
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28622668F86D11ED9F0E3266C4F9AE02.roa
File: 28622668F86D11ED9F0E3266C4F9AE02.roa (raw, json)
Hash identifier: zgnSvx79HjEQm2BhpMp47Br3jnTaslr7wnADEB2ss0o=
Subject key identifier: E5:17:76:30:C5:5B:ED:9C:F3:DB:00:A8:4C:AC:C7:0C:31:ED:82:AD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E9D7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28622668F86D11ED9F0E3266C4F9AE02.roa
Signing time: Sun 31 May 2026 17:39:19 +0000
ROA not before: Sun 31 May 2026 17:39:19 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 151172
IP address blocks: 103.204.50.0/23 maxlen: 24
2400:ffe0::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59863 (0xe9d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:39:19 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7247-8685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2b:15:f4:38:f9:a8:bd:d1:84:ef:23:6b:fb:
40:8c:92:62:ca:f3:cb:14:64:72:58:38:4e:8b:10:
e3:03:fd:db:05:5c:d7:6e:c3:4c:b2:0a:56:a3:45:
3e:56:7e:f9:71:aa:07:b6:84:7b:8a:37:4d:18:90:
bb:e1:d1:23:33:2a:3a:ae:be:7b:1d:e9:62:9c:70:
83:ee:79:88:bf:33:19:92:47:9f:26:ad:b6:f8:e9:
e4:92:99:7c:3e:96:f6:b0:1e:32:49:34:ef:a1:37:
f3:5d:01:b6:e6:24:9d:68:e5:86:b3:fd:2e:a8:5d:
d9:0a:54:9f:ba:6f:08:a3:fb:d9:56:77:24:c6:f0:
59:b2:97:76:19:e5:c5:7e:d2:09:37:a8:e0:ff:e2:
9c:d7:24:e5:bd:3e:4f:27:70:01:5a:d9:8f:2d:b8:
31:99:fb:f5:aa:23:69:05:1c:2f:06:ee:d0:4c:ac:
f8:5c:53:99:1c:3a:bd:de:14:b3:5d:70:3a:02:5a:
bf:f0:ea:26:bb:ea:71:6c:b1:3e:53:c0:ba:42:bd:
5b:3f:6e:71:b1:68:b2:39:ce:8c:a7:00:11:65:f5:
5a:54:3d:c5:95:17:88:07:30:62:3a:cf:91:e4:ba:
61:56:b7:8d:63:39:3b:c5:6c:f0:fc:1c:92:fa:e8:
ed:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:17:76:30:C5:5B:ED:9C:F3:DB:00:A8:4C:AC:C7:0C:31:ED:82:AD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28622668F86D11ED9F0E3266C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.204.50.0/23
IPv6:
2400:ffe0::/32
Signature Algorithm: sha256WithRSAEncryption
5a:cb:9f:d1:30:bc:87:14:b8:dc:ae:47:7b:e5:f6:85:29:d9:
ec:11:d7:5d:7f:c8:49:8b:35:e4:ed:28:e1:e9:33:bc:57:9d:
06:c5:9c:15:b2:c1:df:e7:d5:34:e3:2e:ea:de:26:90:68:dc:
a4:be:40:ec:4e:d2:ed:58:53:46:0d:56:c9:8a:49:5d:d2:8e:
ac:a3:39:b2:43:86:67:49:af:8b:45:68:b5:a2:8c:f3:3f:31:
56:19:1d:bf:91:2d:6b:56:42:57:09:8c:09:af:02:b5:0d:c5:
ce:21:f4:3b:d8:ef:a0:b2:76:5c:fa:15:89:e4:07:92:e2:fc:
7f:11:10:c5:45:8d:e6:01:02:96:94:ca:22:b7:20:ab:7b:5e:
27:e9:dc:c5:7e:5a:e7:48:1f:29:46:4f:cd:85:ca:ac:be:34:
dc:30:ac:bd:e1:41:c3:57:cf:b4:dc:b2:09:b9:7d:4f:cc:95:
46:3f:d1:64:66:b7:8b:80:a5:41:c7:24:68:67:4c:7c:53:97:
22:c6:37:3d:e9:04:64:d4:fe:b4:bb:a0:72:c5:b9:1e:26:eb:
fb:b6:40:bb:04:36:63:51:a5:f8:92:a8:04:fb:11:92:37:8d:
f1:ce:25:6a:f0:91:60:e2:50:66:35:85:38:13:bf:65:7e:85:
67:25:92:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:17:15 2026 by rpki-client