVoB9y1N3
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:21 2026 by rpki-client