
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/494C79FA02F711EBAB7D6729C4F9AE02.roa
File: 494C79FA02F711EBAB7D6729C4F9AE02.roa (raw, json)
Hash identifier: ondpjtdtT0bUKVP580km/1bHTlZckOs8tIBjN/TQH2M=
Subject key identifier: 40:CA:22:69:CE:C3:E2:CE:03:FE:C6:9B:47:ED:0E:9E:87:82:47:F7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E392
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/494C79FA02F711EBAB7D6729C4F9AE02.roa
Signing time: Sun 31 May 2026 16:46:38 +0000
ROA not before: Sun 31 May 2026 16:46:38 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 135172
IP address blocks: 103.215.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58258 (0xe392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:46:38 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c65ee-f6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a3:f4:44:b4:36:b9:9d:ee:9c:57:20:d2:92:
56:90:bc:b1:ef:62:8f:98:d2:65:7b:c7:b1:90:e0:
8a:53:b4:f8:fc:cd:9c:71:3c:29:a8:7d:be:d2:5a:
6f:eb:3d:88:21:6a:c0:3f:ae:07:6b:cb:e6:c2:cd:
87:24:f1:84:e0:42:b2:b0:b8:d6:cd:ac:9e:10:e0:
74:6f:75:70:61:12:fc:0d:5b:19:60:9e:b8:4d:a8:
7a:71:26:1a:fe:97:04:54:47:da:9f:fb:eb:17:be:
a7:b0:1d:2c:2b:e7:d3:87:31:62:4d:d3:6f:91:f5:
32:7b:09:ac:c3:a4:47:a7:01:62:14:9f:23:e6:54:
2f:f7:4e:87:23:21:27:db:f2:42:9e:ca:fa:7b:d3:
87:b3:79:0e:7d:70:49:d6:83:9f:7d:26:3b:5b:ce:
23:6f:91:16:2e:7d:63:7b:0e:ea:33:d7:66:07:71:
99:f8:af:a3:df:45:cb:26:b7:9b:a8:48:ef:89:e3:
a2:c9:c0:9d:29:ff:93:91:fe:d5:a6:45:bd:0b:25:
13:34:0a:be:ca:ea:49:01:ac:9f:3f:04:2d:30:20:
dd:18:a8:9e:88:38:78:2f:9c:19:15:97:23:bf:38:
96:f2:f0:46:1c:d3:a3:72:aa:a4:9f:57:c7:4b:0d:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CA:22:69:CE:C3:E2:CE:03:FE:C6:9B:47:ED:0E:9E:87:82:47:F7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/494C79FA02F711EBAB7D6729C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.215.134.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:72:34:4f:39:a4:45:ed:da:28:ef:15:06:ec:0b:88:dd:d0:
1e:df:df:6c:c2:1e:6e:21:c1:ab:48:e5:ab:14:35:e7:01:66:
93:f7:1d:7f:f7:12:ce:ba:c7:50:28:fd:31:9e:6f:62:e7:22:
20:6b:4f:97:e2:a3:03:5c:f0:93:be:81:ce:b9:f6:ac:f3:a3:
b3:3f:6a:e1:53:0a:c4:51:ee:85:0b:cc:f9:0e:f3:3a:e4:85:
e8:6d:c3:cd:6a:5f:57:03:f1:89:df:47:87:fc:db:02:5e:f4:
ac:5c:a0:f9:4a:e7:f1:c6:0a:bc:67:13:18:59:8d:bf:6b:bf:
00:fb:96:55:01:2d:b5:2e:42:1a:62:e7:38:c9:2c:7d:35:8f:
9c:b3:49:cd:77:b3:a8:06:f6:84:f4:27:22:57:a3:01:bc:ad:
3c:dc:3b:be:60:46:9b:e2:12:64:0b:57:2b:61:53:c7:0b:6d:
1e:39:2a:bb:af:c5:0d:80:f9:e5:ab:de:ed:c6:84:fe:88:10:
58:08:d0:15:70:d1:7e:f5:2b:2b:e1:8e:5b:9e:65:7a:b2:5c:
f3:92:93:88:8c:c7:88:d9:f8:f5:ac:f0:11:20:14:c3:9b:72:
dc:10:d5:cb:dc:a9:58:52:d1:e7:b9:41:1a:88:90:fa:1e:11:
c8:83:64:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:51 2026 by rpki-client