
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F63BBC0504211ED83277887C4F9AE02.roa
File: 3F63BBC0504211ED83277887C4F9AE02.roa (raw, json)
Hash identifier: lNvXZNOa6h8C6veJso5hqhK80E5BwdM0m/GK9kJJGW0=
Subject key identifier: 1E:A0:F3:F0:B0:4C:B6:98:F8:F0:6C:01:AC:16:98:13:A8:F6:65:06
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EB3D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F63BBC0504211ED83277887C4F9AE02.roa
Signing time: Sun 31 May 2026 17:50:37 +0000
ROA not before: Sun 31 May 2026 17:50:37 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 399546
IP address blocks: 43.231.124.0/22 maxlen: 24
103.10.234.0/23 maxlen: 24
103.50.212.0/23 maxlen: 24
202.0.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60221 (0xeb3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:50:37 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c74ed-96b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:0c:ba:e0:1e:7d:da:21:d5:01:5f:c5:c4:
7e:ae:93:67:93:6d:e4:00:84:54:62:00:88:6d:40:
e9:04:10:6a:a7:58:4b:0d:14:97:7f:12:bb:11:0b:
57:8b:cf:80:07:4c:f6:ba:ad:45:b7:65:92:3f:99:
b8:14:c7:39:8e:c5:03:f3:9b:36:ff:66:1f:13:42:
68:7f:43:da:f8:9d:62:70:b4:0b:df:aa:81:60:fd:
7f:df:c4:34:2a:ca:6f:91:9d:b4:c5:63:07:5b:c7:
3c:a6:cb:6d:f3:75:ff:1f:fd:c8:70:18:3d:27:d6:
a1:dd:3f:8e:a9:66:d7:77:28:c9:b9:34:4f:5d:90:
10:a7:22:4a:f4:2a:13:57:89:0c:6c:b4:1f:0c:2f:
fd:16:95:10:32:87:ee:a6:cd:62:fc:ef:0a:87:52:
94:ed:ac:e4:26:c2:af:f6:06:87:0a:55:42:26:67:
5a:c9:6f:8f:f1:f9:e7:57:84:1d:b2:6b:dc:82:a6:
de:b0:11:3f:39:b4:3c:a7:18:0a:b8:57:15:2b:b5:
ac:d7:a5:d1:24:05:b1:4f:2d:93:f2:29:9a:d4:c3:
03:1b:74:b9:48:1b:c2:cf:5b:5f:31:8b:10:ba:f0:
3f:a8:5c:7b:40:81:ca:8b:fd:bf:cc:c2:bd:2a:16:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A0:F3:F0:B0:4C:B6:98:F8:F0:6C:01:AC:16:98:13:A8:F6:65:06
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F63BBC0504211ED83277887C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.231.124.0/22
103.10.234.0/23
103.50.212.0/23
202.0.103.0/24
Signature Algorithm: sha256WithRSAEncryption
72:75:fd:75:ee:4d:48:90:2f:dc:2a:01:f8:79:4a:8b:24:a9:
c6:ac:c7:a5:6e:42:81:0c:a1:31:43:4c:3a:87:b4:db:8a:81:
78:14:23:41:90:df:78:ed:c0:eb:cb:03:4d:52:ea:c6:a5:9f:
2c:50:09:17:32:ca:47:cc:f1:77:7e:55:5f:7e:77:ec:51:f5:
c1:7d:43:bb:9d:a1:da:1d:91:d1:e3:4f:b0:ce:e7:3e:15:29:
78:a9:02:4b:67:8e:58:d9:f8:11:58:c2:ad:27:c6:42:6a:37:
05:fc:4f:3e:59:67:04:f8:1c:6c:8a:b0:e4:6f:37:fc:b8:93:
fe:8f:f1:54:77:7f:62:2a:89:73:b3:4b:7c:f4:a7:8d:75:68:
c2:d8:de:fc:62:f2:0e:ab:4e:05:d8:a9:85:51:c0:e2:a1:1f:
2a:c0:c5:37:9b:3d:31:3b:0b:7e:29:52:d9:89:dd:ee:0c:70:
4a:09:82:ba:fc:a9:a5:6d:a6:f8:a4:56:65:c5:c2:4d:59:18:
75:55:33:55:0d:f1:57:6a:28:0c:c5:d5:14:af:c1:74:8d:55:
c6:d2:4d:8b:05:25:32:cb:f8:e8:f6:c7:04:de:15:9c:b8:60:
9c:dc:bc:7e:db:a2:c0:76:27:4b:dc:15:e5:e8:bc:a5:c7:ff:
94:ea:7b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:09 2026 by rpki-client