
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AE07D166EED11EDB6685622C4F9AE02.roa
File: 4AE07D166EED11EDB6685622C4F9AE02.roa (raw, json)
Hash identifier: wiN3eHvMkBbJp8loCaVFGDfmegOxcu31CPvDPxWhpNE=
Subject key identifier: F0:93:7A:DA:06:C8:B2:FD:91:89:AE:31:5E:41:A7:90:07:59:74:35
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E28F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AE07D166EED11EDB6685622C4F9AE02.roa
Signing time: Sun 31 May 2026 16:38:14 +0000
ROA not before: Sun 31 May 2026 16:38:14 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133670
IP address blocks: 103.100.245.0/24 maxlen: 24
2001:df1:9640::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57999 (0xe28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:38:14 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c63f6-e4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:cf:fa:57:79:e5:cb:a2:10:1f:b5:b9:bf:
12:2d:56:2c:ff:e1:59:09:f0:94:7f:cc:38:f2:3a:
59:84:47:37:ee:10:b6:c1:7b:ba:75:0e:7e:68:ef:
29:68:7d:04:0f:ba:5a:a7:a4:ec:0a:e8:71:99:68:
ff:f4:a4:a3:81:27:15:93:31:aa:de:86:ce:01:82:
99:15:56:a2:2b:e1:fa:df:87:77:38:63:e0:39:ae:
6b:14:c4:01:43:d0:f8:7e:08:21:2a:fe:64:10:9d:
d9:e6:a8:57:b8:84:f3:6b:41:e9:2e:3e:36:e5:ce:
bb:23:c5:71:09:6f:58:c7:f4:21:28:97:ce:be:6b:
d3:e8:e2:b9:59:0e:b7:f8:f7:39:25:65:f8:95:d7:
cf:b4:6d:e0:34:17:a0:81:e1:ab:7b:dd:26:bb:4a:
db:8a:69:bd:a6:4d:f0:46:32:a1:d5:0a:62:80:99:
8e:c2:f0:b5:75:ac:45:2b:ec:83:a4:df:d0:d2:41:
0d:0e:15:f0:1e:d8:e3:43:3b:71:4f:95:0a:b2:82:
54:ee:70:d0:fe:fe:5e:4a:d0:05:4c:05:10:16:8a:
79:9b:48:2a:84:3f:0d:4a:03:e4:ca:e3:16:7d:2e:
7e:0a:da:ea:4c:30:56:f0:45:3f:77:a5:93:a6:db:
32:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:93:7A:DA:06:C8:B2:FD:91:89:AE:31:5E:41:A7:90:07:59:74:35
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AE07D166EED11EDB6685622C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.100.245.0/24
IPv6:
2001:df1:9640::/48
Signature Algorithm: sha256WithRSAEncryption
62:b2:09:d7:73:25:a7:f9:19:e2:60:1a:33:f9:04:38:32:c3:
96:b9:ca:16:97:d5:ce:32:71:aa:fa:fd:8a:5d:0c:52:87:fb:
4d:a6:78:a5:10:81:6a:c5:9c:84:c1:17:86:5e:ba:e4:87:18:
05:ba:c4:41:66:5c:df:eb:55:d1:d0:bb:2d:a6:c2:4d:16:e1:
1e:33:ad:2f:b8:10:c8:cf:95:f9:2d:88:a3:f5:e1:c2:0d:e0:
be:47:cb:e4:a3:76:8c:4f:9f:77:e0:70:6f:19:03:1b:05:a0:
83:40:97:17:9b:a0:02:a0:51:6d:78:5e:66:79:f9:90:24:09:
cf:ce:ed:dd:4e:98:eb:03:b9:d4:49:90:12:71:b6:2c:24:70:
c7:0c:da:f7:21:a0:80:2e:b9:83:2b:c4:77:42:3e:ef:96:30:
4b:99:67:65:80:02:aa:c9:22:8c:cb:60:13:51:4b:d3:5c:cb:
14:26:83:24:a4:55:18:70:7b:45:9a:50:0a:76:d2:31:1c:a9:
38:a7:97:70:f9:45:9f:d0:7f:7a:a3:fb:29:9c:23:3f:a1:05:
45:26:6d:17:23:50:96:d5:e1:ef:e5:29:f4:bc:4f:b3:4f:47:
02:3b:1c:b0:44:47:a2:aa:8a:5d:c7:3b:ce:2a:f9:52:cc:f6:
48:41:4b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:06:35 2026 by rpki-client