
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/322150E0541611EC80009E4EC4F9AE02.roa
File: 322150E0541611EC80009E4EC4F9AE02.roa (raw, json)
Hash identifier: 24lziy17O49+4UBa7R86D36kALqY/JwMb6OZ3NeDHVk=
Subject key identifier: 4F:42:08:DD:E9:A4:B5:E7:64:0E:96:C6:66:1C:09:27:5F:8D:BE:10
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E588
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/322150E0541611EC80009E4EC4F9AE02.roa
Signing time: Sun 31 May 2026 17:02:54 +0000
ROA not before: Sun 31 May 2026 17:02:54 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 137662
IP address blocks: 103.122.56.0/22 maxlen: 24
2001:df1:640::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58760 (0xe588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:02:54 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c69be-3409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:e7:22:ea:19:cd:00:87:6d:79:3f:e6:d5:
cb:ce:86:83:80:68:83:27:9e:84:87:3d:ef:76:9b:
b5:3d:66:e5:4c:69:b9:16:44:22:96:8b:74:a8:e9:
2e:f1:31:fc:7f:45:bf:87:b6:3a:6b:b6:9a:5d:44:
b7:5f:79:50:45:0a:18:f0:de:ee:17:c1:06:02:30:
c8:c3:7a:cd:16:87:b0:5a:b0:8e:ff:c1:a7:61:d7:
bd:ac:22:be:a1:02:bd:73:94:77:7e:48:96:73:4d:
56:6e:e8:1b:21:5a:88:29:0e:6e:d4:21:b5:ac:d3:
29:e7:0f:e9:78:0c:4d:48:e6:27:ef:d9:ff:e1:73:
b5:4e:53:af:37:b9:f8:a2:c4:57:78:f1:48:73:df:
bf:d8:32:e1:9f:b6:89:fb:87:54:ed:70:a3:0b:2f:
19:76:a0:e6:ea:61:3b:37:93:37:c7:2c:b6:33:b0:
2d:61:f4:d0:a8:1f:55:83:e1:70:d1:3a:b5:cb:18:
b6:3c:12:b2:d7:c9:2f:9f:3f:5d:47:6e:fb:54:1a:
f2:5b:54:3e:83:92:ea:cb:4c:a2:6c:66:56:94:e6:
a1:20:63:e8:93:5e:c6:55:24:19:39:34:00:65:56:
a2:1b:1c:2f:ce:6d:ba:da:f8:43:76:7d:64:90:d8:
8f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:42:08:DD:E9:A4:B5:E7:64:0E:96:C6:66:1C:09:27:5F:8D:BE:10
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/322150E0541611EC80009E4EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.122.56.0/22
IPv6:
2001:df1:640::/48
Signature Algorithm: sha256WithRSAEncryption
0b:74:38:54:51:2d:9e:42:d6:b5:54:6e:5a:bd:c4:c2:a6:ad:
7d:f7:94:3c:35:53:f9:42:f0:bd:33:0f:45:e5:e6:d0:65:9e:
8e:86:be:84:e8:f6:7e:3d:c0:29:a0:44:b6:f8:aa:3a:41:f5:
8f:02:d7:3f:c7:40:54:9b:d5:20:11:45:ff:9a:ea:b9:c2:7b:
9f:46:51:23:fc:65:11:a0:2e:9b:08:e7:ad:8d:ca:fe:da:b7:
72:3f:a1:e1:74:51:ac:52:a1:15:3f:f9:c1:d9:ff:03:63:cf:
fa:01:e0:7b:0f:58:fa:84:ac:89:31:94:29:30:99:2d:64:4d:
8b:83:68:ec:d0:eb:06:d6:5d:01:70:63:a4:20:82:d0:d0:fd:
b7:d5:c0:d2:b7:31:a0:99:53:31:31:88:41:12:89:2c:14:2a:
22:13:c6:38:56:19:5b:87:75:86:51:ea:93:01:12:ff:3f:d6:
34:00:82:6c:57:7a:f4:75:18:c6:97:d4:1e:6b:f7:90:29:47:
a1:91:d0:5d:d6:7f:70:b0:06:1d:74:78:e5:d0:1c:4a:62:45:
5a:21:e0:10:88:7d:e3:ff:71:67:56:39:29:5d:fe:2c:7d:d0:
9e:c7:ca:b8:d8:68:b1:80:bd:d7:4d:26:54:9a:73:37:15:ed:
00:d9:86:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:43 2026 by rpki-client