
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52CBFE6E203011F0AB440319C4F9AE02.roa
File: 52CBFE6E203011F0AB440319C4F9AE02.roa (raw, json)
Hash identifier: HSuVqcyukh5I9EA+U5JWNQQ+DaZx2EOP1/qkrdaG6Xc=
Subject key identifier: A3:EE:76:09:57:B2:2A:E1:2E:3C:27:64:63:4E:09:54:9F:EE:D2:3C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F2A0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52CBFE6E203011F0AB440319C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:09:34 +0000
ROA not before: Mon 06 Jul 2026 17:09:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140148
IP address blocks: 103.155.54.0/24 maxlen: 24
103.159.90.0/24 maxlen: 24
2001:df2:3240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62112 (0xf2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:09:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be14e-f169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:97:ec:fe:08:4e:60:48:ff:ea:99:6f:b0:
a3:e5:ba:91:ee:08:b0:c2:b4:82:64:39:c3:06:b7:
c9:02:1b:15:51:9a:15:d5:48:8f:d3:8f:66:55:c3:
08:b5:eb:4a:db:a5:f7:8a:33:d6:7a:81:ff:b2:22:
16:86:d1:91:92:aa:e2:a2:7e:f1:50:23:25:9d:41:
38:f4:2a:83:37:0f:cb:a7:9a:47:25:39:3b:3b:a7:
0c:13:bc:ac:4f:1a:b8:2d:1e:92:c2:7f:16:09:53:
dd:c2:55:d4:d4:06:ae:1d:3b:d6:5e:1e:55:99:b4:
cf:69:6a:a6:26:4c:b2:64:a1:9a:35:ea:68:99:14:
b5:8b:c6:0e:43:57:a1:71:75:48:9b:6c:c2:c0:ef:
e7:a6:1f:09:aa:30:e0:6b:cf:ee:d1:aa:fb:a1:46:
f3:48:9d:ac:a8:8c:ee:bf:67:5c:2f:75:f6:3b:f5:
e2:b3:93:45:a1:6a:c9:17:58:86:c6:06:25:3c:4f:
18:b7:4d:b2:52:05:81:ed:cf:99:ff:ce:2f:a3:d1:
a1:59:be:bc:b0:77:3c:d4:8c:34:7e:7a:46:4c:5c:
3a:f0:e1:50:ab:bd:10:50:c8:67:24:d3:c4:c2:77:
3f:79:07:5a:c2:36:3f:4f:35:9c:12:ff:6e:6c:46:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EE:76:09:57:B2:2A:E1:2E:3C:27:64:63:4E:09:54:9F:EE:D2:3C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52CBFE6E203011F0AB440319C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.54.0/24
103.159.90.0/24
IPv6:
2001:df2:3240::/48
Signature Algorithm: sha256WithRSAEncryption
92:66:5e:97:89:ed:50:3b:a7:c2:96:cd:a9:42:21:87:b9:3a:
81:41:8e:7a:d9:1b:67:d4:7a:e6:01:7f:e2:69:d2:45:30:21:
af:51:14:d0:42:bf:04:e8:ea:54:ea:95:d6:7a:0e:ff:74:94:
d5:75:dd:59:a0:a8:01:af:a6:5f:91:d0:3a:0c:38:ea:5f:55:
30:7f:4e:8f:af:b0:10:07:33:20:08:12:89:91:17:3a:08:c9:
eb:fa:21:bd:aa:df:a6:4a:f9:2b:36:d8:ad:bc:19:64:84:09:
23:82:2f:98:08:1c:bd:08:9d:95:0a:0c:c4:03:01:f6:92:49:
0a:78:ca:9f:80:bd:20:70:7e:f4:0a:e5:61:c0:36:9a:fb:0e:
9f:20:12:77:6c:fa:fe:00:a2:b2:8e:bc:4c:7c:f7:66:39:d6:
85:6f:50:0b:80:76:6a:b1:47:b6:dd:94:06:fe:0d:0d:d4:1d:
a1:19:16:a9:d4:fe:4f:46:6b:93:20:7d:d9:04:b1:9e:a6:1d:
33:b6:58:bf:c0:7d:00:de:69:2d:d2:5e:ff:cd:69:4c:ec:43:
c9:16:ed:3d:d1:5f:54:6f:a7:c6:97:69:12:d6:c9:11:4a:7e:
56:46:4a:67:b6:48:e2:58:6f:83:f1:9e:1e:52:4d:49:82:37:
ff:d5:32:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:38:46 2026 by rpki-client