
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B6F2F3C030511F0BEE8F876C4F9AE02.roa
File: 2B6F2F3C030511F0BEE8F876C4F9AE02.roa (raw, json)
Hash identifier: cxFew6Kl+iN6n9lOzORa/kZplL1rTBn2jtltDEWjLEo=
Subject key identifier: C9:52:5A:D3:7A:B8:B4:71:38:69:BF:8F:56:FD:38:17:70:5A:12:CA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E51D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B6F2F3C030511F0BEE8F876C4F9AE02.roa
Signing time: Sun 31 May 2026 16:59:22 +0000
ROA not before: Sun 31 May 2026 16:59:22 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 137114
IP address blocks: 103.44.136.0/22 maxlen: 24
103.111.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58653 (0xe51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:59:22 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c68e9-5446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a4:d8:9c:e5:d2:7c:9c:86:12:ce:2f:62:e1:
16:7a:de:6e:ac:4d:6c:b8:b7:8f:21:c4:19:ed:be:
96:1d:da:8b:ad:45:54:f9:65:52:cc:cb:b1:9e:f9:
32:93:aa:b1:23:b7:83:a5:0d:01:3e:50:7c:e8:e7:
42:a3:01:42:f2:8c:d0:32:56:07:47:79:42:f9:ad:
25:97:7a:9d:81:e2:b8:20:11:85:2d:25:89:45:25:
0c:89:41:e0:95:53:b6:76:c9:fe:4f:c6:f1:f1:c8:
44:94:a8:de:33:e4:2f:a2:a6:e3:d3:dd:32:d4:c9:
fb:9c:4c:c9:f0:03:83:ad:dc:9e:23:df:f6:6b:7c:
45:cd:d6:a8:ef:63:f0:76:29:b6:bc:bb:75:00:5d:
49:c8:5c:ab:48:af:63:47:ea:5b:19:da:11:5a:c2:
23:70:62:5e:fd:0d:cb:76:e5:f5:7c:43:19:cb:eb:
e2:7b:e5:f3:66:ad:e7:3b:a4:bc:18:ce:86:b7:d5:
a8:46:0b:dd:59:1f:36:1d:d8:f4:07:94:b0:b4:2d:
e5:1c:01:10:aa:58:76:09:c3:d6:6f:33:34:3c:e9:
6b:0e:6a:ba:c6:35:cc:c0:b9:dd:ab:53:35:91:1d:
ba:b0:ed:aa:89:7a:f1:83:e3:00:0d:0a:9c:9a:c2:
92:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:52:5A:D3:7A:B8:B4:71:38:69:BF:8F:56:FD:38:17:70:5A:12:CA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B6F2F3C030511F0BEE8F876C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.44.136.0/22
103.111.20.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:ca:c8:26:c3:22:19:54:ac:67:7f:6a:27:80:f2:b8:e3:a6:
36:9f:b7:35:52:3d:b8:33:39:ba:17:0b:7c:a0:76:96:3a:fc:
03:97:dd:2c:5d:1a:ee:ac:60:6e:db:80:2b:2c:a2:32:8c:66:
74:8f:d1:b8:15:46:be:fb:85:eb:8f:7c:d2:11:7e:67:6a:04:
78:01:0f:db:c4:3a:f0:b2:1e:0b:f4:3c:64:88:fa:74:1d:0c:
67:1b:24:cf:1b:8f:c5:1e:db:8a:d6:4d:78:1f:a6:0b:26:dd:
d1:93:ef:c9:ba:fd:ab:65:6e:c8:f6:a0:00:bc:2b:44:c0:b6:
00:f3:68:49:3e:c2:2f:38:9b:ed:48:8c:69:e0:a1:c6:15:5f:
f8:43:72:8c:3a:81:ed:88:96:dc:a4:69:49:51:ac:b1:23:00:
e5:d1:43:5d:8d:83:89:e2:a6:2d:97:6d:77:f0:88:81:4a:8f:
0e:ee:df:f8:44:8c:85:f7:ba:2e:fd:24:55:8b:24:4f:ee:7c:
de:7b:08:79:35:fd:23:d0:40:b6:58:34:6c:08:13:82:00:e5:
17:6b:bd:4b:7b:0b:03:a2:67:e3:76:db:b5:c9:e3:e9:95:90:
39:56:b7:eb:7d:e1:6f:42:e3:6d:fd:00:7e:9d:db:0e:e3:4d:
6b:ac:35:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:03 2026 by rpki-client