
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71CAB48ED6DB11EAB67FE379C4F9AE02.roa
File: 71CAB48ED6DB11EAB67FE379C4F9AE02.roa (raw, json)
Hash identifier: QFA0xQ7gpW1pTATDsVVHEmVJLcqpLoR84/hz8hofbJA=
Subject key identifier: CF:35:BD:00:4B:DA:92:3E:B7:ED:D1:FC:1C:D2:2C:CD:92:7A:46:DB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E295
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71CAB48ED6DB11EAB67FE379C4F9AE02.roa
Signing time: Sun 31 May 2026 16:38:26 +0000
ROA not before: Sun 31 May 2026 16:38:25 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133679
IP address blocks: 103.95.172.0/22 maxlen: 24
2001:df3:2a40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58005 (0xe295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:38:25 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6401-e4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a0:d6:7b:1d:d0:48:94:4f:11:9f:a9:c1:2a:
bc:d2:a3:0e:bb:a8:cb:1c:be:83:bb:5c:6e:01:8a:
07:19:e4:e2:b6:fe:20:b4:a2:09:e7:ba:6c:c5:35:
ec:b2:26:50:92:e4:e8:26:10:fd:de:5d:24:2f:39:
d9:64:d3:4b:0a:db:ed:21:f2:a1:9d:3d:27:ef:04:
52:a2:06:10:fb:cc:a2:a3:55:82:94:bf:80:a0:6c:
b2:91:a1:be:e5:7e:1c:c1:03:c1:a1:97:c9:da:4e:
7e:d4:ab:bf:a3:9e:e4:fd:13:a1:84:87:0c:d8:a2:
03:5f:61:4e:36:c9:7f:9b:7b:3d:b8:21:92:6d:4a:
ec:89:ee:7d:2a:48:f3:78:b8:b1:7e:de:0c:ab:7e:
15:69:9f:83:04:3c:f6:7b:a1:45:c6:75:ec:37:45:
e3:27:cb:a9:4a:3a:67:04:9c:f0:06:d6:b9:76:ff:
9f:13:77:0c:1c:04:0f:56:61:4e:5b:c8:b0:a0:e5:
ff:31:40:44:98:1b:51:7f:5f:c0:9f:88:a2:ab:24:
9d:f2:a5:06:c5:fc:3b:0b:12:3a:a0:1a:25:3b:ec:
b9:27:3b:c8:a2:01:4e:d7:82:fa:94:86:81:fb:90:
00:0c:98:14:6d:5c:cd:a9:73:52:4a:4b:9e:a3:3a:
40:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:35:BD:00:4B:DA:92:3E:B7:ED:D1:FC:1C:D2:2C:CD:92:7A:46:DB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71CAB48ED6DB11EAB67FE379C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.95.172.0/22
IPv6:
2001:df3:2a40::/48
Signature Algorithm: sha256WithRSAEncryption
57:c6:6e:fd:52:71:7d:2d:83:b8:a0:21:3f:72:14:8b:72:ad:
92:6b:19:2d:0f:2b:29:c2:a4:eb:92:dd:85:bb:8d:c1:7d:1f:
d1:ac:55:3c:02:1e:01:14:f0:d4:0d:b4:8c:71:11:ca:24:69:
48:9c:c1:20:06:81:ef:a6:70:17:36:12:4e:f0:cd:39:b3:46:
40:53:ba:95:03:3b:7c:af:35:73:c3:fb:f1:f3:0f:7d:90:88:
48:ac:d5:50:26:f1:ce:dd:a0:77:a9:dd:7f:63:9e:89:f3:4c:
5e:ba:22:ad:b9:5e:1c:6d:e0:6b:49:21:e3:0f:12:bb:00:3f:
a7:f8:79:ac:9c:e8:54:9b:88:00:ee:f9:4b:2e:08:3a:06:de:
2e:b6:5c:d1:0d:04:35:0e:97:d1:ec:63:06:b8:c0:c4:c3:8a:
6c:66:70:ff:e9:bf:30:2a:18:17:96:fd:ea:2f:08:61:39:a1:
0a:36:d4:8c:fc:f9:20:b6:e5:ab:e7:78:65:14:db:76:28:c3:
a4:3e:aa:ef:47:4b:c0:31:11:40:93:85:46:07:2d:f7:fc:78:
24:08:ba:56:b2:28:c2:57:e6:e3:f1:de:50:55:40:73:97:0e:
59:2e:5b:df:fe:0a:7b:7b:23:42:31:27:a9:a5:8a:d2:c2:2a:
88:22:ae:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:10 2026 by rpki-client