
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31A7BAD2696F11ECA2AB8534C4F9AE02.roa
File: 31A7BAD2696F11ECA2AB8534C4F9AE02.roa (raw, json)
Hash identifier: DmD/gfLIDWiwFPUX2Jdw4L2pUQbonkCL8/oetti3Njc=
Subject key identifier: 93:DF:81:AE:E9:4C:D5:AE:C0:DE:D9:AF:2C:33:B6:82:CA:F5:C9:68
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E30F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31A7BAD2696F11ECA2AB8534C4F9AE02.roa
Signing time: Sun 31 May 2026 16:42:21 +0000
ROA not before: Sun 31 May 2026 16:42:21 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 134280
IP address blocks: 103.81.139.0/24 maxlen: 24
103.95.234.0/24 maxlen: 24
103.104.202.0/23 maxlen: 24
103.195.16.0/24 maxlen: 24
103.197.106.0/23 maxlen: 24
103.236.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58127 (0xe30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:42:21 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c64ed-c27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a4:8f:fa:ca:94:e2:73:73:28:1f:56:5b:d4:
48:3f:85:56:2e:26:44:6c:73:26:a6:6a:a8:b0:47:
01:19:41:96:85:35:7d:8a:68:06:21:66:fd:a7:7e:
aa:a3:cf:6d:26:df:48:b1:e5:70:7e:90:e3:f6:38:
a5:0b:94:bd:7a:0e:e2:d3:2a:c8:5c:e4:dc:7b:64:
e0:44:37:f2:fa:68:d7:d1:3c:6c:c2:14:89:96:fa:
53:c1:b6:4d:5e:01:be:d5:3f:f7:2d:ba:bc:fc:84:
a9:6a:39:0e:e5:af:c2:4c:ae:77:dd:8c:cd:68:f9:
bf:16:9a:fb:75:c8:00:eb:e7:4b:80:8c:4e:48:69:
00:54:6c:f8:4b:53:92:c8:b9:24:9e:fb:08:0d:ab:
df:1f:3a:4f:f5:da:8e:89:d1:c2:94:de:c6:60:13:
d1:00:51:6f:73:a6:98:b3:9f:42:d5:68:4b:16:8f:
33:95:28:6e:f6:45:b0:27:b7:85:a6:fa:b1:83:a0:
d7:d1:b3:4b:ba:29:5d:e1:f5:7e:95:19:51:2e:c2:
3b:4d:ea:52:0f:c6:c1:b2:5f:4c:3e:f0:7e:6c:0e:
5c:c0:53:41:e5:47:87:c1:2c:7f:f0:c5:7c:d7:00:
34:e3:38:50:f6:fd:20:8d:51:2d:3a:1b:6c:30:50:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DF:81:AE:E9:4C:D5:AE:C0:DE:D9:AF:2C:33:B6:82:CA:F5:C9:68
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/31A7BAD2696F11ECA2AB8534C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.81.139.0/24
103.95.234.0/24
103.104.202.0/23
103.195.16.0/24
103.197.106.0/23
103.236.200.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:4f:ed:e0:d1:dc:62:0a:16:b0:3d:81:fb:01:67:d2:5e:ee:
97:3a:df:5c:85:07:fc:b7:61:cb:4d:a2:1e:05:a2:0f:71:cb:
0f:00:25:f8:b3:fa:64:a5:91:3c:9e:a9:2d:7c:66:f0:0e:2a:
51:6c:5b:ec:9f:af:27:05:43:46:13:89:bc:10:a7:a9:c2:d3:
82:78:b8:d6:e0:39:3d:b6:bd:2d:fc:cb:fd:74:ec:53:a4:e2:
80:82:5d:4c:dc:e0:d0:3a:6e:94:4b:32:b5:f1:52:5e:34:4f:
af:4c:6b:63:a5:77:3b:3b:09:cd:e6:8b:b6:ad:5b:b5:de:03:
1e:c9:b9:4e:bd:06:10:a0:d8:12:11:44:65:d2:d1:91:d4:a4:
7b:10:a5:36:09:10:a2:ab:95:b3:9a:ad:5b:df:09:12:24:e9:
ac:7f:52:27:c5:78:e2:04:c8:09:b2:29:6f:1e:24:b6:f0:f6:
ee:e4:e0:ae:5d:7a:7a:3c:8f:06:3c:f5:d9:64:2e:fc:a0:3b:
9f:92:46:7d:6c:b8:6f:79:ef:2f:ea:39:22:51:6e:a0:c5:6e:
88:56:58:44:1e:01:f2:db:63:af:7f:0d:6f:7b:c5:47:16:c6:
4b:23:82:f9:d0:37:f1:08:ee:b9:99:f6:21:23:cb:44:01:2d:
d8:cc:fb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:05:26 2026 by rpki-client