
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B6F2F3C030511F0BEE8F876C4F9AE02.roa
File: 2B6F2F3C030511F0BEE8F876C4F9AE02.roa (raw, json)
Hash identifier: 2vsfbsbVdqRo+QS64MjknBkQFGaRJFmVteOX1ccxMaA=
Subject key identifier: 82:69:E3:69:CB:15:C7:86:05:6A:3D:A1:2B:58:69:30:84:8D:71:A5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F13B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B6F2F3C030511F0BEE8F876C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:57:44 +0000
ROA not before: Mon 06 Jul 2026 16:57:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137114
IP address blocks: 103.44.136.0/22 maxlen: 24
103.111.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61755 (0xf13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:57:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bde88-af2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:ed:42:a1:e1:46:bc:af:01:1f:eb:ed:a6:
dc:1c:c6:0f:91:73:89:47:46:49:1a:c8:1c:57:ae:
b1:69:78:c9:db:2f:92:c4:56:e4:d8:dd:c2:58:6b:
a8:6e:74:fc:c0:d8:45:1a:11:d8:69:ba:35:79:4b:
ad:1c:80:cb:ee:45:a8:67:49:16:c3:58:46:90:55:
cb:21:db:d2:56:5a:b4:f3:c7:68:74:48:a9:41:6f:
e2:e9:58:13:6d:7c:be:98:3f:c4:ea:10:a3:26:3d:
ea:3a:7a:fc:99:62:66:a2:3a:0e:d6:17:9a:c9:b7:
40:2a:9c:d3:36:6e:38:4c:31:ab:cf:20:d0:4b:bd:
b6:1f:bb:d2:17:da:3e:e3:dd:08:31:6e:ce:5c:8e:
2e:de:f8:e1:f5:cb:76:40:69:cf:6a:03:97:ec:d4:
b3:5f:b8:11:c7:51:b7:4c:a1:19:3b:26:91:16:19:
89:58:16:9a:7d:18:a3:cf:d4:98:61:60:ab:41:55:
aa:c1:cb:d8:d2:23:f9:e4:04:9b:e0:3c:9a:ef:39:
37:60:4e:65:b3:31:69:61:5d:d4:e9:4b:a1:5e:37:
ef:e0:62:d4:7d:81:be:5e:25:36:8a:69:0f:8a:1a:
ab:cc:5a:e3:f6:e1:fb:c5:91:e7:ac:c2:4c:d7:e7:
6b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:69:E3:69:CB:15:C7:86:05:6A:3D:A1:2B:58:69:30:84:8D:71:A5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B6F2F3C030511F0BEE8F876C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.44.136.0/22
103.111.20.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:98:95:9e:1d:6f:d7:06:09:83:ff:cf:31:dc:0a:7b:06:38:
16:b4:a5:65:d4:a8:16:fc:4c:27:35:72:14:08:12:97:1c:b0:
5b:45:ed:73:75:8e:d3:f5:59:08:bc:25:a8:f0:d9:a0:56:f1:
f5:7c:97:6f:8c:5a:6e:db:a5:e6:ff:43:ec:ae:a5:a2:0a:61:
1a:f9:e7:c2:44:f3:da:7a:7f:a4:b8:f3:93:b2:fd:82:2e:7e:
55:fa:fb:d8:28:3a:75:31:71:03:25:9b:77:35:dd:38:21:68:
a9:ae:75:04:05:ca:c6:99:f6:34:3d:18:d3:e4:29:7c:40:ef:
fc:c1:1f:ac:ca:3a:5c:43:b6:62:d5:2a:b2:9c:60:85:b4:5c:
d4:08:25:28:a2:cf:df:e6:fb:a0:c2:ca:03:a0:07:ef:09:3c:
0b:85:c6:97:12:83:ae:ca:53:0c:a0:5a:07:8d:e2:1f:f7:68:
dd:a0:f6:8b:8f:9c:8e:02:72:12:22:0d:34:00:7b:fc:28:76:
e9:a1:a9:d9:6f:09:6f:93:ae:e6:b8:27:cb:c7:d7:0f:d0:b5:
98:7d:74:f1:4d:e8:f3:77:27:c3:96:30:33:b8:fc:06:c2:ce:
b6:1c:73:95:ac:04:f1:93:52:e5:d1:31:f5:f9:86:1f:00:29:
0d:84:72:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:41 2026 by rpki-client