
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F25872CE53C11EB9E429C44C4F9AE02.roa
File: 4F25872CE53C11EB9E429C44C4F9AE02.roa (raw, json)
Hash identifier: 2MIKG/Imm+3Wioty/CAaQcLkOxCDSPPPQ7vNbgh+GXg=
Subject key identifier: 59:CD:2F:56:A9:40:7B:EA:05:F6:9D:74:A9:49:9F:85:3C:8B:DC:1E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E703
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F25872CE53C11EB9E429C44C4F9AE02.roa
Signing time: Sun 31 May 2026 17:15:20 +0000
ROA not before: Sun 31 May 2026 17:15:20 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 141494
IP address blocks: 103.161.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59139 (0xe703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:15:20 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6ca8-150f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:48:c2:47:01:c9:f9:d0:72:54:69:21:39:
7d:cc:e2:9c:8f:b1:1f:89:74:27:ff:2a:c7:57:e5:
15:63:81:19:87:48:33:b9:c2:ea:15:43:e3:6c:44:
1a:c5:8c:36:72:55:54:88:38:1c:1f:a6:e7:68:65:
66:60:72:35:4b:9b:95:84:bd:f3:5b:8f:11:1f:e8:
57:bb:e3:67:49:50:57:0c:f3:c8:ae:07:55:5d:1b:
7d:bc:20:18:c9:6f:a2:7d:9e:f7:26:14:61:ba:28:
b9:c4:0e:9f:3c:1f:3d:e7:74:da:ff:79:e9:1a:b0:
69:28:bc:7a:1a:1a:fb:38:2e:6b:03:e6:f7:01:1d:
fe:fc:96:1d:32:47:9d:f1:1d:26:db:ea:e5:b0:df:
73:a1:81:81:a2:7c:12:53:5c:c8:2c:47:1f:75:c9:
69:44:f3:29:2a:72:b8:9a:a8:e9:26:8c:0f:1d:be:
a2:32:9e:fd:c5:33:8d:54:7d:06:fe:af:76:7c:62:
32:d5:fa:b0:71:b5:79:d7:84:7e:83:18:91:41:3f:
fd:90:57:a7:f6:a9:a1:39:a3:d3:0f:d1:6c:79:3b:
fa:e9:3e:e6:4e:4d:2d:6e:d4:40:1e:21:0e:f6:5e:
9f:f9:cb:09:e7:c5:fc:3f:ac:6d:3e:aa:41:51:ab:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CD:2F:56:A9:40:7B:EA:05:F6:9D:74:A9:49:9F:85:3C:8B:DC:1E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F25872CE53C11EB9E429C44C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.161.186.0/23
Signature Algorithm: sha256WithRSAEncryption
af:6f:5e:7b:a6:ba:28:8e:19:b8:bc:e5:73:bc:f8:98:b9:83:
67:5c:23:00:0e:71:4c:40:a0:ec:cc:1a:09:0a:e9:07:43:8e:
20:2a:38:b0:4d:59:50:3c:34:ec:b4:7c:38:04:da:1e:a5:c5:
5c:dc:48:1b:51:6f:33:27:6b:cb:47:01:13:86:ef:55:b4:e7:
25:21:74:7e:f4:fc:c2:69:8e:d9:eb:3b:f4:38:a2:35:30:00:
cb:5e:c6:38:80:ca:f9:73:3b:4d:31:2e:6b:8b:bc:76:4f:11:
96:d5:e0:02:e0:64:41:14:0f:69:6f:64:8d:84:ad:c5:6f:27:
f4:ce:e9:84:90:0f:e6:a2:51:4c:d9:e8:c7:5c:3e:ea:c1:03:
49:b6:eb:59:5b:75:14:61:5c:5c:a1:a7:cb:25:d3:8a:ca:fc:
1d:c5:27:e6:56:50:c9:0f:2c:9a:88:38:79:1a:b9:3d:bb:b8:
37:13:ae:f4:1d:78:25:f9:40:a3:51:2c:b9:27:72:ec:69:68:
3a:dd:8d:26:42:d2:54:a4:d6:10:c6:05:18:73:b0:6c:38:01:
f3:e9:86:4a:58:4d:9e:f3:d7:67:dc:96:07:05:8d:a2:ce:91:
58:f7:4f:68:2b:67:7e:7a:fc:af:68:c5:2b:56:cb:4f:3d:f3:
05:42:39:bd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOcDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MTUyMFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZjYTgtMTUwZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMheSMJHAcn50HJUaSE5fczinI+xH4l0J/8qx1flFWOBGYdIM7nC6hVD42xE
GsWMNnJVVIg4HB+m52hlZmByNUublYS981uPER/oV7vjZ0lQVwzzyK4HVV0bfbwg
GMlvon2e9yYUYbooucQOnzwfPed02v956RqwaSi8ehoa+zguawPm9wEd/vyWHTJH
nfEdJtvq5bDfc6GBgaJ8ElNcyCxHH3XJaUTzKSpyuJqo6SaMDx2+ojKe/cUzjVR9
Bv6vdnxiMtX6sHG1edeEfoMYkUE//ZBXp/apoTmj0w/RbHk7+uk+5k5NLW7UQB4h
DvZen/nLCefF/D+sbT6qQVGrazkCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRZzS9W
qUB76gX2nXSpSZ+FPIvcHjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRGMjU4NzJD
RTUzQzExRUI5RTQyOUM0NEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWehujANBgkqhkiG9w0BAQsFAAOCAQEAr29ee6a6KI4ZuLzlc7z4
mLmDZ1wjAA5xTECg7MwaCQrpB0OOICo4sE1ZUDw07LR8OATaHqXFXNxIG1FvMydr
y0cBE4bvVbTnJSF0fvT8wmmO2es79DiiNTAAy17GOIDK+XM7TTEua4u8dk8RltXg
AuBkQRQPaW9kjYStxW8n9M7phJAP5qJRTNnox1w+6sEDSbbrWVt1FGFcXKGnyyXT
isr8HcUn5lZQyQ8smog4eRq5Pbu4NxOu9B14JflAo1EsuSdy7GloOt2NJkLSVKTW
EMYFGHOwbDgB8+mGSlhNnvPXZ9yWBwWNos6RWPdPaCtnfnr8r2jFK1bLTz3zBUI5
vQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:59 2026 by rpki-client