
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/80EFFF14D89311EAAF16BC46C4F9AE02.roa
File: 80EFFF14D89311EAAF16BC46C4F9AE02.roa (raw, json)
Hash identifier: s76uLC4Vb049m6skoihA67f/7T2xeLebAyqYEbmhSQY=
Subject key identifier: 77:28:81:60:45:57:06:70:56:0F:BC:F6:ED:5E:B0:51:FF:1D:F7:22
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E36D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/80EFFF14D89311EAAF16BC46C4F9AE02.roa
Signing time: Sun 31 May 2026 16:45:23 +0000
ROA not before: Sun 31 May 2026 16:45:23 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 134905
IP address blocks: 103.211.76.0/22 maxlen: 24
2407:4cc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58221 (0xe36d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:45:23 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c65a3-c291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:e7:d9:0e:0c:57:a2:fa:93:6f:fb:d8:36:
e1:9e:78:81:44:47:fe:3a:ab:c9:a5:fb:e7:d8:ed:
e3:94:9b:3b:41:7e:4c:39:2b:30:b1:ac:39:27:cd:
2c:f9:9a:7e:1b:b3:bc:3b:cb:d1:d4:34:1b:38:b6:
f1:04:3a:82:44:cc:5a:55:62:33:de:fd:04:19:33:
7a:97:35:35:a7:70:49:a2:26:7e:50:78:8a:ee:33:
fa:ae:7d:50:5e:ad:d6:6d:e1:ba:90:ca:0c:12:03:
04:98:9b:ce:31:a2:0b:59:ca:c3:46:46:6f:95:ed:
45:82:70:8d:1c:e9:c0:4f:5a:66:6c:63:cb:af:06:
07:df:01:49:fd:85:0d:eb:fc:31:6d:c5:10:6e:02:
18:0e:c7:42:91:39:4b:3c:d9:28:2d:7e:ce:1a:50:
7b:c2:85:ac:64:9e:16:ce:9e:1e:d3:51:00:3d:52:
d5:d9:85:1a:a8:96:10:a3:b6:09:39:be:17:d8:52:
ff:93:f7:b9:41:02:6f:9e:37:9c:35:15:75:ef:8c:
14:4f:e4:54:18:24:73:17:31:8e:6f:7c:38:96:f9:
70:15:16:87:0b:67:3c:7e:83:bd:16:2e:1b:18:57:
3c:4e:2d:62:6e:9a:21:aa:6f:39:df:7b:4c:ca:04:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:28:81:60:45:57:06:70:56:0F:BC:F6:ED:5E:B0:51:FF:1D:F7:22
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/80EFFF14D89311EAAF16BC46C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.211.76.0/22
IPv6:
2407:4cc0::/32
Signature Algorithm: sha256WithRSAEncryption
63:89:9c:ae:83:6f:23:49:b4:b5:01:7e:02:af:1e:16:cc:d4:
d0:db:4d:90:3f:5c:71:38:6e:95:8c:f3:f4:2d:ef:12:21:32:
9a:28:39:40:5a:3d:63:63:8b:ee:5b:bc:27:05:47:ad:a5:db:
fd:9a:3f:f0:01:93:10:26:84:2d:3f:04:26:a3:a1:1d:b8:8a:
53:ef:38:de:5f:ab:ed:6b:e7:f0:fe:f3:50:3c:a7:dd:a3:50:
63:2e:a7:cf:74:62:5f:01:3a:48:ba:28:cc:c2:89:0b:ab:df:
e0:e2:cb:2a:f7:a4:9d:69:60:cd:72:02:67:51:ab:f1:96:c2:
11:9d:23:ed:a0:c5:33:a0:84:0d:fb:6f:3b:2a:20:36:5c:6e:
03:96:bc:16:83:08:d5:8a:d9:06:69:1b:83:d2:be:ab:18:dc:
f7:92:ce:50:0c:67:72:f9:c3:f5:2b:73:ca:3c:10:7f:77:d8:
3e:7e:dc:b6:77:13:c8:4d:86:f8:7f:46:e9:ea:a8:56:49:1d:
92:33:cf:0e:03:11:97:d5:7d:bf:8b:ce:5d:5b:7f:70:ee:2d:
65:15:25:cf:da:4e:38:2b:43:cb:8a:c1:51:49:4f:40:e9:8f:
c1:08:d6:d9:62:16:27:17:23:7f:13:b3:98:4e:c6:bd:74:58:
de:af:56:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:03 2026 by rpki-client