
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F583B02BDCF11EA8755D90DC4F9AE02.roa
File: 5F583B02BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier: at9KSODIa4tVD2nzummldjn7VXa9S50Zu8mJTYnsiAQ=
Subject key identifier: A7:4A:4D:CE:5A:10:D0:70:15:94:4B:BE:95:AB:79:6C:E4:2A:54:89
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E5F9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F583B02BDCF11EA8755D90DC4F9AE02.roa
Signing time: Sun 31 May 2026 17:06:31 +0000
ROA not before: Sun 31 May 2026 17:06:31 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 138752
IP address blocks: 103.138.0.0/23 maxlen: 24
2402:11e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58873 (0xe5f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:06:31 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6a97-9292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e4:51:46:d0:ed:a7:82:37:08:22:16:17:12:
52:87:54:8c:65:0d:f0:5d:9d:f2:c3:df:6e:76:83:
7d:d5:84:08:e4:f5:56:44:11:0d:47:77:80:1b:3f:
2d:5b:8f:7b:17:3c:cb:01:cd:06:7c:f0:77:78:72:
c3:79:4f:81:4e:5a:de:d2:1c:d3:25:fc:77:d5:c4:
d1:f6:3d:81:ac:fc:ae:7d:b0:7c:c9:b2:98:49:88:
a2:51:b4:ca:36:1e:63:9e:86:b3:bf:7f:ca:cf:d7:
da:ed:79:45:5e:63:4a:f8:f0:ad:fb:4d:9d:27:73:
38:68:3a:48:59:9b:29:40:60:a2:c8:45:f4:62:39:
b1:8a:5e:d5:f7:be:29:bb:01:13:e1:63:3b:b2:bf:
0b:37:98:c9:d0:6e:19:8b:76:db:13:67:16:d1:5e:
e4:21:4d:39:bf:73:42:eb:96:40:0f:0a:05:10:af:
92:6c:02:8b:41:48:a8:22:8b:db:66:4c:65:a6:2e:
fe:60:90:76:b7:fe:c9:c2:81:d1:39:79:68:fa:e4:
70:64:33:f0:eb:f1:42:7f:b1:0a:da:b3:d7:90:3b:
27:b9:f6:ef:00:d8:a5:df:4a:8a:5d:6a:24:26:3c:
32:ea:78:19:17:a8:04:cb:e3:cd:eb:9f:40:de:3c:
52:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4A:4D:CE:5A:10:D0:70:15:94:4B:BE:95:AB:79:6C:E4:2A:54:89
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5F583B02BDCF11EA8755D90DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.0.0/23
IPv6:
2402:11e0::/32
Signature Algorithm: sha256WithRSAEncryption
92:79:15:0c:d8:ec:ee:ba:a7:2f:4c:ee:2a:62:76:2c:b2:5a:
ca:d6:6c:f0:17:3c:03:41:f6:b0:9e:43:1e:12:bd:cb:e5:38:
08:5e:dd:f2:46:0f:f8:96:22:2a:b5:29:fc:37:4a:d4:6e:2a:
30:65:23:41:cb:9f:7e:87:9b:88:c3:bc:b2:cb:0d:4b:d4:4c:
69:8c:6a:3a:92:88:b3:f3:74:b6:02:6c:30:cf:d9:19:f2:25:
73:96:2b:6a:16:f3:fa:ea:e0:e6:7f:da:3b:96:40:dc:a5:6f:
40:ec:a6:20:50:bf:d4:0d:4c:c5:a0:3f:f3:88:21:dc:5d:e8:
d9:88:b2:51:3c:eb:e4:0d:cb:a4:ea:3f:3c:33:52:dc:38:ea:
a2:49:5a:f2:19:2c:f4:24:a2:26:9e:54:5e:bf:9d:cd:58:d6:
97:d3:64:53:b5:64:43:96:16:28:53:c8:52:a6:5f:64:b8:b2:
93:01:22:61:e4:70:c6:06:15:ef:4a:44:e4:ac:a6:1a:6c:ad:
7d:5a:e3:49:d2:a2:25:a7:03:d8:b9:5c:3c:27:03:5e:e4:98:
1c:4b:b3:aa:08:d6:b1:02:b5:f2:73:d7:91:18:7f:68:37:81:
d6:94:4a:44:3a:89:11:2b:38:47:bf:00:11:cc:c9:e2:57:24:
21:11:ee:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:51 2026 by rpki-client