
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E93F298DEEA11EB9AC14312C4F9AE02.roa
File: 3E93F298DEEA11EB9AC14312C4F9AE02.roa (raw, json)
Hash identifier: 3ZokR4y6iZmrQbd2oxvDso9LVSMVAjG2y68Ocn069Y8=
Subject key identifier: CB:B9:73:B3:78:E5:A8:DA:B3:C1:DB:77:4D:D3:59:9B:2A:A8:0E:11
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E60F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E93F298DEEA11EB9AC14312C4F9AE02.roa
Signing time: Sun 31 May 2026 17:07:14 +0000
ROA not before: Sun 31 May 2026 17:07:14 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 138783
IP address blocks: 103.136.44.0/22 maxlen: 24
2001:df2:12c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58895 (0xe60f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:07:14 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6ac1-57ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:77:17:eb:b0:5d:9a:ea:02:f1:d8:74:a7:99:
87:55:43:86:f6:ef:e7:a0:d5:01:f0:54:5b:98:f4:
88:8e:a0:34:ee:32:ca:9f:ce:e4:71:eb:0d:c9:9f:
16:dd:a1:b6:e9:a6:c7:ca:9d:83:6e:a1:63:36:7d:
e4:0b:05:77:d7:bf:b9:e4:b2:b7:af:e8:1f:e2:f0:
d9:3c:3d:08:6e:5f:07:21:23:d8:35:46:93:f2:32:
ab:f1:d0:e7:ac:60:fc:b5:dd:a2:2b:c9:73:11:fc:
49:37:f5:b5:87:31:3e:7e:2e:ef:ee:9f:47:c7:82:
84:e2:14:cd:a1:c9:d2:7e:38:f9:3b:65:b1:ea:bf:
73:91:85:84:a9:87:a7:a4:13:69:02:4a:0d:66:a7:
d5:4e:de:a7:81:cd:44:27:01:5e:b2:d7:d4:38:05:
d1:e5:6e:84:71:60:63:4a:ed:62:cc:f0:0c:bb:f6:
15:02:ed:f4:17:e1:4f:67:93:02:d6:ac:68:86:59:
e0:96:0c:a5:dd:da:33:bc:81:1b:bb:75:95:dc:ea:
05:4f:c6:82:5d:d5:ba:ff:2c:83:c7:6d:6f:f6:b2:
84:85:a1:70:5b:e0:4a:c9:6a:e9:79:44:bc:71:13:
89:8e:e5:9c:f4:55:ea:bb:19:60:49:ef:df:a1:6d:
02:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B9:73:B3:78:E5:A8:DA:B3:C1:DB:77:4D:D3:59:9B:2A:A8:0E:11
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E93F298DEEA11EB9AC14312C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.136.44.0/22
IPv6:
2001:df2:12c0::/48
Signature Algorithm: sha256WithRSAEncryption
8d:8b:e7:68:99:27:c8:d2:2c:79:92:13:2f:12:09:ef:76:19:
e6:9d:0f:72:8e:99:7b:40:e8:87:02:66:f0:e0:ae:89:85:e2:
c9:f4:65:b5:35:61:31:29:a9:05:1c:03:b4:08:cf:f4:b0:ca:
92:bc:11:ac:b1:00:08:4f:4c:36:68:fd:63:a9:64:e3:50:28:
09:8b:8c:da:38:f4:d2:14:21:69:24:c9:98:cf:18:49:f7:67:
1f:21:56:ee:2d:5c:f1:6e:fc:49:36:2a:66:af:4e:05:9e:60:
15:05:36:e5:ec:e9:da:0f:d6:39:03:1b:73:4c:0e:ec:8a:a5:
03:b0:01:45:6e:f5:e8:74:2d:41:e4:a9:db:b7:17:d8:ea:7a:
bf:3b:4d:ab:b1:63:d7:86:d9:37:3a:1e:0e:4e:5a:d7:cc:1c:
f8:c5:16:77:63:cd:ab:80:14:91:22:a3:4d:8a:d8:6d:c8:87:
3d:0c:c7:c7:2f:20:17:59:de:86:4c:e5:3e:86:fa:51:2d:b5:
aa:be:74:6b:7e:46:61:f8:3d:2b:08:53:20:b7:56:e1:a1:99:
a3:86:99:ea:68:b3:2c:a9:21:79:64:73:62:a4:b2:34:11:c5:
11:0b:17:c8:a6:65:58:f9:44:70:df:30:9a:a9:e4:e1:05:c6:
8d:21:6b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:30 2026 by rpki-client