
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/69DD8D7E2C0B11F18E3908EB90833773.roa
File: 69DD8D7E2C0B11F18E3908EB90833773.roa (raw, json)
Hash identifier: ZvCwORNm61GWz6Ns1W2+IkTXafsEbUbPL3lSvckQhiY=
Subject key identifier: 83:BE:67:48:1C:09:CD:AF:4E:51:09:FB:A3:3D:3E:ED:24:02:46:99
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E21D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/69DD8D7E2C0B11F18E3908EB90833773.roa
Signing time: Sun 31 May 2026 16:34:33 +0000
ROA not before: Sun 31 May 2026 16:34:33 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 132972
IP address blocks: 103.137.218.0/24 maxlen: 24
103.139.232.0/24 maxlen: 24
103.159.242.0/24 maxlen: 24
103.159.243.0/24 maxlen: 24
103.175.10.0/24 maxlen: 24
103.175.11.0/24 maxlen: 24
2001:df0:9980::/48 maxlen: 48
2001:df7:e280::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57885 (0xe21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:34:33 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6319-c194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c8:cf:ed:66:35:d3:40:63:8c:15:cc:ff:49:
56:8b:74:4a:78:17:eb:4c:8d:25:17:8f:15:64:ba:
76:21:5d:3e:8a:d0:46:72:94:6d:44:8d:6e:65:83:
70:a9:7c:7c:7c:31:54:ca:83:ff:fe:95:a3:8a:0e:
ce:b1:50:de:6e:fd:90:c1:f2:3a:ad:46:f2:c7:5d:
36:4c:d1:39:c1:d6:c3:64:92:21:61:45:33:34:dd:
db:08:01:e8:49:dc:da:62:b0:62:44:33:9a:2e:6c:
e5:25:18:b9:0c:d3:64:87:9f:ee:35:7a:5a:62:0a:
fa:fe:e5:d0:4f:76:51:3a:6f:50:2c:ad:07:6b:ce:
94:0b:ac:12:b9:02:ee:41:80:26:8e:f4:b6:d4:6b:
a3:3c:ac:ab:53:5d:07:c6:46:74:fc:3b:81:03:cc:
1d:0c:59:4b:a4:cb:ae:9f:c6:f1:0a:0d:5a:a2:11:
da:8b:52:ca:2a:7f:de:c3:8d:3a:7b:5e:56:73:4e:
50:c7:ac:97:c0:96:f0:0d:c5:bb:89:cb:de:b2:6b:
6a:fd:e2:8f:d0:8e:14:64:67:45:c7:d5:c9:3b:78:
14:49:dc:d9:51:11:ad:85:82:63:52:67:ff:54:d6:
ce:39:7d:6e:fa:ab:23:a0:96:3a:92:e6:08:87:2b:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BE:67:48:1C:09:CD:AF:4E:51:09:FB:A3:3D:3E:ED:24:02:46:99
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/69DD8D7E2C0B11F18E3908EB90833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.218.0/24
103.139.232.0/24
103.159.242.0/23
103.175.10.0/23
IPv6:
2001:df0:9980::/48
2001:df7:e280::/48
Signature Algorithm: sha256WithRSAEncryption
35:b1:d4:94:f2:82:3b:57:79:f5:a2:16:68:95:0a:51:06:60:
37:cf:3a:49:6f:05:ef:ca:29:28:b7:24:0b:1d:85:08:69:03:
5f:4d:7a:6a:1c:14:39:b3:3d:ec:f9:b8:ec:15:9e:9f:51:af:
ab:3d:34:bc:fa:11:c3:a8:17:dd:75:54:fb:c4:30:37:67:29:
f0:5a:4e:15:66:aa:67:4f:3b:08:1a:2e:03:79:9a:7e:1f:06:
d1:87:f1:bf:64:4a:32:0a:44:5c:2a:a2:93:59:2a:bc:3b:43:
e8:43:a6:7b:e7:b2:2f:32:98:6a:a9:55:d3:d9:06:c4:b8:39:
e3:73:15:c0:8c:85:80:95:ae:1d:ea:57:63:24:e0:4a:ed:26:
3b:ce:cf:17:93:db:9c:51:e6:87:05:01:64:0f:fa:ed:ee:c6:
bc:65:ec:89:50:49:d4:ba:49:12:73:87:7e:18:89:07:2e:f6:
2a:56:c6:3c:f6:1d:85:01:e0:2c:28:a2:b1:d2:8e:01:76:2d:
65:3d:8b:45:6e:8a:ac:7e:88:f3:56:e3:2c:af:ca:52:90:17:
fd:7f:5f:85:f8:aa:0b:42:36:6f:2d:a6:54:2e:71:aa:a3:89:
8e:a4:ab:db:d5:e5:24:cf:d7:9f:47:bc:10:6d:b3:9a:77:67:
c8:a1:f9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:45 2026 by rpki-client