
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E0A27806B4D11EF95FA2527C4F9AE02.roa
File: 5E0A27806B4D11EF95FA2527C4F9AE02.roa (raw, json)
Hash identifier: /BKyPThA0cXX8erugv8UrTc+TEYKQfb+6CINqcDWkco=
Subject key identifier: E0:F3:04:6D:7B:3E:72:39:7F:A8:7F:BD:CF:1C:B5:33:27:69:A2:2C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E242
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E0A27806B4D11EF95FA2527C4F9AE02.roa
Signing time: Sun 31 May 2026 16:35:45 +0000
ROA not before: Sun 31 May 2026 16:35:45 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133236
IP address blocks: 103.87.89.0/24 maxlen: 24
103.87.120.0/24 maxlen: 24
103.87.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57922 (0xe242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:35:45 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6361-f0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6a:a7:8f:33:a6:90:ab:4f:d6:25:be:f2:5f:
29:d5:3a:1a:f9:6e:32:d6:26:ee:dc:2c:2c:74:1e:
95:16:4c:60:cd:9a:e3:12:af:02:ce:c0:8b:49:a4:
20:5a:5c:cc:96:ac:de:98:43:bc:ab:0d:cb:c5:fb:
36:2c:d2:ac:11:6b:c6:74:c9:de:a8:88:cf:11:b8:
66:60:be:af:6a:32:dc:61:ec:26:ec:e0:54:ab:92:
52:60:66:49:b4:22:ad:d2:a3:f5:82:ad:48:b9:fe:
d7:8d:11:e3:88:f3:20:bc:d5:03:72:1a:b7:d9:09:
3d:b6:dc:e3:06:c2:67:a0:b9:b3:c5:1b:cc:31:a1:
1c:2a:28:22:b1:f1:01:0d:ac:2c:a4:a8:a3:05:ad:
f2:f7:ea:d1:61:9a:43:d8:bb:1a:09:13:ff:2e:44:
a5:f5:f7:ef:b9:3a:51:07:c1:95:2e:44:bc:3b:4e:
df:a3:38:00:71:42:d5:77:98:50:0d:37:23:3a:0c:
1c:1f:5f:0a:d0:66:52:5f:7a:6e:8d:4d:15:87:74:
81:43:0e:25:f0:68:7f:b7:4e:5d:40:46:99:51:ac:
e6:95:e2:62:54:c7:c5:1a:c5:f4:0e:7c:fe:56:64:
bc:79:07:cb:50:23:93:5f:0a:c7:67:56:de:6b:19:
de:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F3:04:6D:7B:3E:72:39:7F:A8:7F:BD:CF:1C:B5:33:27:69:A2:2C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E0A27806B4D11EF95FA2527C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.87.89.0/24
103.87.120.0/24
103.87.122.0/23
Signature Algorithm: sha256WithRSAEncryption
05:a8:eb:0c:59:7c:8e:ad:a1:30:31:f2:87:1f:c8:bf:59:ae:
ba:20:b0:ab:ed:9b:8b:a3:96:be:66:cf:3a:eb:ab:d0:41:99:
9a:0d:05:48:6f:bb:fb:db:40:c9:72:7d:c0:9d:78:3b:09:1d:
d4:01:35:78:45:c6:a5:d4:c8:a0:85:1d:e1:9e:7a:ca:b4:10:
d3:8f:a9:ab:d1:94:a8:71:59:56:99:fa:a8:a5:aa:70:ba:cf:
70:20:53:0f:6b:3e:f1:cf:ba:4e:8e:0f:9b:6d:b5:d9:45:bb:
03:42:a2:f0:62:e7:6a:51:4b:80:18:32:fd:9b:94:4f:11:01:
d3:40:4f:ba:79:54:7a:43:22:64:b6:25:39:f9:77:0c:b0:e5:
c6:fe:e8:d8:d3:81:0d:ac:32:70:a6:c9:11:01:95:ed:bf:aa:
93:dc:0c:a9:40:1c:0e:0f:cf:32:17:89:06:e4:8f:f7:81:69:
24:33:20:44:47:f7:2d:63:65:0e:0f:74:36:93:48:6c:f5:fb:
df:ee:19:b4:83:54:ba:84:dd:3a:3f:fc:60:6d:0a:16:c0:cb:
4b:1e:b5:a4:52:98:4c:b5:6c:13:cd:e6:8e:00:de:57:ce:f9:
00:d4:71:20:df:e4:44:29:2d:d7:9e:84:79:b4:c3:78:03:1c:
6f:cc:f1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:20 2026 by rpki-client