
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3727DA0042AF11ECBA3A677CC4F9AE02.roa
File: 3727DA0042AF11ECBA3A677CC4F9AE02.roa (raw, json)
Hash identifier: PCR2kvA5lf2rEF4cVWcshI1gCsH/P0jAC4JlQh7uAmc=
Subject key identifier: 75:84:97:86:91:74:D8:5C:0E:23:95:B4:B1:A6:65:18:31:5E:A8:B5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E825
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3727DA0042AF11ECBA3A677CC4F9AE02.roa
Signing time: Sun 31 May 2026 17:24:47 +0000
ROA not before: Sun 31 May 2026 17:24:46 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 147209
IP address blocks: 103.175.140.0/23 maxlen: 24
2400:1a60::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59429 (0xe825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:24:46 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6ede-77be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e5:d6:af:5a:7a:02:af:4b:15:29:06:36:89:
ec:9a:95:c6:43:9d:e5:ac:9c:9d:62:59:6e:8b:b1:
52:77:4d:64:b3:8c:d8:a7:aa:52:25:0a:9e:ab:50:
00:ed:13:1c:f4:75:ad:e2:95:f2:05:29:52:df:19:
df:90:13:2f:52:4b:60:c4:31:41:f2:58:c0:38:d2:
a4:d4:61:b5:6d:9d:bf:65:c7:84:d0:f2:65:73:89:
82:50:5a:33:7a:45:f1:1c:3e:2a:a7:9a:af:36:5b:
8d:84:12:8e:82:af:08:45:b4:ae:ba:46:18:48:ac:
f2:70:27:ae:d0:68:1a:86:69:b0:b4:01:0b:e8:b4:
4d:e4:e6:c3:34:af:fc:14:48:ae:39:89:e6:74:3f:
a6:5e:7d:4d:09:4e:cc:6f:48:c2:c3:b4:16:4a:ff:
45:ff:f6:76:53:44:47:f4:ff:eb:d1:62:b4:f5:0b:
0f:28:ec:7b:e1:c9:52:0c:d8:62:ab:2b:d2:78:99:
8c:70:0d:d6:44:ca:4f:d0:02:ab:c5:e8:a0:04:a0:
a9:3e:e3:77:68:69:2e:77:a9:eb:0f:11:12:1b:dc:
ae:c2:67:84:b2:1e:36:4f:0c:d1:22:0d:e9:b3:fd:
96:d1:6c:1a:33:ef:ef:d1:ce:9a:d2:a3:ac:15:82:
81:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:84:97:86:91:74:D8:5C:0E:23:95:B4:B1:A6:65:18:31:5E:A8:B5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3727DA0042AF11ECBA3A677CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.175.140.0/23
IPv6:
2400:1a60::/32
Signature Algorithm: sha256WithRSAEncryption
16:f0:83:50:15:53:f8:29:4b:a9:c3:0f:91:27:3e:00:c0:ff:
8c:ba:23:28:dc:03:e7:66:12:f2:bc:b2:5d:02:9a:dd:87:6d:
c8:bb:f5:3a:b1:70:ac:7b:68:65:8b:fe:90:b1:d2:3d:e3:98:
4e:47:1f:af:e5:5a:48:82:8b:3a:4e:c0:45:f6:70:3c:e1:84:
43:68:af:79:bf:ea:fa:0f:44:2c:fc:ac:fb:9f:cc:3e:80:ed:
31:dc:8d:33:6d:57:a7:95:8c:94:ed:1c:59:22:b0:02:53:63:
c4:e7:ad:8e:75:fa:d3:21:ef:b9:f4:fb:c7:10:d3:90:f5:d1:
c1:45:4f:42:d5:27:96:91:0b:9f:4f:6b:c2:e7:01:f7:f2:93:
e9:43:3b:75:33:fc:b2:ae:d2:56:ce:49:22:ce:a3:b1:06:fd:
29:95:ab:ce:a7:a7:42:88:ec:7c:62:dd:5c:b2:80:ae:01:ca:
94:d5:a2:39:57:ca:41:b2:fd:d2:32:54:df:23:a3:19:a0:36:
70:65:38:28:9b:16:0e:2b:36:f7:dc:28:7f:95:e6:96:1e:08:
30:fb:71:36:59:34:14:ff:ae:a4:4b:d9:5e:ce:b4:27:13:2a:
1b:33:81:45:75:ab:a2:6c:c3:e9:1e:fe:12:4e:f2:12:1e:40:
49:76:79:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:02:54 2026 by rpki-client