
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52CBFE6E203011F0AB440319C4F9AE02.roa
File: 52CBFE6E203011F0AB440319C4F9AE02.roa (raw, json)
Hash identifier: Uxtc8WfDw/Hx5+4zzUI54bhshrMMhfn1Z67I2bUtHnY=
Subject key identifier: 83:81:59:7E:F1:39:ED:42:A0:16:7C:C5:19:92:8F:B7:05:B7:6D:CC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E683
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52CBFE6E203011F0AB440319C4F9AE02.roa
Signing time: Sun 31 May 2026 17:11:16 +0000
ROA not before: Sun 31 May 2026 17:11:16 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 140148
IP address blocks: 103.155.54.0/24 maxlen: 24
103.159.90.0/24 maxlen: 24
2001:df2:3240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59011 (0xe683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:11:16 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6bb3-d7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:19:17:1f:59:a9:e6:f0:7f:9a:56:3c:c5:
72:99:34:5f:72:82:94:b8:17:da:58:8f:01:c5:a2:
58:74:b9:1c:f8:af:d5:62:9a:61:2d:11:80:96:df:
22:c3:7b:c2:ad:3a:3b:b9:41:5f:e3:be:ea:19:17:
4d:49:af:0f:0f:07:fe:29:9d:1c:12:ce:2e:94:bf:
c1:0a:bc:77:08:c6:39:7f:3a:59:4f:46:98:1e:2a:
a5:f7:63:5a:fe:cf:2c:6e:57:d3:b5:0b:f9:09:1d:
be:59:f6:f8:fb:7e:9a:e4:38:18:2d:37:98:e3:2d:
dc:2b:d7:be:7c:1b:f1:d4:9b:e3:18:24:46:98:f6:
5c:5a:de:30:38:d2:b3:56:15:ac:9d:76:22:7a:7e:
26:b0:24:e1:1d:87:ff:0f:2d:5d:7b:f7:75:f0:03:
b8:e0:62:03:c0:5f:93:ab:6d:4b:f0:50:ed:7e:fb:
1d:90:e5:70:bc:d3:c7:44:e8:7e:f1:13:ff:b6:2a:
10:ae:fd:f5:9b:01:93:5d:13:1b:59:06:48:16:34:
9f:4e:e4:a5:15:d3:78:b4:01:00:cf:07:13:dc:de:
30:f3:ba:c2:59:65:4f:f7:ae:d2:59:8b:54:aa:b2:
2c:b2:dd:4d:65:7a:38:7f:0f:fa:18:8c:55:c0:ed:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:81:59:7E:F1:39:ED:42:A0:16:7C:C5:19:92:8F:B7:05:B7:6D:CC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52CBFE6E203011F0AB440319C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.54.0/24
103.159.90.0/24
IPv6:
2001:df2:3240::/48
Signature Algorithm: sha256WithRSAEncryption
6b:a6:6a:b4:6e:a2:94:17:79:95:f9:31:e4:ce:cd:4a:bd:38:
9c:2d:2f:b7:21:ae:55:b3:29:28:72:5d:c6:d3:49:2a:0e:06:
25:ee:31:8b:bf:95:90:1f:9c:33:d5:4d:09:5f:0b:ef:3c:74:
21:28:fb:7c:2a:a5:d9:ad:40:21:bc:0c:23:3f:b9:c1:37:06:
fd:2b:25:03:4f:c0:4e:7c:0c:67:f2:cc:ae:3b:60:3f:53:c1:
77:b4:23:fb:3a:a6:39:78:c1:85:90:49:23:b5:93:50:08:36:
e8:c4:08:40:0e:d3:1c:5d:3d:40:ce:20:ca:03:17:16:62:a1:
fb:ae:de:43:86:26:f0:b0:f1:bf:4c:41:12:8e:3d:36:d9:c6:
51:a4:da:35:3a:36:5c:18:96:eb:4e:30:5d:38:6b:78:22:91:
cf:1e:07:c3:37:6b:22:82:27:fd:27:a1:8a:a1:c0:19:f7:f4:
04:92:97:b7:36:fe:95:bb:1b:0a:ef:a7:7e:52:97:12:d0:50:
8b:70:31:27:6e:03:d5:fe:e0:e0:6c:90:94:21:6b:8e:56:b1:
0d:e8:3c:f5:82:59:68:81:d9:89:7e:85:98:d7:16:e3:f4:03:
bd:94:67:ac:85:f8:33:e7:e9:d0:cc:f0:6d:39:fa:0a:d1:3a:
7b:a8:91:91
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIDAOaDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MTExNloXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZiYjMtZDdjZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALArGRcfWanm8H+aVjzFcpk0X3KClLgX2liPAcWiWHS5HPiv1WKaYS0RgJbf
IsN7wq06O7lBX+O+6hkXTUmvDw8H/imdHBLOLpS/wQq8dwjGOX86WU9GmB4qpfdj
Wv7PLG5X07UL+Qkdvln2+Pt+muQ4GC03mOMt3CvXvnwb8dSb4xgkRpj2XFreMDjS
s1YVrJ12Inp+JrAk4R2H/w8tXXv3dfADuOBiA8Bfk6ttS/BQ7X77HZDlcLzTx0To
fvET/7YqEK799ZsBk10TG1kGSBY0n07kpRXTeLQBAM8HE9zeMPO6wlllT/eu0lmL
VKqyLLLdTWV6OH8P+hiMVcDtyg8CAwEAAaOCAncwggJzMB0GA1UdDgQWBBSDgVl+
8TntQqAWfMUZko+3BbdtzDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzUyQ0JGRTZF
MjAzMDExRjBBQjQ0MDMxOUM0RjlBRTAyLnJvYTA2BggrBgEFBQcBBwEB/wQnMCUw
EgQCAAEwDAMEAGebNgMEAGefWjAPBAIAAjAJAwcAIAEN8jJAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrpmq0bqKUF3mV+THkzs1KvTicLS+3Ia5Vsykocl3G00kqDgYl7jGL
v5WQH5wz1U0JXwvvPHQhKPt8KqXZrUAhvAwjP7nBNwb9KyUDT8BOfAxn8syuO2A/
U8F3tCP7OqY5eMGFkEkjtZNQCDboxAhADtMcXT1AziDKAxcWYqH7rt5DhibwsPG/
TEESjj022cZRpNo1OjZcGJbrTjBdOGt4IpHPHgfDN2sigif9J6GKocAZ9/QEkpe3
Nv6VuxsK76d+UpcS0FCLcDEnbgPV/uDgbJCUIWuOVrEN6Dz1gllogdmJfoWY1xbj
9AO9lGeshfgz5+nQzPBtOfoK0Tp7qJGR
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:51 2026 by rpki-client