
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87F3E6F4EB5311EA9AC71F30C4F9AE02.roa
File: 87F3E6F4EB5311EA9AC71F30C4F9AE02.roa (raw, json)
Hash identifier: o+TJa3RNFnuOkYVwq+FD8vq0OU79moKnVH7rSy53h8I=
Subject key identifier: D1:D9:60:56:14:6F:FF:45:13:7D:0C:55:32:BC:5A:92:28:5A:F8:2F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E228
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87F3E6F4EB5311EA9AC71F30C4F9AE02.roa
Signing time: Sun 31 May 2026 16:34:54 +0000
ROA not before: Sun 31 May 2026 16:34:54 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 132988
IP address blocks: 103.80.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57896 (0xe228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:34:54 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c632e-d181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:04:78:7f:05:21:3a:bd:61:ae:a5:dc:17:
6a:1c:d0:b5:5c:3b:6a:5e:2c:b7:25:c5:6f:75:28:
26:a4:bd:e7:69:2a:23:55:67:f0:cc:97:69:2c:4b:
84:51:dd:e7:db:8f:e3:43:9c:41:12:46:0b:11:78:
46:0e:99:2f:60:1c:1d:41:f0:36:45:93:04:04:e0:
02:a9:50:a5:d3:69:e8:05:63:e1:7e:fd:b3:bb:25:
6c:38:22:a7:d8:91:66:15:45:b8:95:9e:e2:74:7f:
0b:80:a4:cd:11:30:67:14:a3:83:2b:b1:c5:3f:9e:
c0:69:fd:6b:03:0e:45:72:b5:68:4d:40:4b:f4:cf:
ce:f1:be:87:91:5a:3a:ec:5f:76:cf:eb:b2:d2:c5:
64:83:5f:8a:7a:af:0d:df:42:a4:9d:0e:17:18:fc:
2f:1f:a6:4c:d7:da:8e:ad:3e:d4:53:3d:ab:f5:f9:
e4:d3:da:11:3a:52:5f:48:80:4e:2d:ea:5a:86:54:
17:ec:a4:f6:74:da:ba:c8:98:5f:3f:ce:6f:90:4e:
9e:9b:90:68:96:6b:f4:f7:66:96:4e:67:0d:d2:59:
cd:f4:c4:e1:f3:4c:8f:3e:5c:f0:cf:5a:6f:f5:71:
46:8f:77:bc:f4:e5:19:aa:fb:67:46:16:52:e6:cc:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D9:60:56:14:6F:FF:45:13:7D:0C:55:32:BC:5A:92:28:5A:F8:2F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87F3E6F4EB5311EA9AC71F30C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.80.112.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:f9:5b:c0:60:8d:d5:1a:c2:fc:99:69:a0:c9:ac:9c:78:35:
df:2f:c3:bd:8a:b9:83:18:d6:6f:54:59:e9:6b:d9:d6:05:23:
e7:3b:5c:da:10:44:d9:94:e6:07:d6:15:20:4d:63:94:e4:04:
a5:23:e9:92:6f:06:d3:8f:c2:9f:48:b4:29:9b:a4:1b:37:70:
b6:71:0d:96:94:69:aa:7a:f7:65:b7:24:88:9d:9b:e5:dd:c5:
4d:44:e1:37:03:eb:eb:d9:11:ab:48:ca:0e:0b:3e:5c:56:29:
6c:da:66:07:ec:ae:44:30:cc:63:0c:40:80:45:e6:dd:91:4c:
78:43:d3:ae:38:c6:7f:5a:03:37:01:f1:ef:5a:79:fb:60:8d:
f7:45:d1:2c:ac:81:e8:f3:41:33:6a:39:99:e9:fb:ee:2f:9f:
30:a5:10:a9:e4:8d:9b:bd:34:23:81:ae:5e:d0:97:b9:c4:46:
65:66:92:70:d4:fe:17:a3:dc:5e:09:eb:15:6a:40:05:f2:61:
79:f2:1b:df:0b:bb:01:51:50:e1:8b:9d:b2:ca:ed:22:e2:fb:
34:02:1a:39:ab:33:ca:09:5b:8a:09:98:60:d1:f6:ca:42:ab:
da:43:47:16:43:15:cb:fa:a8:af:22:1f:d0:3e:1c:47:05:ca:
10:63:d8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:20 2026 by rpki-client