
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4EAAB9A43A7511EDAE523F29C4F9AE02.roa
File: 4EAAB9A43A7511EDAE523F29C4F9AE02.roa (raw, json)
Hash identifier: V/7HKY7/hoRWe2Ar0Om3Kz9D1sgCnABmCmg0kGvVPps=
Subject key identifier: D1:2A:E5:4F:AC:D9:28:A8:7F:D9:79:B9:28:6A:C7:FD:D7:CE:3A:AD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E937
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4EAAB9A43A7511EDAE523F29C4F9AE02.roa
Signing time: Sun 31 May 2026 17:34:13 +0000
ROA not before: Sun 31 May 2026 17:34:13 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 150083
IP address blocks: 103.140.46.0/23 maxlen: 24
2001:df1:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59703 (0xe937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:34:13 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7115-c50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:eb:06:48:d9:3a:94:a2:d4:ff:ff:bf:33:f5:
2a:c3:34:b2:83:10:10:c1:f1:9c:9e:f7:f3:c1:4c:
39:90:c9:13:5b:6d:84:77:b4:d3:f6:4e:3b:46:f3:
5a:e1:8d:86:cc:f4:08:59:d3:d4:26:a4:39:ba:37:
5f:00:53:0b:90:7f:c9:3e:fd:f5:96:0f:8d:39:19:
d3:fd:12:34:2b:18:ab:28:07:7e:d0:de:24:35:1a:
da:45:39:48:d5:8e:a4:0b:c1:73:ba:eb:db:e6:8a:
8f:7b:fe:48:19:3a:8a:15:39:21:ed:01:e3:5f:e3:
0b:93:3f:38:fe:6a:7c:59:23:21:96:cc:bc:a1:b5:
43:1b:84:cd:13:64:e4:bf:ea:a5:28:17:34:1c:2f:
84:a3:72:b2:ff:72:a2:89:4c:16:d3:da:99:df:4c:
5f:3c:31:9c:8c:14:2e:05:2e:10:7e:84:1c:ee:1e:
11:16:57:94:c0:cf:2e:6f:a9:23:47:b3:1f:61:dc:
e9:df:84:85:e6:17:a6:d1:e4:73:03:1f:6d:0a:7f:
a2:37:a1:14:e3:85:93:f6:09:13:3a:24:7d:f3:6f:
3c:38:78:1c:e8:f9:ed:c9:84:1c:b9:bb:f1:ed:46:
87:c7:ca:14:9a:70:b4:95:ae:95:75:38:b4:27:a3:
70:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2A:E5:4F:AC:D9:28:A8:7F:D9:79:B9:28:6A:C7:FD:D7:CE:3A:AD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4EAAB9A43A7511EDAE523F29C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.46.0/23
IPv6:
2001:df1:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
95:b1:67:f0:28:fd:b4:e7:f4:5b:3d:7d:c0:69:98:cf:9f:67:
67:10:aa:01:fe:f9:89:d7:62:16:7c:87:b9:ec:2e:33:5b:2c:
4e:9e:2f:09:af:64:03:58:b5:f5:3a:d6:25:55:c1:06:53:dd:
27:6c:ba:86:1a:38:a9:42:65:22:22:af:69:11:85:e2:9b:5c:
57:cd:4c:12:d6:06:f4:6b:b3:14:bf:22:5a:b1:fa:55:42:1e:
bc:a4:1f:e1:09:5b:50:95:bc:f8:c8:17:eb:c5:fa:d7:da:1c:
72:88:93:c5:09:78:69:af:3e:9a:f9:db:81:e6:62:61:2a:16:
c3:bd:2e:70:50:84:dd:f4:d7:0b:f5:e6:0c:31:f1:1f:17:19:
d2:b4:df:3b:af:fa:6d:00:7f:25:88:11:89:06:c5:3e:36:fd:
c1:d6:fe:99:02:50:56:a8:cc:93:24:99:42:1b:27:6e:27:3a:
c1:c4:ff:8f:8c:32:d2:fb:e4:0a:12:84:42:66:f2:c9:a0:ec:
8c:4e:56:81:42:d7:36:93:e5:85:98:26:ec:f8:c2:12:8f:08:
84:1a:d5:00:0b:e5:43:5c:f6:4b:0c:52:fd:86:fb:ce:50:5d:
2d:ab:89:da:68:25:2d:a8:ca:84:16:9c:fc:fc:7c:07:ce:09:
d8:45:fc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:05 2026 by rpki-client