
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6800413CC72111EEA33F0529C4F9AE02.roa
File: 6800413CC72111EEA33F0529C4F9AE02.roa (raw, json)
Hash identifier: q5AKUcJbCaHLT0hTUJ1ROKrJsU2SsTOOQ8KAhXK8jAI=
Subject key identifier: 8D:A8:10:1D:6B:3A:96:3D:8F:42:6B:75:7E:09:2D:0D:92:67:97:0A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E57C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6800413CC72111EEA33F0529C4F9AE02.roa
Signing time: Sun 31 May 2026 17:02:32 +0000
ROA not before: Sun 31 May 2026 17:02:32 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 137647
IP address blocks: 103.119.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58748 (0xe57c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:02:32 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c69a7-c053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:52:cd:79:23:75:94:e7:a5:98:a9:d6:f4:5d:
cd:d9:db:6b:89:f7:1b:09:9c:fa:3b:76:44:8e:5a:
05:18:68:1c:dc:92:4c:40:05:38:d2:b2:c3:cd:88:
27:e3:e9:74:cf:c0:97:b6:dc:82:39:eb:70:53:89:
79:3c:82:7e:2f:7f:6f:79:bd:8a:31:1b:f4:91:58:
a8:c2:40:ee:db:ab:f9:75:3b:ec:42:74:cb:b7:65:
37:41:68:a3:04:64:03:46:88:d2:48:a4:e8:24:5e:
bc:c3:1d:4f:47:26:33:b5:27:6e:4b:ad:23:5c:48:
50:89:b7:6c:99:a4:83:ce:c0:b2:67:54:09:15:46:
f8:bf:a6:39:45:39:57:ca:1e:b9:8a:1a:b4:26:77:
7e:ae:46:f5:58:da:74:fe:7b:46:fd:ec:4b:8a:4d:
27:cb:a8:4d:ea:d0:d5:a8:f6:b7:1f:38:58:6e:50:
82:fa:80:67:3c:71:e3:8c:c0:90:19:31:fa:7f:59:
87:34:c4:1b:5b:57:f8:5b:eb:10:62:3c:f9:40:ed:
1b:86:fa:20:56:25:ca:1f:c1:71:95:d6:01:2a:7e:
d1:8a:20:d4:28:f1:ea:96:08:6a:bb:c8:1f:f4:d7:
91:c4:68:b4:43:bc:07:08:10:b7:26:f2:27:e6:13:
bf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A8:10:1D:6B:3A:96:3D:8F:42:6B:75:7E:09:2D:0D:92:67:97:0A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6800413CC72111EEA33F0529C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.119.238.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f1:b0:2d:83:9f:e9:b0:04:a5:9a:40:43:51:ce:7a:fb:33:
91:e5:72:f0:0d:58:83:f8:da:12:0d:e8:f3:d5:76:0e:99:79:
a0:b4:0a:40:3c:49:ff:19:05:e9:09:30:5c:40:d8:40:7c:66:
96:46:6c:c4:ff:fd:f3:6d:f7:fc:6c:46:f5:42:4e:cd:87:db:
e3:4c:e8:24:df:eb:e4:a0:38:4b:54:ba:17:ef:fa:12:75:9b:
ec:15:a7:c9:6b:e2:bc:91:a1:6c:8c:6b:4e:b2:52:13:d8:a8:
eb:c2:ed:ab:c6:8c:f4:00:97:dc:ac:36:a7:92:0a:5c:74:ba:
a1:ac:94:16:da:a7:c9:c2:1a:2c:db:ef:33:dd:09:55:5b:46:
68:b0:00:45:8b:fa:83:f0:0c:5a:4d:b8:fd:02:21:ef:53:d1:
96:4d:cb:b4:2d:8e:7c:46:05:96:53:37:d9:0f:51:ef:88:c0:
65:9b:c9:bd:6d:50:ae:e7:0f:7a:c4:e9:4e:fa:e9:c9:f6:3f:
f9:26:a1:b2:3c:08:30:74:a2:f7:c7:ca:01:5e:8f:94:84:d3:
b9:f2:66:53:ae:0d:c1:7d:24:b0:46:87:bd:ef:9e:44:86:87:
3b:d6:47:88:a0:04:fe:00:81:a5:18:4f:c0:81:1a:34:6e:05:
f3:e1:72:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:12 2026 by rpki-client