
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DACEE0C11EC11EBA84A3E3EC4F9AE02.roa
File: 6DACEE0C11EC11EBA84A3E3EC4F9AE02.roa (raw, json)
Hash identifier: unt/nukxLsGhX6U/1ZmQWTnQ0ele1YPi4ZmzY7svSMs=
Subject key identifier: AE:30:21:31:72:B4:62:54:A0:BA:66:20:09:4A:A1:9B:58:6B:18:E3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E1F1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DACEE0C11EC11EBA84A3E3EC4F9AE02.roa
Signing time: Sun 31 May 2026 16:33:07 +0000
ROA not before: Sun 31 May 2026 16:33:07 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 132761
IP address blocks: 43.247.160.0/22 maxlen: 24
103.249.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57841 (0xe1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:33:07 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c62c3-1703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:88:60:e9:09:42:92:5c:9a:d2:0f:0d:cc:
be:be:42:f3:ed:85:7a:db:d6:fd:d2:8e:53:dc:f2:
f7:6a:27:db:0a:7c:cf:cd:4d:ba:3b:8c:41:0d:f0:
d0:76:e8:1a:79:e7:b1:a5:32:31:82:97:78:80:1b:
1f:0d:d3:6c:e3:c7:fc:24:8b:84:8a:7e:a7:a0:ae:
98:38:ae:0d:5c:33:0d:56:bf:59:12:a1:3b:52:f8:
0f:ee:2a:64:58:11:e1:8f:c9:e4:60:f3:8e:96:02:
f0:e9:88:bc:4a:85:cd:b2:b8:26:c8:08:22:15:86:
84:29:e7:4e:da:82:8e:0d:b1:d2:92:27:50:3f:ba:
33:c8:ac:88:36:d8:46:9d:d1:23:eb:4d:9c:88:9b:
79:95:d5:0e:85:13:82:81:e2:43:f4:2d:6c:5f:f6:
cc:4b:96:9d:14:06:6b:6e:87:17:9c:ca:93:97:6c:
e8:f5:e7:cd:4b:f2:b5:7d:92:36:ed:c0:b5:76:7a:
eb:11:3e:29:76:e4:cf:8b:54:04:49:ae:49:b7:e3:
fd:34:2c:2b:d4:52:cf:84:a9:3a:3c:5e:1f:93:bf:
ac:ef:57:72:55:1f:ae:cb:8b:4d:56:50:ac:dd:70:
5e:eb:f0:43:a1:36:e2:19:50:ad:e6:91:ad:49:b2:
79:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:30:21:31:72:B4:62:54:A0:BA:66:20:09:4A:A1:9B:58:6B:18:E3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DACEE0C11EC11EBA84A3E3EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.247.160.0/22
103.249.24.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:3e:03:12:d0:9a:83:b7:c2:03:1e:1e:48:dc:42:23:19:b4:
83:9f:d1:e4:dd:70:42:64:1b:9e:9b:58:28:41:0e:a0:eb:5d:
b0:83:7c:a7:3c:9c:85:2e:55:ee:35:e0:20:96:b1:e4:d0:3b:
e0:c1:10:71:8c:5b:de:fe:c1:0d:a0:88:c5:69:c5:60:84:b8:
10:36:51:4e:22:c5:62:33:28:f6:d4:b9:e5:f9:15:20:25:16:
88:8c:b5:c9:ff:db:d0:97:f8:b9:fd:f0:31:df:2f:a1:4b:48:
b6:b9:6a:37:e2:85:c7:62:dc:61:dc:f4:e8:33:f6:da:a3:0a:
9f:db:df:7f:d7:81:6d:95:4c:01:50:f8:b7:b4:b9:f3:0e:d4:
08:93:3a:2f:b0:a1:c9:16:3e:97:5d:31:90:23:c4:bb:0c:d6:
56:f9:d7:e4:80:e1:6b:d0:85:d2:dc:35:d8:ea:27:de:5e:85:
f2:d4:b1:aa:31:30:a4:b7:9b:ba:95:e7:ba:84:7d:45:91:06:
bf:39:e3:7d:78:79:58:a8:b8:2c:3d:a0:a8:69:29:ae:bf:f7:
07:e7:bf:19:97:46:3f:3d:75:79:67:64:42:22:d0:3c:77:aa:
a8:66:05:ea:6f:50:88:ed:47:00:c6:9d:1e:f6:ef:02:24:f2:
2e:7e:39:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:02:52 2026 by rpki-client