
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E4E5596258511F0AA28DF14C4F9AE02.roa
File: 2E4E5596258511F0AA28DF14C4F9AE02.roa (raw, json)
Hash identifier: Nx1VYe8WMeXBd58FFarLVvI6LkE5iUkIRnvlT9PvWgA=
Subject key identifier: 1F:29:C6:DD:CE:22:A6:B5:5F:CA:A2:3A:EE:B9:2D:49:46:D7:80:11
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E5FD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E4E5596258511F0AA28DF14C4F9AE02.roa
Signing time: Sun 31 May 2026 17:06:39 +0000
ROA not before: Sun 31 May 2026 17:06:39 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 138759
IP address blocks: 103.98.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58877 (0xe5fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:06:39 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6a9f-f0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1b:fa:1b:18:59:e2:b5:3b:38:ce:25:6f:f6:
08:80:63:03:f4:ec:27:88:72:77:2f:44:26:4c:5e:
b9:4c:d1:39:4e:5e:40:c1:1f:82:0c:3d:65:b4:b6:
8b:e8:94:cf:72:8e:ce:68:de:d4:f8:62:6c:23:54:
a6:8d:f1:16:8a:06:e5:fb:61:f9:f7:b8:05:17:b6:
a0:e8:e1:23:74:f2:79:85:91:0e:90:0c:e2:74:6c:
12:13:23:83:22:89:c0:28:22:0b:4b:2a:64:b6:60:
bd:03:6b:e7:bb:33:52:a4:2a:93:ab:3f:29:0a:28:
ab:cc:33:78:a6:01:94:e4:f7:fa:c1:68:fb:5a:82:
23:d6:27:fb:9b:66:ea:52:5c:7e:2e:e4:e5:90:c5:
df:2c:a6:18:dd:17:3f:3b:88:4a:c9:65:ae:6d:13:
56:bd:7a:7a:09:f2:5d:95:69:c6:58:2c:2f:11:d1:
c0:60:bb:f1:64:1d:e7:2c:7d:f7:73:b0:0c:dc:eb:
f9:6f:fb:30:48:9a:24:a5:56:12:20:e1:5a:4d:9e:
4a:6b:b8:b8:a7:8f:9d:aa:d1:4f:ff:35:3a:d0:36:
3f:78:fd:ea:d8:2d:c3:b9:37:d1:a6:88:5e:6c:fc:
7c:6c:98:a0:3a:a7:6f:0f:22:f3:c9:58:c5:26:db:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:29:C6:DD:CE:22:A6:B5:5F:CA:A2:3A:EE:B9:2D:49:46:D7:80:11
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E4E5596258511F0AA28DF14C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.98.36.0/23
Signature Algorithm: sha256WithRSAEncryption
61:a0:9f:4c:98:dc:63:06:86:60:4c:4a:a3:37:9a:0a:ca:7a:
ca:e5:b9:9d:2a:5e:b9:b9:a4:14:45:24:41:5a:e4:6f:e1:46:
3b:ca:84:87:cb:cc:eb:04:79:2c:ba:62:50:a8:18:73:cf:ba:
72:a4:af:90:24:ba:05:de:80:d3:24:0e:f1:c1:fb:fc:a8:6c:
61:38:2e:1a:5d:4d:7a:49:a2:9a:fe:8c:cb:dd:e3:b2:a9:aa:
31:d1:bc:ac:11:ab:8e:08:80:06:81:99:e9:16:df:f4:70:d1:
25:a7:15:97:cb:ca:94:fd:90:f2:8d:2e:1f:9a:c3:52:bb:ee:
ba:69:25:72:2f:07:11:9b:2a:c0:4a:d9:eb:99:c0:17:74:ab:
ef:1b:0c:10:0e:9e:e3:f7:74:2a:82:c0:20:21:1f:a8:d2:ba:
eb:a3:58:7a:fa:f9:df:fa:25:f7:23:84:f4:b4:9a:86:57:c6:
8d:e6:71:1c:ca:ba:b4:54:0f:1c:21:dd:9b:a7:ab:bb:95:49:
66:e0:71:a5:81:76:bb:cb:3a:0f:76:c3:03:eb:55:c8:66:a6:
d9:4c:16:7f:16:07:70:9b:ed:55:d7:0a:4c:41:ab:5e:93:bf:
3d:81:d4:78:a2:b6:26:a5:6e:77:a3:97:4f:3f:e0:b3:0c:71:
4e:8c:3a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:14 2026 by rpki-client