
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3293870214DE11EEAB46A86DC4F9AE02.roa
File: 3293870214DE11EEAB46A86DC4F9AE02.roa (raw, json)
Hash identifier: q8cFYYJXvuydthsds9Bg63rNTycJOwYY/3nj6wsuzH0=
Subject key identifier: C3:E2:17:78:B3:38:11:2E:AC:31:E4:FC:BF:B1:B0:53:B6:0F:2C:80
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F5B9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3293870214DE11EEAB46A86DC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:35:57 +0000
ROA not before: Mon 06 Jul 2026 17:35:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151085
IP address blocks: 103.135.122.0/23 maxlen: 24
2001:df2:6540::/48 maxlen: 48
2001:df2:6540:8000::/49 maxlen: 49
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62905 (0xf5b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:35:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be77c-4185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:aa:82:af:d7:e5:3f:67:e4:d3:1e:20:ae:
d7:8e:aa:7e:aa:a0:f5:fe:4c:56:f5:3c:eb:87:b4:
05:39:5d:47:47:21:77:2e:f8:67:fa:10:cb:48:86:
94:cc:ce:38:b2:f9:ac:76:41:af:54:f9:d1:70:00:
eb:24:92:a4:be:03:2c:cd:03:16:de:27:39:6d:06:
1e:01:3f:ba:44:ba:5c:42:71:48:57:7b:f3:1f:eb:
a4:2b:44:c8:80:82:9f:3d:51:c1:1c:fa:17:69:22:
34:96:ef:24:ae:3d:b2:5d:ea:43:c0:0f:18:c0:d4:
c6:0a:62:2b:ce:54:73:22:69:24:ee:e7:88:1e:e4:
5f:e5:24:0b:29:8a:ff:89:8e:6a:72:f1:74:68:f4:
07:f7:b2:57:85:af:b7:e1:df:ae:e0:f0:90:e9:3c:
21:9f:dc:b3:15:65:31:57:bb:ed:27:b0:1f:39:b0:
73:91:cd:22:42:28:14:b9:ac:38:4c:14:4a:9f:1f:
80:f4:52:f1:d7:bb:b1:c9:33:3b:30:12:10:53:eb:
83:1c:a6:88:47:37:0b:52:49:bd:a3:fd:7b:5c:c9:
0f:c6:7c:8d:4f:a3:bd:6a:88:5d:89:b4:fb:38:82:
80:88:bf:7e:4b:f1:b9:bf:1e:c9:d2:55:b2:8f:b2:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E2:17:78:B3:38:11:2E:AC:31:E4:FC:BF:B1:B0:53:B6:0F:2C:80
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3293870214DE11EEAB46A86DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.122.0/23
IPv6:
2001:df2:6540::/48
Signature Algorithm: sha256WithRSAEncryption
09:68:6e:df:fc:2c:96:f2:85:dd:7f:b6:25:73:d3:1d:7a:1f:
c7:a1:f4:3d:9f:9a:15:68:12:f5:a2:39:d6:17:5f:22:bb:5c:
26:c7:43:9c:6e:26:bf:f4:8e:63:1f:d7:03:bc:40:10:66:2e:
0d:ae:8b:2a:e2:48:4b:ab:a7:4d:20:1f:a6:1c:c4:c5:cc:06:
b3:28:19:6e:41:37:42:a7:28:e5:5b:b8:e7:4e:df:9a:82:d7:
7f:82:bf:04:b5:c7:a1:7f:34:86:bf:af:17:54:e7:8c:30:c3:
f3:2a:06:db:1a:d4:c5:78:ac:66:9c:76:d7:84:fc:77:3e:10:
45:7d:5c:f8:38:59:f7:c5:9c:1d:f2:3c:30:bf:66:c3:20:d4:
f0:49:ca:82:b8:4b:cd:a1:45:49:1c:07:e6:0f:6a:82:58:2f:
40:ee:4c:19:25:c1:2a:ff:cd:70:e5:77:92:99:5a:1d:d8:7f:
06:be:7c:9d:2e:b2:87:4e:47:55:01:88:9d:bd:66:b7:e2:da:
b4:71:c9:34:5d:44:2d:ef:9e:98:f1:12:c6:b8:c8:2d:32:a7:
48:4b:ab:3b:ec:8f:0f:f9:34:e8:6b:64:29:75:a1:64:75:f2:
72:bb:bd:0c:98:3d:57:e2:9f:4b:a1:28:0d:91:d0:69:1b:04:
c8:7c:c2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:48:21 2026 by rpki-client