
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/415D8040BE4811ED95E59254C4F9AE02.roa
File: 415D8040BE4811ED95E59254C4F9AE02.roa (raw, json)
Hash identifier: 8yAdBcC4sQ2YSbw9nfKxQkRci9aq7K+ZI9hRMoGF91M=
Subject key identifier: C0:AF:36:E3:EB:46:CA:F8:01:E3:C2:92:65:74:1B:C9:AC:ED:2F:69
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E2CB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/415D8040BE4811ED95E59254C4F9AE02.roa
Signing time: Sun 31 May 2026 16:40:10 +0000
ROA not before: Sun 31 May 2026 16:40:10 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133988
IP address blocks: 103.88.100.0/23 maxlen: 24
2400:dfe0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58059 (0xe2cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:40:10 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c646a-d0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:33:ce:9c:a7:b8:da:02:98:a8:37:91:df:a9:
e6:76:aa:d0:96:b3:c2:23:4c:89:90:58:cc:0a:d7:
1d:32:d6:32:dd:3a:39:f7:7b:ce:5b:51:48:35:a8:
d6:66:b4:ff:7b:c4:a7:d1:e8:f1:c4:24:0d:eb:cf:
0b:08:27:0d:12:25:69:26:2c:3c:42:71:1a:24:e5:
f5:1c:72:e5:16:59:6f:3d:b6:e5:52:94:86:75:58:
f2:60:3b:17:30:2e:55:4b:c3:f5:ad:f8:a4:2c:70:
07:ae:c2:20:ff:0e:fd:58:9c:bb:a4:48:a0:fa:52:
88:29:fc:c4:af:9f:c2:62:cd:7f:d8:70:39:d1:85:
03:ef:75:73:12:72:2e:f8:f7:34:6c:9f:40:ee:d8:
d9:eb:cf:b9:0b:c6:ff:80:27:7e:01:f7:bb:e6:5a:
4a:41:3a:ad:1f:60:ec:ef:fd:8d:a9:bd:b4:c5:99:
6b:c5:cd:db:9d:61:f9:a6:e3:3a:e7:84:b9:a0:c8:
bc:2c:21:3c:ea:88:f7:08:6b:4b:9e:ee:0b:f1:7b:
9c:76:52:ca:db:d1:d1:84:30:6c:0b:f7:af:a4:54:
bf:5f:ff:c9:bc:33:46:79:9c:74:34:a4:48:59:35:
5b:f7:33:8b:71:1c:4b:b9:fb:2e:46:72:6e:ac:82:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AF:36:E3:EB:46:CA:F8:01:E3:C2:92:65:74:1B:C9:AC:ED:2F:69
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/415D8040BE4811ED95E59254C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.88.100.0/23
IPv6:
2400:dfe0::/32
Signature Algorithm: sha256WithRSAEncryption
4b:f8:47:8f:1a:b9:c7:f3:4b:97:0b:b7:2d:ab:93:3c:76:29:
56:0d:fc:d5:2e:74:7d:5f:6d:38:e5:76:c6:04:74:c4:6c:31:
fd:62:7e:98:11:c4:e8:64:0c:d3:e0:95:86:74:6f:0a:ae:b0:
7e:5d:8b:a7:04:17:b7:a8:c3:8b:07:1c:03:1a:4a:f9:18:c3:
c3:bc:03:39:e6:7c:a5:aa:66:c1:41:e4:54:3e:96:1f:2c:da:
4b:ca:e1:2d:66:0c:d7:04:81:9f:95:35:99:88:3f:13:a7:32:
26:46:16:0e:7e:70:6e:ca:46:a3:fa:0d:01:ad:3c:af:48:d2:
ba:40:9c:7c:75:0a:af:0e:27:f8:b1:76:27:0d:4a:96:1d:34:
5b:58:13:a7:35:21:f1:93:ae:a4:44:fc:23:c8:44:5b:e0:20:
96:57:b5:53:42:b9:5c:0d:81:c2:e8:5c:28:bf:ae:86:19:5e:
11:01:01:ca:b2:30:45:aa:9b:44:28:ce:2f:cb:d2:15:12:7d:
a3:88:b9:78:f2:3c:81:81:5d:4e:24:ca:6b:2c:8d:59:cf:4e:
53:19:fe:62:38:c9:5d:b9:58:0d:39:22:36:93:43:4c:8f:c2:
f9:3d:2f:df:16:d2:33:6e:9d:25:05:00:fa:57:26:9d:27:e5:
21:d4:0c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:08:02 2026 by rpki-client