
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/47717E90D72D11F0843ADD3761D3641D.roa
File: 47717E90D72D11F0843ADD3761D3641D.roa (raw, json)
Hash identifier: iWcBNCpWAckQt8qMGfsqIZu/w4pPWPKu939jBkxS5tA=
Subject key identifier: F5:55:62:A6:C6:E4:92:BA:ED:DF:78:29:32:50:17:08:96:69:9F:59
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EC0F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/47717E90D72D11F0843ADD3761D3641D.roa
Signing time: Wed 03 Jun 2026 13:00:20 +0000
ROA not before: Wed 03 Jun 2026 13:00:20 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 147285
IP address blocks: 49.238.60.0/24 maxlen: 24
49.238.61.0/24 maxlen: 24
49.238.62.0/24 maxlen: 24
49.238.63.0/24 maxlen: 24
103.59.184.0/24 maxlen: 24
103.59.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60431 (0xec0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 3 13:00:20 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a202564-47ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:3d:db:78:01:48:97:2e:39:1e:f7:10:bc:
78:9e:e0:3f:d6:58:0e:36:1a:d7:76:bf:13:ed:eb:
e4:d0:77:db:e0:ee:c6:59:95:b4:c4:08:94:3c:a4:
f7:fe:12:0e:1a:33:ec:2c:33:4d:57:6f:97:cb:23:
ff:78:9f:13:70:94:2f:7f:8e:65:ce:2e:9d:1e:58:
b8:34:dd:14:04:0f:0d:31:fb:80:eb:97:86:af:9b:
81:02:18:dc:d8:68:f4:06:7d:22:ec:73:06:d5:a7:
c1:5a:d4:0e:4f:43:9e:c8:a4:79:cf:bf:7b:d9:0c:
3a:5a:51:15:aa:6d:1d:54:df:0e:ad:1b:a4:0e:f3:
5b:40:60:46:2f:54:e7:5d:6f:0f:5e:69:b1:5a:e2:
28:fe:1f:2c:63:76:9f:ac:4a:9f:24:8a:37:0c:71:
2a:fa:c1:0c:10:7c:0d:cc:2e:9d:c0:6f:4f:1d:93:
77:db:e9:94:de:e4:68:7b:6c:41:f1:52:d2:cf:45:
67:95:f5:1a:f5:34:4b:11:46:f2:31:9c:48:7d:bc:
2e:69:9c:79:b9:bf:5a:7d:74:fc:7b:9d:32:91:5d:
37:e3:5f:5f:e1:d2:12:d4:af:4e:60:a8:d0:82:33:
58:cc:49:58:28:6e:7a:9f:63:f5:a3:ce:02:a5:d8:
20:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:55:62:A6:C6:E4:92:BA:ED:DF:78:29:32:50:17:08:96:69:9F:59
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/47717E90D72D11F0843ADD3761D3641D.roa
sbgp-ipAddrBlock: critical
IPv4:
49.238.60.0/22
103.59.184.0/24
103.59.186.0/24
Signature Algorithm: sha256WithRSAEncryption
75:32:be:7c:b6:7a:3c:62:96:6a:63:e9:b6:87:66:cf:e3:f5:
ba:c0:23:72:73:1e:5e:c6:d8:e1:73:4b:55:cb:87:2e:fc:a0:
9a:c9:4d:60:4e:a1:1c:98:ab:26:dd:b0:fe:47:03:15:27:18:
20:19:cf:8b:ba:94:34:3c:6b:bb:a1:7d:b1:06:b0:bc:c9:25:
d9:3b:66:56:45:25:b2:b7:52:90:df:46:25:ac:58:40:f7:24:
eb:b2:97:a7:ed:31:44:5d:e0:c6:bc:57:60:47:ca:22:4e:10:
f9:4c:9d:8f:b9:c7:d5:d1:ab:6d:3b:ec:e1:10:34:30:b5:64:
c9:ef:c6:3e:86:29:c9:de:a2:66:a3:ec:f2:b5:80:2a:fa:fd:
a6:c9:d4:7b:05:e7:df:01:ed:01:84:9e:63:7d:ef:74:f5:63:
b5:be:6f:c7:ab:30:1f:7d:1f:50:52:64:f5:07:1f:fc:5d:96:
17:41:28:32:5f:bb:dd:66:9d:2a:43:ce:17:e8:34:8e:a0:69:
91:aa:bb:46:7f:4b:77:12:01:7d:f3:f9:b2:3e:52:b8:99:02:
e3:aa:df:c7:da:77:6e:01:c6:b5:33:d4:00:3b:d7:ba:9b:0e:
6b:c2:b1:5b:61:c0:de:dd:c8:0f:c5:94:cf:21:f7:eb:77:73:
dc:7f:f7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:07 2026 by rpki-client