
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E2057DE03BB11F0A828FE0EC4F9AE02.roa
File: 4E2057DE03BB11F0A828FE0EC4F9AE02.roa (raw, json)
Hash identifier: q4AzsZxeb+6UtBDwBcVeXBWHT41QoOeM+Lg7s+FquDY=
Subject key identifier: D1:DB:AC:D3:4F:80:C6:5E:1C:B7:59:23:B9:0B:3C:C5:FD:AB:61:BF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E5DC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E2057DE03BB11F0A828FE0EC4F9AE02.roa
Signing time: Sun 31 May 2026 17:05:37 +0000
ROA not before: Sun 31 May 2026 17:05:37 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 138707
IP address blocks: 103.136.93.0/24 maxlen: 24
103.136.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58844 (0xe5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:05:37 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6a61-c394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:ef:93:91:5d:69:dc:a8:d7:0c:5e:78:93:
51:88:52:b9:76:72:91:a6:34:19:8b:b4:b2:38:b0:
e5:71:93:72:d0:19:7e:63:59:ae:22:0a:84:8d:96:
ec:d0:ec:bb:46:7d:65:d1:5d:ba:65:a0:ff:cd:b6:
07:da:19:23:be:ba:f0:28:f4:d5:75:3d:56:80:43:
5f:93:4a:ce:63:a3:4a:b8:01:5c:99:ef:a3:b3:73:
15:c1:47:ac:cc:dd:ca:94:5b:3f:52:5f:62:71:40:
c4:1a:87:c6:fb:1d:ab:72:dd:cf:88:a6:b6:64:37:
f4:fb:57:84:f6:6c:55:c1:b4:e1:82:2d:2c:0b:c5:
35:4e:14:de:84:77:5a:0f:66:90:72:4a:c1:a0:d2:
b7:cc:c9:e0:af:ef:1b:ce:7e:34:f8:2e:cf:b5:12:
19:3e:d1:39:05:cf:f2:24:18:d7:21:01:97:ef:13:
54:7e:60:22:53:6e:17:7c:df:03:05:64:d7:08:7e:
4b:59:7d:5e:f3:cd:7a:40:7b:ed:03:97:35:68:1a:
75:d2:ff:bd:64:e3:15:af:19:d9:93:2f:0c:d8:9f:
a8:70:ff:50:ba:6a:72:45:9e:5b:bd:9d:cb:16:7c:
9e:70:ce:43:93:79:1b:85:b9:86:4a:fe:e2:98:a8:
c5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DB:AC:D3:4F:80:C6:5E:1C:B7:59:23:B9:0B:3C:C5:FD:AB:61:BF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E2057DE03BB11F0A828FE0EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.136.93.0-103.136.94.255
Signature Algorithm: sha256WithRSAEncryption
2c:c6:f3:ee:57:0b:f8:2a:21:40:4d:c0:8b:b4:7e:4a:a8:e2:
19:e8:94:a0:38:95:20:74:63:ae:e4:17:16:07:de:59:02:11:
cd:e4:0c:c5:fe:5e:b6:15:70:8a:46:07:1a:80:3f:df:b2:bd:
af:18:b3:a1:81:5e:13:2a:73:c9:bd:da:1f:a4:bf:ad:bd:55:
c2:20:37:7d:f1:95:f9:64:5b:20:d5:f2:09:52:97:9d:94:3f:
58:f7:e1:9a:65:dc:dc:7e:b4:31:82:a5:3c:ad:9f:c7:55:64:
0e:c7:cf:21:0f:ec:bb:8c:6d:43:d1:ad:b3:ab:70:3d:15:97:
56:c0:73:1d:7c:2f:58:d1:0e:58:9f:c6:cb:64:84:f8:7c:a3:
80:1d:d8:2a:aa:d1:c6:38:41:5e:9e:f1:ba:4a:b0:bc:e5:e2:
0a:1b:77:c4:15:1e:04:9e:75:1c:57:7e:18:da:38:02:97:28:
2b:83:3e:92:d5:0b:99:9d:b1:36:7f:cc:50:10:b3:56:87:e8:
cb:75:26:b0:68:68:b5:d5:0b:e7:11:71:20:e7:08:22:5f:a4:
42:25:8b:ed:de:f6:b3:46:95:40:d5:e1:57:f9:25:b1:34:60:
4e:a7:ae:45:0f:27:0b:38:0c:a7:c0:4a:4b:2e:92:36:4e:e6:
e0:0d:11:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:06 2026 by rpki-client