
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/428E04EE066A11EDB31C2239C4F9AE02.roa
File: 428E04EE066A11EDB31C2239C4F9AE02.roa (raw, json)
Hash identifier: HZzwrJn4AW9yY8kHwEj2tUhAd4EVtjo0n/WOzcDXGSk=
Subject key identifier: 85:66:A2:8B:70:B1:1B:4F:A2:39:9F:3B:58:99:74:5C:02:21:FE:CA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E91F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/428E04EE066A11EDB31C2239C4F9AE02.roa
Signing time: Sun 31 May 2026 17:33:24 +0000
ROA not before: Sun 31 May 2026 17:33:24 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 150047
IP address blocks: 103.191.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59679 (0xe91f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:33:24 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c70e4-c640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:b3:d3:f2:1c:d1:7d:dc:f4:50:f6:4a:ad:
1f:1b:d3:40:7d:94:38:bd:68:ca:ba:25:05:7b:bb:
a8:9c:f9:3b:9c:97:e3:58:24:0a:72:df:b8:d7:76:
83:af:2d:bd:7d:26:8e:fa:db:8b:88:cb:21:22:3c:
7f:56:71:d8:b0:66:49:aa:e9:1c:2a:6f:89:96:93:
36:94:e0:96:5e:03:c2:99:0e:08:dc:0b:d4:f3:43:
59:0a:b0:9c:1b:f5:ba:b7:89:53:f1:54:4b:85:69:
15:cc:61:60:47:e4:9a:6a:7f:b1:2c:ab:35:e1:48:
b8:b3:76:65:58:53:29:86:9b:f2:0e:a3:9a:a5:ff:
0f:d9:74:2b:ec:f6:47:7c:5a:4b:ca:a1:8a:57:b4:
db:4d:28:f4:44:57:35:48:9e:d8:70:ae:dd:74:a1:
73:6a:b5:6d:53:fb:06:62:b5:ae:1f:dc:a1:d8:44:
3e:0e:c0:91:c5:c6:93:52:ec:04:25:e5:e4:19:cc:
26:7f:4c:97:41:0b:83:d3:f3:5e:52:1a:f3:65:cc:
09:00:11:a8:40:21:30:6e:64:b0:9d:70:16:0e:89:
01:21:4d:0a:99:ce:18:d8:11:7e:c9:4d:6b:20:ae:
74:a8:29:71:7e:0f:78:59:e0:c7:bf:af:de:06:2d:
2e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:66:A2:8B:70:B1:1B:4F:A2:39:9F:3B:58:99:74:5C:02:21:FE:CA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/428E04EE066A11EDB31C2239C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.191.64.0/23
Signature Algorithm: sha256WithRSAEncryption
82:76:81:ef:5a:57:1e:75:85:9c:5c:42:e2:af:2a:fa:b5:1c:
04:99:6e:9d:5a:a2:6e:1a:51:4e:23:45:39:51:7d:fc:6c:96:
bb:a2:ed:3e:df:92:00:7f:46:81:ae:c3:82:05:ed:23:77:58:
56:60:bf:25:28:80:98:53:51:bc:0a:6d:41:92:a1:cd:b6:ad:
61:76:93:dc:6f:83:ea:0d:27:2c:5f:1d:32:0d:7f:4c:6c:29:
42:72:42:b0:c7:7d:4c:36:a8:43:db:11:89:39:ff:f6:35:a4:
6d:19:df:95:5f:a6:56:d0:e7:a0:64:a6:11:5c:56:99:cd:49:
cd:72:92:a6:d4:a3:6f:6c:eb:c0:59:32:fa:ac:5f:20:75:2d:
2f:ca:59:63:f4:62:b8:20:91:54:ca:ad:9f:72:12:b0:53:52:
f4:2c:1b:df:5e:6d:b7:12:ea:26:8c:0f:0b:6d:2c:f2:a5:a4:
08:8e:25:a1:f5:22:b5:21:41:ba:ec:39:db:39:21:eb:fc:eb:
f3:01:4f:fc:25:7b:78:ed:7a:b6:eb:2b:0a:bc:21:b0:e8:51:
9f:45:2d:bf:d1:b8:c7:1f:d8:20:7c:10:33:6d:15:b6:93:6f:
6a:cf:b5:1d:1d:6b:66:23:44:79:af:83:43:d9:fa:c1:10:a3:
77:3e:2c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:37 2026 by rpki-client