
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3AAF9E10AC9211EFB3BE467AC4F9AE02.roa
File: 3AAF9E10AC9211EFB3BE467AC4F9AE02.roa (raw, json)
Hash identifier: CaYsn5PvblEDghl6VcMOFwt1gFS8Crl2gZaxBMiV5Bs=
Subject key identifier: 07:B1:B3:94:74:57:0C:40:AB:55:38:BD:EC:6C:3B:B8:88:19:35:3B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E5F7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3AAF9E10AC9211EFB3BE467AC4F9AE02.roa
Signing time: Sun 31 May 2026 17:06:28 +0000
ROA not before: Sun 31 May 2026 17:06:27 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 138750
IP address blocks: 103.139.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58871 (0xe5f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:06:27 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6a93-626c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:eb:d4:4e:6a:ed:8f:a6:c1:52:0b:4b:a0:
ed:12:72:6c:0a:b0:89:37:e4:ce:41:43:72:57:af:
b0:4a:1c:ff:eb:a9:8d:30:54:25:8c:06:da:4a:d8:
09:95:43:83:ab:ac:6e:e1:20:b7:64:9e:9c:1b:f2:
b0:62:9a:dd:bf:d0:4f:0f:41:c3:61:5e:ab:ad:8d:
56:e3:e3:cd:28:f4:73:9a:eb:97:37:42:68:98:e1:
a2:a5:df:c3:b2:09:50:f1:78:86:94:f9:6b:05:73:
82:83:ab:7f:89:24:a5:9c:a2:09:48:dd:75:b9:04:
76:31:31:a8:23:48:82:7f:e6:39:8a:2f:56:8b:1f:
d3:4a:c8:16:03:70:20:9c:1b:2f:52:0f:b2:a2:82:
40:45:a8:89:05:b8:7d:e0:6c:4f:c3:28:e5:16:1a:
c7:9f:95:38:d6:70:1f:9f:84:a3:56:39:62:05:ac:
35:5c:95:69:c6:79:56:44:e4:ed:b0:d5:10:e3:f5:
8c:7d:d5:00:ae:2c:fb:d7:c3:09:07:75:87:4c:b7:
17:51:c2:10:05:11:7b:f9:dd:a9:5d:47:7c:fc:bc:
53:0d:e3:fa:a1:f2:b7:01:2c:44:a9:4e:7e:60:cc:
95:80:0f:10:04:5d:b0:fd:52:f8:92:e1:16:58:a9:
a9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B1:B3:94:74:57:0C:40:AB:55:38:BD:EC:6C:3B:B8:88:19:35:3B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3AAF9E10AC9211EFB3BE467AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.139.227.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:12:c2:9f:c0:b6:ac:f2:5c:68:c2:f0:22:63:f0:a8:30:8f:
c3:c1:50:ef:f9:b8:0b:46:65:1f:12:e7:98:98:66:25:a0:3f:
67:04:3d:75:af:c8:42:1f:35:e6:83:e6:93:52:ed:b8:5b:3c:
b6:87:16:dc:74:d7:45:09:28:69:1b:47:01:77:0a:1a:c0:49:
9d:2e:0d:39:62:6d:fb:78:70:21:c3:a4:35:b6:83:35:f9:41:
3c:80:c0:5b:da:95:c2:f7:1e:7f:e3:17:be:4d:3d:ae:50:9a:
65:bc:5e:76:7b:75:8a:68:fb:0d:26:d2:b9:8c:37:bc:37:e4:
64:30:1a:f6:3d:de:3b:6b:8d:06:d0:df:5d:64:3d:30:c8:09:
b3:49:1b:b4:16:32:a4:fa:0e:57:97:49:82:6b:a6:2d:b2:36:
b0:fd:5a:70:41:e2:26:e9:b5:53:5f:86:b3:a0:63:31:d6:56:
49:88:f0:70:91:2a:0f:95:35:35:de:27:15:1b:28:2a:7d:ee:
ea:4f:09:a3:30:fb:2a:a0:c6:4b:1e:68:58:7a:b1:f3:8c:a1:
b6:e7:aa:a7:f0:43:47:b9:56:be:59:98:08:7b:97:26:d3:6e:
fb:fd:14:82:c2:76:54:8a:56:1d:a4:f0:22:2d:63:63:61:94:
77:b4:2d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:17:18 2026 by rpki-client