
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E605EE83DCC11EBAE185B66C4F9AE02.roa
File: 3E605EE83DCC11EBAE185B66C4F9AE02.roa (raw, json)
Hash identifier: BMwthPXvqH3ouaLmxqX/67iWdQCCeYpXsfKK9zc02ZU=
Subject key identifier: 02:94:1E:3A:22:0C:AA:9F:71:B4:81:D4:BE:08:DE:5F:B6:AC:42:6E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F2F3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E605EE83DCC11EBAE185B66C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:12:22 +0000
ROA not before: Mon 06 Jul 2026 17:12:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141294
IP address blocks: 103.159.239.0/24 maxlen: 24
103.177.84.0/24 maxlen: 24
163.227.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62195 (0xf2f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:12:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be1f6-b8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:64:06:a0:b1:5e:c3:45:27:a2:15:16:25:
f2:ae:a0:5d:e2:42:5b:fa:26:70:e2:1a:e6:fd:1b:
90:9d:42:05:8b:73:86:cf:10:53:c3:e0:b9:f1:e0:
0d:72:b4:38:61:cb:44:80:a4:e7:d7:ae:15:73:17:
3d:dc:0d:bc:b5:c3:47:44:f7:a6:78:be:21:48:ea:
53:97:27:00:d8:53:e5:34:79:47:ad:ed:b6:17:87:
90:3c:de:64:8b:01:e3:b2:01:b3:72:b0:00:b8:44:
09:80:54:9c:75:7c:4b:4f:9d:55:78:6a:11:00:99:
2b:26:f1:51:c6:e5:8d:24:f8:93:f0:46:87:2d:0a:
0f:ac:f1:05:2a:31:87:2a:61:c3:21:a7:74:5f:f6:
9b:36:60:a8:55:de:0c:f0:db:e3:82:13:60:61:1a:
0e:d7:24:9b:04:7f:2d:c8:ba:cc:36:67:b9:3f:a6:
ae:98:99:a7:61:c1:e0:10:83:80:10:5e:0c:b3:5c:
0c:43:8d:17:a1:94:d2:6e:46:74:44:9f:aa:a1:e1:
e0:80:c4:fe:3f:83:dd:4e:43:ad:4a:4e:20:e9:27:
fb:0f:fe:2d:8b:4f:b2:4f:ba:34:f4:96:1d:e1:c2:
44:68:54:f3:1d:e3:5e:43:f9:ff:83:d2:26:22:d2:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:94:1E:3A:22:0C:AA:9F:71:B4:81:D4:BE:08:DE:5F:B6:AC:42:6E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E605EE83DCC11EBAE185B66C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.159.239.0/24
103.177.84.0/24
163.227.38.0/23
Signature Algorithm: sha256WithRSAEncryption
74:8a:78:3c:97:c9:74:18:bb:08:e0:56:16:d1:72:59:7a:ff:
71:1c:d3:10:4a:b6:83:e7:05:33:10:d7:b0:00:0f:34:e6:18:
64:e1:ae:c5:79:ff:cb:2a:9e:34:72:d7:2c:22:99:14:ab:6c:
36:7d:b6:9b:f7:dc:83:4e:a8:42:d8:1a:53:2f:5c:4d:6c:a0:
a3:7a:f9:92:55:b4:66:98:7f:b2:ce:72:66:c5:78:b2:71:6c:
48:cd:36:87:b4:b8:43:77:7b:83:00:0e:5f:0a:5b:c4:f8:c8:
93:20:f6:a4:e2:2d:0a:d9:7a:ba:6a:dc:52:6e:9a:fc:fa:1e:
71:9e:45:18:bb:b6:92:40:cf:f7:9a:dd:77:0b:dd:ad:b0:20:
f3:c7:19:19:55:a1:78:ee:5f:fe:8a:89:b5:13:55:4d:ce:62:
cc:fe:99:b0:26:0f:0f:55:50:8c:64:f3:0a:d7:1a:3d:2e:31:
71:bf:7e:a4:15:c0:be:3c:7a:e0:c0:7a:18:e9:6a:31:91:0c:
de:79:ae:38:aa:1e:c6:9a:16:82:85:7e:15:8b:62:50:c9:f0:
e2:22:45:d6:96:58:8b:ce:43:42:df:4a:fb:fb:7d:e4:42:fa:
91:f6:07:af:00:98:f1:ef:2e:84:5b:85:11:f9:58:44:8e:7a:
b4:59:77:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:28 2026 by rpki-client