
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D04D9B63A0D11F0B0D0DC5FC4F9AE02.roa
File: 2D04D9B63A0D11F0B0D0DC5FC4F9AE02.roa (raw, json)
Hash identifier: aXBmoHxfbkBYfnQD3pQ5zI3fv3ermugf9II4oSYRJFM=
Subject key identifier: E6:2D:AD:18:B1:F6:F9:06:51:22:50:86:20:69:89:EB:40:DE:ED:F9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E883
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D04D9B63A0D11F0B0D0DC5FC4F9AE02.roa
Signing time: Sun 31 May 2026 17:27:54 +0000
ROA not before: Sun 31 May 2026 17:27:54 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 149221
IP address blocks: 103.214.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59523 (0xe883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:27:54 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6f9a-6fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:24:ca:f3:a6:cc:b7:c9:1b:31:a6:7d:a4:72:
28:ec:7e:64:f0:41:ff:c5:e7:42:80:f4:c5:bf:6e:
e6:46:62:7f:f7:5d:d1:f9:d0:30:c5:31:41:fc:67:
b8:d6:93:a9:43:90:65:51:dd:3d:ac:86:08:1f:94:
72:3a:fa:5f:77:a4:96:fc:02:dd:a7:7f:80:d0:2a:
16:31:ee:86:cf:23:e3:ac:a0:5b:9e:44:04:80:c2:
52:8d:01:58:15:a9:ea:11:da:79:9a:00:2c:b1:a5:
d6:15:1c:20:ad:76:d0:d9:d7:b2:93:47:89:f2:64:
aa:d0:47:55:e3:3e:d4:0f:8b:78:94:ee:8d:2d:cf:
83:8c:41:77:c7:4c:2b:c3:7f:7e:b3:b7:fb:1b:a7:
b1:b0:fc:46:f3:ee:a9:16:69:c4:ca:c1:c0:74:02:
1c:c8:74:e9:b4:b3:bb:45:64:ac:c4:7c:4b:36:5b:
09:2c:d5:39:91:58:bf:23:ef:5c:43:9e:92:86:e0:
37:5b:6b:40:1b:80:52:dd:76:43:18:92:41:00:7b:
f1:d0:2c:96:8d:99:08:31:67:07:b9:08:a6:bb:4a:
1e:d8:6a:3f:a1:ae:e1:57:af:39:d2:f6:30:90:74:
56:57:be:e6:fb:32:8d:91:37:4a:11:9b:68:b4:c0:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2D:AD:18:B1:F6:F9:06:51:22:50:86:20:69:89:EB:40:DE:ED:F9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D04D9B63A0D11F0B0D0DC5FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.214.162.0/24
Signature Algorithm: sha256WithRSAEncryption
56:8b:3d:9f:88:3a:cd:d3:74:37:79:a3:21:9a:7d:0b:9d:2e:
2f:07:80:06:d7:40:c5:ef:4f:d2:d9:54:2b:d2:f0:9a:dc:78:
b6:a8:59:2a:29:f2:25:71:3c:1e:15:63:ed:cb:8a:1d:a2:3f:
e0:d1:d5:ef:fe:83:8b:2f:a8:21:cb:19:3a:81:09:0f:d7:7b:
5b:96:06:de:0d:dd:88:97:eb:33:dc:fa:c8:0b:98:7c:ac:79:
91:68:7d:fe:37:86:7c:5c:f3:71:be:f3:7b:fb:08:f7:32:72:
b1:98:0d:48:6d:a8:37:54:04:bb:17:2a:78:a7:f4:95:2b:c0:
83:f5:98:f4:57:14:a8:37:47:bc:ea:08:9e:ee:f7:1f:48:e0:
03:86:8f:19:39:b3:20:9d:bd:dc:49:a6:f7:94:e8:54:96:5d:
67:c2:bb:54:c9:7f:6a:0e:18:a4:7c:36:e2:33:2b:ed:fd:14:
8c:33:d8:28:13:1c:df:a7:ab:6a:d5:95:bc:e4:b4:32:26:89:
b6:76:fa:90:b4:81:e5:6d:6b:4d:57:de:e8:7e:17:fc:e8:19:
35:19:c7:01:80:29:e5:c3:a0:ac:f3:87:6d:6c:0e:77:1a:0d:
7c:b0:62:68:26:12:ef:5c:6b:4f:9b:af:be:3f:30:44:d8:64:
88:b4:2e:63
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOiDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3Mjc1NFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZmOWEtNmZkMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJskyvOmzLfJGzGmfaRyKOx+ZPBB/8XnQoD0xb9u5kZif/dd0fnQMMUxQfxn
uNaTqUOQZVHdPayGCB+Ucjr6X3eklvwC3ad/gNAqFjHuhs8j46ygW55EBIDCUo0B
WBWp6hHaeZoALLGl1hUcIK120NnXspNHifJkqtBHVeM+1A+LeJTujS3Pg4xBd8dM
K8N/frO3+xunsbD8RvPuqRZpxMrBwHQCHMh06bSzu0VkrMR8SzZbCSzVOZFYvyPv
XEOekobgN1trQBuAUt12QxiSQQB78dAslo2ZCDFnB7kIprtKHthqP6Gu4VevOdL2
MJB0Vle+5vsyjZE3ShGbaLTAsmUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTmLa0Y
sfb5BlEiUIYgaYnrQN7t+TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJEMDREOUI2
M0EwRDExRjBCMEQwREM1RkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfWojANBgkqhkiG9w0BAQsFAAOCAQEAVos9n4g6zdN0N3mjIZp9
C50uLweABtdAxe9P0tlUK9Lwmtx4tqhZKinyJXE8HhVj7cuKHaI/4NHV7/6Diy+o
IcsZOoEJD9d7W5YG3g3diJfrM9z6yAuYfKx5kWh9/jeGfFzzcb7ze/sI9zJysZgN
SG2oN1QEuxcqeKf0lSvAg/WY9FcUqDdHvOoInu73H0jgA4aPGTmzIJ293Emm95To
VJZdZ8K7VMl/ag4YpHw24jMr7f0UjDPYKBMc36eratWVvOS0MiaJtnb6kLSB5W1r
TVfe6H4X/OgZNRnHAYAp5cOgrPOHbWwOdxoNfLBiaCYS71xrT5uvvj8wRNhkiLQu
Yw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:20 2026 by rpki-client