
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D3260B2072811EDBA8A9D59C4F9AE02.roa
File: 3D3260B2072811EDBA8A9D59C4F9AE02.roa (raw, json)
Hash identifier: TCfcsIiqPC8rUZAG9Ap4IIRoiLkG8wCHue518r1+SWg=
Subject key identifier: CA:E4:EC:7D:2A:71:1F:41:CB:D2:5A:8E:98:66:AE:03:65:FA:29:28
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E903
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D3260B2072811EDBA8A9D59C4F9AE02.roa
Signing time: Sun 31 May 2026 17:32:28 +0000
ROA not before: Sun 31 May 2026 17:32:28 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 150010
IP address blocks: 103.145.228.0/24 maxlen: 24
103.145.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59651 (0xe903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:32:28 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c70ac-d962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:5d:0c:ae:1e:42:60:bd:ee:85:95:9e:c4:
53:25:1a:0f:a2:66:b0:b4:db:79:25:7a:c6:36:40:
ea:9e:aa:44:2a:f4:11:cc:a2:3c:4c:48:5f:bc:b3:
61:cd:93:da:cc:fe:dc:27:ba:bf:af:12:7a:92:54:
f1:9c:39:a3:da:dd:4b:17:d8:ca:db:98:44:63:e8:
eb:fd:d1:43:b7:42:a6:12:cc:32:b8:ce:18:69:a4:
be:ed:e4:ec:22:dc:24:83:6d:5d:ca:6c:20:1c:77:
08:4b:8e:4b:bb:0f:3f:01:4c:24:74:1f:42:8c:e7:
20:08:05:78:1a:d7:86:23:c4:64:ed:e0:47:01:45:
f2:b2:51:97:18:ef:00:cf:69:01:48:7e:c5:82:24:
71:94:61:59:8f:73:3d:00:a0:a6:53:6f:76:aa:c2:
36:62:04:ab:08:31:8a:b8:6b:9f:13:ff:e6:93:4a:
3a:2c:4c:1b:c5:6e:da:fe:64:92:46:bb:95:51:ab:
1b:82:b2:a2:92:0b:de:1a:c9:ec:93:cd:df:ec:59:
5b:6c:56:ec:cd:77:a2:c5:0a:8d:ed:b6:03:f8:49:
37:0a:5b:0b:6f:9f:16:0b:7c:a6:fc:a2:d9:b0:aa:
6d:4e:f9:e4:24:65:e8:43:9f:54:80:cd:a0:ba:e5:
76:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E4:EC:7D:2A:71:1F:41:CB:D2:5A:8E:98:66:AE:03:65:FA:29:28
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D3260B2072811EDBA8A9D59C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.145.228.0/23
Signature Algorithm: sha256WithRSAEncryption
33:85:94:b2:f6:fb:f5:f2:80:08:8f:32:ba:95:47:61:24:08:
e0:31:22:72:c1:43:78:2f:f6:07:68:5a:e8:9c:28:a7:c1:50:
cd:5c:d3:ce:4a:99:6f:00:e4:ec:aa:dd:1b:99:96:58:5d:c1:
8d:98:fa:08:eb:09:74:15:fe:53:95:7b:40:c2:e1:8b:06:59:
71:fc:bd:95:ad:43:af:c5:93:b3:c5:04:36:a7:f0:a1:db:42:
4e:95:f3:a2:f5:ea:61:22:7c:40:b4:e1:c3:7d:3e:2d:1d:ce:
dc:a0:e7:69:0b:59:ab:d0:9e:20:f5:d3:90:f2:9a:f3:c3:3f:
cd:6c:7c:b1:2c:7a:c4:a7:2a:70:ef:bd:3a:89:93:d8:48:7a:
d8:31:11:16:5b:0b:1b:80:f6:f8:fd:ab:db:17:7e:09:c5:da:
5e:c6:d1:18:60:dd:a1:65:bd:37:c4:09:7e:f6:62:85:7e:46:
5e:23:06:b5:7b:2d:22:3b:c5:ed:d7:4c:51:fc:93:73:3c:3a:
79:c2:66:98:6c:2a:54:c8:92:35:1a:12:50:cc:c2:49:3c:5b:
a2:2d:d1:f3:67:7b:d0:f4:bc:e7:07:a7:f2:01:25:9f:5d:02:
59:27:3e:7a:1b:a8:8b:34:4e:cf:1f:72:e7:79:8c:68:b7:7b:
15:a3:a8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:01 2026 by rpki-client