
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E23B6D6A5E711EC9FA9AD24C4F9AE02.roa
File: 2E23B6D6A5E711EC9FA9AD24C4F9AE02.roa (raw, json)
Hash identifier: OMCGDzSPSIgzVldO5JWrb/Bul7xKFVldOYuipc+BdQk=
Subject key identifier: C3:72:6C:B3:4E:7C:D8:C3:24:4F:74:6C:45:13:17:16:9C:03:AF:BD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E8B7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E23B6D6A5E711EC9FA9AD24C4F9AE02.roa
Signing time: Sun 31 May 2026 17:29:43 +0000
ROA not before: Sun 31 May 2026 17:29:43 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 149537
IP address blocks: 103.182.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59575 (0xe8b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:29:43 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7007-1f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:48:48:0d:fb:fd:f7:41:3e:b6:c8:2e:eb:2c:
7c:87:e9:19:d4:85:fd:a2:42:a3:87:9c:1c:f8:35:
b1:8d:b1:5b:c2:ae:53:7e:11:c0:af:bb:46:67:46:
e5:6b:b7:42:02:82:07:7c:6b:f5:1a:04:e0:13:62:
18:09:d9:f4:b1:17:c8:e4:d0:b0:f6:d1:52:34:df:
10:51:3f:fc:27:06:ef:c6:9b:a0:f3:56:17:6a:66:
55:2d:52:54:50:76:fe:e5:11:6c:97:f7:73:5a:37:
be:09:29:f4:22:e4:b0:b2:f0:75:5f:70:c5:1f:85:
d6:96:28:b7:83:38:80:04:ec:ad:cd:6d:91:b4:e7:
28:b4:27:72:07:67:ac:cd:8e:ba:a9:a7:04:53:cf:
98:78:75:7c:26:e0:a7:a8:cf:42:8b:8c:f6:8f:c1:
16:21:38:66:06:99:30:d0:c4:2e:8e:26:a5:11:39:
f2:20:51:5c:0c:4d:60:31:2c:50:16:dd:38:20:5e:
f0:7a:d2:91:a8:81:56:96:e6:bc:54:c2:95:5a:3c:
6b:12:fd:58:0b:58:a6:74:69:7b:c0:85:13:50:0a:
68:63:6a:e6:db:cb:4e:0b:e8:ed:26:bb:ae:13:4a:
d0:4d:fb:e7:25:a2:26:a3:0a:ba:28:29:eb:b3:e9:
df:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:72:6C:B3:4E:7C:D8:C3:24:4F:74:6C:45:13:17:16:9C:03:AF:BD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E23B6D6A5E711EC9FA9AD24C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.182.218.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:51:ca:65:ff:53:0c:3a:71:f5:ab:50:98:bb:29:95:87:81:
1d:2e:de:1d:30:72:6c:aa:34:d7:a7:07:94:92:17:1a:cf:5d:
a4:96:6e:d8:be:63:0c:0a:92:f7:0a:f2:7c:40:1c:96:6e:bb:
54:64:78:33:68:0d:8e:e0:38:bf:13:b4:47:b2:72:c8:1d:26:
81:4c:91:39:6d:93:e5:5b:90:53:3a:70:7e:23:f2:21:59:06:
84:43:5c:23:75:19:ad:48:42:03:3e:58:f0:e9:3d:16:10:67:
87:f4:d9:ee:38:27:25:54:dc:ac:58:8e:2e:d0:08:03:e8:40:
89:cc:d9:84:97:3b:21:f8:7d:29:a6:ac:23:36:9f:87:9d:e8:
72:17:b6:f4:83:d8:b3:a1:43:5a:c4:73:cc:88:e3:ab:ef:4e:
6c:34:3d:c8:22:ba:cd:28:1a:94:bc:c6:ed:a9:62:1b:53:ae:
a6:f8:78:65:e7:60:53:c7:3e:58:f8:66:02:4b:66:10:b0:6c:
21:63:df:b5:f5:04:90:e5:c4:ba:ee:4c:c5:d0:15:17:12:b4:
65:a5:60:4a:7f:65:27:f4:77:71:b6:98:79:65:ac:ef:59:82:
d5:58:34:50:fd:1c:6b:4d:71:e2:3d:b8:ab:47:b7:01:6e:01:
21:01:88:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:38 2026 by rpki-client