
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/614A9704FA6C11EB8BD15366C4F9AE02.roa
File: 614A9704FA6C11EB8BD15366C4F9AE02.roa (raw, json)
Hash identifier: BKBRbllD4/xijFyqhFfEGmYR3oKN3ypGrJJN0MHncvs=
Subject key identifier: 84:9F:46:03:59:21:E7:70:38:87:AF:82:2A:5E:C3:7C:FF:5B:66:05
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E25C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/614A9704FA6C11EB8BD15366C4F9AE02.roa
Signing time: Sun 31 May 2026 16:36:35 +0000
ROA not before: Sun 31 May 2026 16:36:35 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133273
IP address blocks: 103.36.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57948 (0xe25c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:36:35 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6392-3bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:30:9d:1e:95:bc:42:16:e1:49:bd:4d:40:
44:48:2b:ac:30:24:52:0f:1c:7b:3a:f8:ae:72:db:
39:86:62:44:d6:5b:4c:9f:ef:65:5d:28:65:b0:f4:
3a:cf:b8:33:b5:c4:2f:23:d5:74:d6:3c:45:b1:a0:
82:bb:75:80:73:dc:4a:6c:b0:c6:cd:3d:84:7a:e2:
8a:98:14:f0:78:9b:fa:ed:a9:8a:94:bb:e1:2b:54:
93:e7:6a:85:e7:97:fe:18:04:38:65:af:6b:5d:6f:
b4:1a:8c:70:d0:9b:b0:8d:c2:f7:e9:79:00:2c:93:
14:0c:d9:c9:c8:79:79:88:6f:24:20:cd:b7:a2:14:
57:b0:70:3c:72:60:9b:46:4e:46:be:77:d7:f3:2b:
f9:78:fc:f5:f0:7b:3b:59:5f:68:c8:0c:b1:bb:19:
35:6a:de:82:23:e0:f9:1d:ce:44:6c:17:b5:25:c5:
aa:c5:dc:00:2f:4c:aa:07:85:eb:2e:b6:99:e5:85:
e6:d6:90:12:dd:41:80:14:2d:87:20:1b:de:26:5c:
4b:e2:a0:41:8e:86:d4:be:5e:5c:e1:12:8f:8e:19:
3d:dd:e2:3d:00:00:33:2b:f5:47:8f:ed:c1:c0:f3:
31:95:53:bb:23:64:0a:8f:bb:f5:34:e8:29:74:64:
77:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9F:46:03:59:21:E7:70:38:87:AF:82:2A:5E:C3:7C:FF:5B:66:05
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/614A9704FA6C11EB8BD15366C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.36.84.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:0e:48:58:9f:29:74:de:f0:02:48:1a:3a:ba:5d:e1:72:89:
95:cc:57:07:b9:c2:ab:8f:d1:d9:ff:80:44:62:50:4b:96:01:
eb:b7:03:f8:72:ee:79:5b:13:63:5b:9d:f6:cd:67:97:7b:2b:
c9:05:53:93:6b:11:7a:53:af:87:c1:54:a2:37:e1:91:28:e6:
fa:de:93:d6:4b:9e:ca:48:3c:63:8e:62:e5:e4:1d:24:12:3c:
25:54:b8:e7:13:87:c1:81:89:dd:3b:03:4a:83:27:48:f5:13:
1f:d2:f9:d2:c2:18:20:d1:f2:ca:ee:59:e6:5b:9a:d5:3a:73:
61:26:63:dc:74:0b:26:db:06:43:d2:69:0f:9b:23:fa:fc:ba:
3a:7f:be:c2:6c:ee:53:cc:18:85:24:77:1c:76:6a:35:0a:e0:
06:5b:54:09:43:a0:53:21:d5:fd:49:ee:dd:f6:25:ea:7d:e8:
c5:00:d0:a7:e8:af:e3:8e:50:11:a0:63:7c:aa:6d:18:1b:cc:
e8:9c:ef:a9:be:09:07:ca:c3:bd:35:81:d4:87:33:35:57:27:
c1:11:db:92:14:a5:9b:69:b0:32:ea:c3:17:13:0f:30:4c:4f:
4a:25:c9:d6:ed:2d:aa:04:29:82:e7:20:5a:c0:ca:5f:4b:29:
b2:2f:eb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:36 2026 by rpki-client