
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87960B42FFE811EBA7C9A476C4F9AE02.roa
File: 87960B42FFE811EBA7C9A476C4F9AE02.roa (raw, json)
Hash identifier: UoLyGCxYM9XkTEV6eD7ybcqiMlB5fsKJaQjqoFu+dI4=
Subject key identifier: 7B:B9:2D:CC:0C:3B:1F:9E:BF:F1:35:9C:23:3F:6A:1E:94:32:18:4D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E79A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87960B42FFE811EBA7C9A476C4F9AE02.roa
Signing time: Sun 31 May 2026 17:20:13 +0000
ROA not before: Sun 31 May 2026 17:20:13 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 142454
IP address blocks: 103.142.164.0/23 maxlen: 24
103.171.120.0/23 maxlen: 24
2407:c3c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 09:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59290 (0xe79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:20:13 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6dcd-848a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:01:05:c4:77:6c:a8:0d:8a:42:9a:fa:e9:
0d:2a:dc:9d:c1:2c:b0:25:b4:f4:f3:3a:64:4f:6d:
90:e5:9c:6d:0e:d1:97:ae:08:c8:f2:0f:eb:de:a2:
15:3f:d7:6d:78:47:f0:30:fa:68:48:c9:77:31:74:
7c:23:04:d3:eb:8c:fa:8e:20:03:79:df:e9:dc:d9:
58:a3:6f:d3:0a:6b:a6:13:46:6b:88:42:bb:6f:ee:
40:46:71:f9:83:f7:5a:16:8e:29:1a:02:cc:36:80:
76:93:f5:ba:a9:aa:7a:d4:fc:2d:d7:72:74:2b:cd:
68:e4:57:42:90:4f:39:9d:19:a3:0b:5b:7e:d6:c2:
03:51:ea:65:88:d7:09:29:f7:85:0f:f6:6a:2c:4e:
21:24:b0:3e:91:2c:de:ec:41:c9:a7:8d:19:47:13:
c2:c5:0d:ab:bc:a3:0f:a0:d9:ce:b8:e0:91:57:af:
44:fb:d7:bf:43:01:be:a5:88:eb:40:cd:99:b8:c9:
b0:7f:1b:a9:51:88:cf:a6:6a:61:dd:c5:27:e8:47:
76:96:4c:c2:e8:3a:b1:ce:fa:26:29:89:92:e3:e0:
21:86:a7:9a:5a:5e:09:02:dc:d5:ae:67:9b:f6:87:
af:cf:bc:6c:06:41:26:d0:67:7d:a3:f9:30:f3:ad:
10:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B9:2D:CC:0C:3B:1F:9E:BF:F1:35:9C:23:3F:6A:1E:94:32:18:4D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87960B42FFE811EBA7C9A476C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.142.164.0/23
103.171.120.0/23
IPv6:
2407:c3c0::/32
Signature Algorithm: sha256WithRSAEncryption
47:b4:5e:ed:ca:75:c6:78:fd:9c:65:f3:55:5f:6a:a9:27:95:
71:8f:e4:fe:99:03:11:a6:f3:b5:88:84:f9:59:76:92:01:79:
af:3f:a0:2f:23:84:eb:ce:a6:34:16:e1:52:e1:f9:d3:7b:95:
d8:27:d1:a6:75:f4:38:f8:a9:c8:8d:b9:ca:e9:f6:1d:51:7b:
2b:2d:65:85:6f:d3:64:84:6c:bf:7c:61:28:da:0c:b7:86:a7:
f6:4e:76:ac:c1:5c:71:e7:ca:ab:2e:11:47:ae:f6:72:dd:5a:
87:30:e2:c9:cf:d6:d0:1b:48:24:ec:5a:40:b2:f6:11:1a:6d:
88:76:e7:d9:5a:1a:f4:39:bd:c4:3d:73:96:e8:7a:7d:fc:e9:
03:5c:3f:6a:62:69:93:15:fd:f5:d9:49:9f:18:ca:cd:f1:c6:
92:01:07:7e:5a:3f:97:91:1d:ab:41:74:52:5d:aa:21:11:30:
cd:5c:82:24:53:c1:5f:36:8f:d4:16:e0:64:a9:5d:d7:a7:11:
63:25:2e:80:19:ad:9d:38:48:0b:4c:69:77:5d:20:48:d9:bc:
74:88:5c:e5:34:53:90:b9:91:58:2f:16:1f:21:64:64:c0:02:
45:9c:ba:ec:7b:b1:98:d3:81:c6:90:63:b6:08:f9:93:61:95:
c7:47:67:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:18:18 2026 by rpki-client