
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82BB15E2F04C11EF978F9C54C4F9AE02.roa
File: 82BB15E2F04C11EF978F9C54C4F9AE02.roa (raw, json)
Hash identifier: GeReg1vYx/E97hZH/AArPK1ObBqWtEoR9ZlqIjAz7Uk=
Subject key identifier: 3E:96:EE:27:DF:7C:A5:13:94:7B:C2:CA:12:02:A9:32:1D:A5:FB:D6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E4FD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82BB15E2F04C11EF978F9C54C4F9AE02.roa
Signing time: Sun 31 May 2026 16:58:19 +0000
ROA not before: Sun 31 May 2026 16:58:19 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 136724
IP address blocks: 103.83.128.0/22 maxlen: 22
103.83.128.0/24 maxlen: 24
103.83.129.0/24 maxlen: 24
103.83.130.0/24 maxlen: 24
103.83.131.0/24 maxlen: 24
103.102.89.0/24 maxlen: 24
103.102.90.0/24 maxlen: 24
103.102.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58621 (0xe4fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:58:19 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c68aa-453c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:47:17:8d:d3:bf:95:a9:d3:9f:a7:9f:6c:
dc:5d:b8:2a:a8:fc:2f:93:07:96:a2:9c:dc:d2:f4:
d6:9f:d8:cf:9e:44:88:26:9b:d1:ab:69:9a:c6:fe:
cb:9b:80:e2:5e:f0:54:b9:f5:02:01:bd:19:14:3b:
b8:cf:77:16:6c:60:41:b8:5f:a1:92:eb:7f:2c:68:
c3:d8:dc:e6:ed:8c:c0:66:c4:1d:7a:d0:9d:21:5d:
81:4b:11:d4:81:9b:82:c9:d2:a2:e9:13:d0:7c:44:
94:04:7b:8c:0e:a3:5e:93:b9:2e:47:32:57:c2:b3:
33:9d:f5:5e:80:10:25:72:2c:3c:7d:ca:5b:ac:d6:
23:39:28:81:ac:9b:d7:95:fe:67:ab:32:40:c5:8c:
3f:1a:f6:3e:f5:c7:ae:28:fb:98:9f:4d:39:13:70:
28:5d:75:34:cb:7f:c3:11:a5:fe:ec:6d:24:b4:a4:
2c:53:da:09:f8:54:e6:51:12:5e:5a:a8:d5:08:21:
2c:2d:a8:2c:b3:32:3b:e6:3a:a5:58:23:62:ec:e2:
15:ca:f7:c9:3b:72:12:e2:95:01:2c:9a:24:fe:20:
44:61:98:a6:ed:26:81:89:3d:55:68:a7:ef:77:f8:
8d:94:44:cb:53:c5:60:64:a3:34:50:ba:6a:5a:a1:
1f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:96:EE:27:DF:7C:A5:13:94:7B:C2:CA:12:02:A9:32:1D:A5:FB:D6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82BB15E2F04C11EF978F9C54C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.128.0/22
103.102.89.0-103.102.91.255
Signature Algorithm: sha256WithRSAEncryption
55:d9:cb:c0:3b:0d:c5:2a:01:6e:ef:4b:4a:42:6c:b4:e5:e6:
42:7e:cb:dc:f3:2b:23:8b:11:63:7d:eb:94:7e:79:40:f9:74:
b6:2a:53:82:0e:fb:9a:9d:ef:2e:2d:96:db:d3:e6:e7:a2:b4:
9c:18:04:a1:4c:40:e6:41:9d:ff:50:8e:2f:71:62:eb:15:a8:
38:65:1c:23:b0:3a:f1:94:da:0e:72:30:82:71:2f:5a:c4:b3:
84:99:18:06:1e:59:d3:5c:54:4d:da:42:87:6f:16:44:a3:b1:
85:a6:db:af:28:69:18:50:b1:f4:9c:1c:b4:2f:f0:8a:8a:8e:
da:ab:7b:48:f8:2f:14:66:e7:0f:b5:25:cf:d0:1b:86:37:7a:
c7:51:18:97:5a:d7:28:fe:56:b0:51:71:69:83:99:a7:79:44:
7a:7f:f5:e5:ab:96:ef:e5:ed:1a:3e:a1:d0:da:7e:fc:c5:6a:
16:b6:cf:be:6e:25:5c:e4:6a:a5:21:da:4b:32:7c:fb:7c:22:
cf:e8:a4:84:4a:d2:18:cd:a6:72:8b:2f:ba:d4:2f:22:a6:20:
2a:c7:9f:a8:72:10:64:3c:eb:b4:f9:40:29:b0:62:c6:fa:d1:
5d:5a:37:f4:7c:24:13:29:2a:48:3a:78:1f:b8:51:d1:23:2e:
f8:78:bb:39
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIDAOT9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2NTgxOVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzY4YWEtNDUzYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKhsRxeN07+VqdOfp59s3F24Kqj8L5MHlqKc3NL01p/Yz55EiCab0atpmsb+
y5uA4l7wVLn1AgG9GRQ7uM93FmxgQbhfoZLrfyxow9jc5u2MwGbEHXrQnSFdgUsR
1IGbgsnSoukT0HxElAR7jA6jXpO5LkcyV8KzM531XoAQJXIsPH3KW6zWIzkogayb
15X+Z6syQMWMPxr2PvXHrij7mJ9NORNwKF11NMt/wxGl/uxtJLSkLFPaCfhU5lES
Xlqo1QghLC2oLLMyO+Y6pVgjYuziFcr3yTtyEuKVASyaJP4gRGGYpu0mgYk9VWin
73f4jZREy1PFYGSjNFC6alqhH8kCAwEAAaOCAm4wggJqMB0GA1UdDgQWBBQ+lu4n
33ylE5R7wsoSAqkyHaX71jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzgyQkIxNUUy
RjA0QzExRUY5NzhGOUM1NEM0RjlBRTAyLnJvYTAtBggrBgEFBQcBBwEB/wQeMBww
GgQCAAEwFAMEAmdTgDAMAwQAZ2ZZAwQCZ2ZYMA0GCSqGSIb3DQEBCwUAA4IBAQBV
2cvAOw3FKgFu70tKQmy05eZCfsvc8ysjixFjfeuUfnlA+XS2KlOCDvuane8uLZbb
0+bnorScGAShTEDmQZ3/UI4vcWLrFag4ZRwjsDrxlNoOcjCCcS9axLOEmRgGHlnT
XFRN2kKHbxZEo7GFptuvKGkYULH0nBy0L/CKio7aq3tI+C8UZucPtSXP0BuGN3rH
URiXWtco/lawUXFpg5mneUR6f/Xlq5bv5e0aPqHQ2n78xWoWts++biVc5GqlIdpL
Mnz7fCLP6KSEStIYzaZyiy+61C8ipiAqx5+ochBkPOu0+UApsGLG+tFdWjf0fCQT
KSpIOngfuFHRIy74eLs5
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:46 2026 by rpki-client