
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5AD9257E4CED11ECA4A0C857C4F9AE02.roa
File: 5AD9257E4CED11ECA4A0C857C4F9AE02.roa (raw, json)
Hash identifier: HFfgsJsE0IHKk56zHDPD3He9dEnf34n77NPlET85a80=
Subject key identifier: 4C:A0:91:AA:F6:63:20:4A:28:76:CF:86:F7:CF:9D:67:F0:5C:15:8F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E83E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5AD9257E4CED11ECA4A0C857C4F9AE02.roa
Signing time: Sun 31 May 2026 17:25:42 +0000
ROA not before: Sun 31 May 2026 17:25:42 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 147241
IP address blocks: 103.176.158.0/23 maxlen: 24
2001:df2:cc40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59454 (0xe83e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:25:42 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6f16-9360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:7d:66:b7:50:1b:ef:88:b3:c6:9b:8a:b9:
66:6c:10:c3:00:86:29:44:25:ee:e3:c3:1d:b6:7d:
48:a0:36:52:09:d9:8e:84:e7:05:7f:ed:a7:0d:80:
90:42:32:f0:78:fb:c8:2b:3e:88:31:e2:66:f5:c8:
49:0e:bc:af:fd:7e:93:34:82:e6:e0:c8:1b:e0:b7:
0e:d3:b8:cc:e6:6c:10:10:24:65:e8:31:fd:06:55:
fe:d9:d6:76:cf:c7:fe:97:e6:c3:00:81:3b:e7:37:
5c:bf:32:df:b9:a4:bb:b1:05:a5:54:e1:fa:89:2b:
e9:7c:14:a4:5e:b6:90:81:7f:24:41:98:29:79:b9:
4b:d1:a1:a7:e1:c5:db:c3:f3:1d:78:12:9d:86:a9:
14:09:d9:44:a1:29:46:ad:a3:a8:a5:9a:80:d7:fd:
28:42:fa:a0:58:ab:70:46:52:20:32:a7:06:8e:bb:
46:c6:d4:b0:63:72:2a:72:bb:20:56:ae:15:2e:fe:
1d:4b:8e:4f:f3:ca:65:17:5d:8f:70:8a:56:ce:bd:
79:e5:73:07:d7:2a:1e:f0:39:08:c0:89:18:fe:29:
40:16:33:1a:20:66:2b:4b:d4:22:89:61:02:dd:9c:
d2:69:f6:24:a3:50:5e:c7:be:52:4d:2c:71:8a:ca:
e8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A0:91:AA:F6:63:20:4A:28:76:CF:86:F7:CF:9D:67:F0:5C:15:8F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5AD9257E4CED11ECA4A0C857C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.176.158.0/23
IPv6:
2001:df2:cc40::/48
Signature Algorithm: sha256WithRSAEncryption
14:b5:e0:dd:e1:50:13:84:52:94:49:a6:df:10:c2:33:82:cd:
31:b6:47:0b:50:99:e1:18:d0:43:5a:85:7f:5e:6a:9e:66:7c:
6f:f6:0e:6a:63:ff:ec:c0:1d:24:84:5d:56:0f:c8:e9:fa:59:
9a:53:da:21:e4:1f:64:7d:7d:ac:71:c3:8b:a7:e8:fb:b6:37:
15:d3:17:a3:60:30:42:cf:43:02:a7:b9:82:bf:e9:98:39:93:
34:dd:ac:1d:e6:5f:98:f7:11:af:34:35:40:86:a9:11:9a:7c:
38:d5:1f:63:49:87:b5:02:9d:73:37:9f:f7:7c:50:a2:57:23:
70:27:e4:f4:60:d6:4e:84:5d:4b:1f:9a:e7:70:e0:de:72:aa:
84:da:e9:71:6f:a7:cc:3b:64:08:d0:57:ba:f7:cc:43:99:a7:
54:34:8e:25:ae:23:d2:7a:57:e6:4c:76:9e:ee:20:b9:10:b3:
ab:61:62:76:39:1c:e1:f3:f6:97:4d:ce:eb:21:1c:2a:80:bf:
d9:54:dc:53:2f:a4:58:0d:cf:08:d7:5c:62:81:68:36:0e:3f:
ca:b5:04:10:1b:77:8e:97:1b:b4:25:47:e9:c0:37:80:31:a3:
3b:1c:1c:48:3b:de:91:91:96:14:cd:ac:9b:5f:14:f4:e9:c4:
55:dc:72:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:18 2026 by rpki-client