
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F6DB518360911F0BD7C4161C4F9AE02.roa
File: 2F6DB518360911F0BD7C4161C4F9AE02.roa (raw, json)
Hash identifier: 7b7qqtq5MQIVMVoryXB6SM4EszB10IsNxzoXGY0I35M=
Subject key identifier: A0:DC:EC:31:A8:DE:CB:96:25:E5:C6:D9:99:B4:D7:A5:FF:4D:E7:E9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E4AC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F6DB518360911F0BD7C4161C4F9AE02.roa
Signing time: Sun 31 May 2026 16:55:45 +0000
ROA not before: Sun 31 May 2026 16:55:45 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 136373
IP address blocks: 103.57.66.0/23 maxlen: 24
103.69.88.0/22 maxlen: 24
103.122.200.0/23 maxlen: 24
103.143.39.0/24 maxlen: 24
103.163.68.0/23 maxlen: 24
103.164.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58540 (0xe4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:55:45 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6811-9824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:00:ea:d3:d3:5b:ed:b1:fb:c8:94:68:74:
e2:b2:60:69:50:57:d3:f9:e5:c7:08:74:25:de:74:
eb:71:ba:6f:61:bb:c4:12:f0:b9:2a:a6:28:2c:34:
a2:6b:6a:c2:c4:62:08:63:84:28:a2:97:61:90:dd:
f6:5e:1e:d1:88:e1:59:37:e6:e5:87:36:93:ee:3c:
05:b1:3f:b9:a9:07:64:02:70:84:d9:de:ba:93:38:
b5:7e:44:05:db:5e:0e:70:e0:e0:1c:03:ca:e5:55:
bb:eb:e6:0e:70:1c:1c:e7:45:c1:78:44:e3:10:ea:
5a:cc:6b:90:fd:4b:16:e5:f7:c0:c2:1e:f9:81:fb:
5b:f4:22:b0:f3:63:e7:8a:21:7d:23:85:c8:6b:d8:
02:09:b4:56:24:c7:74:52:c1:e7:84:91:19:44:e1:
62:fa:46:03:62:99:4b:33:7c:5a:7d:95:ac:eb:f2:
26:fc:96:dc:67:dc:a0:3b:ed:3f:01:e1:54:74:ac:
1e:84:f2:24:c5:9e:7c:5c:9b:61:ed:8c:63:fb:a7:
38:65:3e:e4:2a:8d:07:15:4c:67:b9:b5:7b:de:e5:
55:12:b5:cb:be:0e:3c:19:31:77:97:ed:fe:07:e0:
bf:9e:09:e2:45:d1:30:33:46:fa:f7:2e:73:8c:c2:
75:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DC:EC:31:A8:DE:CB:96:25:E5:C6:D9:99:B4:D7:A5:FF:4D:E7:E9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F6DB518360911F0BD7C4161C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.57.66.0/23
103.69.88.0/22
103.122.200.0/23
103.143.39.0/24
103.163.68.0/23
103.164.176.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:2b:b0:a8:e1:0c:ec:82:55:9e:16:a4:b3:20:c8:31:c0:52:
9e:a4:bf:c0:09:68:ad:4f:c6:07:8b:3a:aa:62:f6:23:32:64:
a8:6b:9b:d7:3b:4a:14:ae:4f:16:97:8c:40:ad:3b:f4:31:d5:
08:2f:80:5f:a8:2b:dc:22:00:28:08:aa:88:28:6e:81:36:b1:
d1:62:12:de:4e:1a:95:59:4e:4c:9e:62:01:40:e8:59:1a:8e:
93:b0:9d:78:b7:ea:47:5c:b0:7f:41:8a:f4:8f:16:a7:4c:98:
cc:1a:cf:a9:cd:1c:7b:40:a1:83:a9:94:f3:f6:09:9d:ec:40:
e0:5c:05:21:65:23:b9:d2:e1:86:1e:46:b2:2f:04:be:19:de:
40:8f:31:46:f7:a4:69:9c:92:11:9c:dd:3d:c0:1c:da:a1:f3:
a9:cd:dd:21:82:69:92:81:86:0b:ea:cc:91:42:bc:58:e5:3c:
c0:e1:80:99:77:e9:00:94:ed:99:7f:ca:22:49:d2:97:37:cd:
83:24:11:1a:44:1e:97:6a:9d:b4:11:58:ea:1a:8c:20:16:8e:
0d:a2:72:a4:ee:55:13:9c:13:6c:7b:68:e6:91:16:1a:00:d6:
31:49:c8:38:60:e3:f6:d6:8d:bd:8b:7b:a8:11:db:fd:bd:4d:
fe:ec:39:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:06:56 2026 by rpki-client