
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/64F32F5481AB11F0924A1781C4F9AE02.roa
File: 64F32F5481AB11F0924A1781C4F9AE02.roa (raw, json)
Hash identifier: Si1jgrhRQLhxIiuaCDRz5Pzwz1x6HINBTjRUrrmcRgI=
Subject key identifier: FA:06:74:54:01:6A:DA:E0:BB:F6:DB:D5:D0:87:73:C6:FB:16:DF:73
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E8C1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/64F32F5481AB11F0924A1781C4F9AE02.roa
Signing time: Sun 31 May 2026 17:30:03 +0000
ROA not before: Sun 31 May 2026 17:30:03 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 149547
IP address blocks: 103.124.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59585 (0xe8c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:30:03 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c701b-89d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:a6:9a:27:54:4b:f4:67:58:f0:09:6f:c2:
d6:7c:aa:84:4d:06:23:a7:2c:cd:cc:75:1b:a2:79:
fb:08:1f:bd:68:d5:11:c6:2b:9f:17:19:a9:86:46:
d5:97:92:45:ce:3f:e3:16:d3:1f:d1:a8:0b:a8:bb:
7c:a8:91:34:56:37:e7:b1:16:1f:93:cd:63:45:6b:
25:8e:e9:96:05:9e:50:c6:36:25:9d:8a:b0:ab:a9:
48:eb:76:22:53:d2:3e:b3:10:34:0e:54:4a:87:0e:
ef:5a:f0:e4:2b:98:91:1b:b3:3b:a7:81:73:7f:9c:
a0:ea:72:88:3c:02:b3:7f:4b:80:b6:86:a8:6a:10:
a9:06:2c:bd:6f:a5:19:76:41:cf:11:9e:aa:15:6a:
de:a5:2a:ac:bf:63:24:42:e5:ad:50:e1:13:d6:3a:
7e:34:85:b0:39:46:8f:88:64:73:8a:e1:58:e6:de:
5e:de:7a:e1:9a:2e:3d:53:c2:3a:cd:37:4f:f4:ba:
75:45:2d:f8:95:41:20:ee:40:e5:4e:71:e4:5f:e2:
18:60:a6:24:f4:fc:3d:f6:ac:3a:6c:0e:05:2c:3c:
50:9c:50:28:59:1f:6b:21:b0:57:d0:50:4a:b7:36:
f0:64:a6:21:8b:c3:96:c6:87:d2:69:de:bb:d8:39:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:06:74:54:01:6A:DA:E0:BB:F6:DB:D5:D0:87:73:C6:FB:16:DF:73
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/64F32F5481AB11F0924A1781C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.124.76.0/23
Signature Algorithm: sha256WithRSAEncryption
43:6f:ab:fd:87:e9:d9:65:eb:58:f2:b1:49:51:df:d1:f6:6a:
86:1c:69:ab:66:4d:d9:00:dc:5f:57:ce:d9:a9:35:38:57:22:
7c:c9:73:b8:fa:dc:46:b9:3a:76:86:f0:e0:e5:84:6c:89:7c:
e1:4d:3d:03:6d:e7:e1:50:c4:18:d0:f9:82:8e:f2:5d:dd:d1:
41:fe:3d:06:21:39:1c:b1:c6:8a:29:6f:2a:24:be:a1:6e:74:
f5:da:44:01:b4:a5:fa:ab:9d:25:f8:e0:b4:32:dc:3c:8a:b7:
b1:b2:31:75:86:c0:b2:2a:1b:c7:21:c0:87:ba:f0:64:33:16:
03:9f:c3:83:ec:5d:39:13:eb:1c:26:5c:ab:02:c4:85:a0:0a:
6e:92:41:b2:87:28:9e:ca:93:f6:74:53:55:66:31:49:80:87:
c1:05:5f:38:4d:07:fd:55:17:3d:e5:52:dc:07:24:80:cc:e6:
7b:2d:db:1a:29:f0:4c:58:4b:5a:e9:67:f1:6c:0d:1d:17:63:
9d:17:43:14:f8:2d:24:ea:89:f7:f8:7e:92:c2:a0:cf:c7:0a:
b9:56:43:a7:98:51:83:04:58:7a:49:e6:50:a7:6c:ef:25:5f:
14:6b:e3:48:3c:bb:d2:d4:a7:d2:2e:1f:a0:da:f1:4f:3c:97:
6d:71:28:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:50 2026 by rpki-client