
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/899B410E613D11F0AE6DFA35C4F9AE02.roa
File: 899B410E613D11F0AE6DFA35C4F9AE02.roa (raw, json)
Hash identifier: DGmqC7N7OXjKlIeb8bGAK+4SnUW8jDPIWL8vjhyIf4c=
Subject key identifier: 10:F2:2A:D6:F3:B5:2B:52:83:81:48:7F:76:68:EF:76:33:04:6C:3F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E26C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/899B410E613D11F0AE6DFA35C4F9AE02.roa
Signing time: Sun 31 May 2026 16:37:06 +0000
ROA not before: Sun 31 May 2026 16:37:06 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133299
IP address blocks: 103.187.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57964 (0xe26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:37:06 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c63b1-e641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:3c:48:97:f9:33:1e:57:bb:7a:ae:cf:f0:
a3:31:63:c9:f3:35:a2:5f:fe:be:74:a8:76:a6:de:
52:80:08:07:11:4e:99:d1:4d:fe:32:c6:bc:9d:bd:
b9:ad:a0:d4:92:70:bf:3e:2c:94:46:58:c1:67:f8:
47:c2:13:62:53:f9:f1:f1:19:77:d1:97:5b:ae:ca:
a8:b6:c6:72:1d:b9:3a:47:cd:e9:e5:60:f2:43:d4:
1d:16:6e:41:5b:08:3e:68:77:35:f7:b9:50:0f:cb:
2e:96:af:73:73:5c:f1:0b:23:23:52:49:bf:13:9d:
bd:c5:1b:bb:d8:b4:88:86:f0:f9:95:d5:a8:72:ba:
c7:b7:79:07:fb:ea:d9:14:56:5e:7b:cc:62:56:db:
ac:63:66:0d:2b:ce:4a:97:a3:2d:81:42:4d:8b:2c:
a6:6b:bd:2d:df:2a:77:66:c5:a6:2f:01:07:f3:37:
3e:05:d0:0d:84:f5:62:39:35:af:3a:bc:33:3e:da:
d1:ef:cd:8f:dd:36:e9:70:da:c0:5e:3d:6e:47:34:
a5:6d:30:c7:f0:82:2d:74:76:f5:df:53:18:7d:88:
9d:92:2d:f3:03:40:69:85:16:8e:ab:55:b0:e7:8b:
a6:3e:5d:42:d2:24:e3:fc:de:1f:62:45:e8:9b:03:
16:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F2:2A:D6:F3:B5:2B:52:83:81:48:7F:76:68:EF:76:33:04:6C:3F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/899B410E613D11F0AE6DFA35C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.187.18.0/23
Signature Algorithm: sha256WithRSAEncryption
76:44:06:ac:4c:dc:d1:d7:89:4f:e4:5e:63:ef:42:3c:a6:9a:
e9:6a:ea:df:d5:32:db:a6:90:03:15:b9:c2:26:f3:db:da:f9:
39:a2:23:89:68:58:98:8c:1b:e2:15:29:25:ac:4c:3b:ce:64:
cf:b1:55:4a:b2:36:ac:b7:c6:69:5b:1c:ab:d4:f8:47:72:bf:
b3:18:e8:b7:69:a2:53:35:92:35:7f:ce:01:1d:f2:c3:7a:19:
0e:12:7e:ae:0c:92:4a:93:2e:e9:f0:8a:9e:7e:48:94:04:bd:
82:0a:35:77:07:43:12:2f:ad:ad:2a:f8:c3:c4:46:06:47:f1:
69:f0:ab:89:10:28:ce:f9:f7:53:1b:66:38:61:12:b4:ec:d5:
ed:a8:b0:3f:4c:fb:ae:32:d4:36:a0:77:43:e7:0c:eb:db:5b:
1d:18:42:57:ba:1a:a4:3f:ad:20:4a:39:42:ce:1e:0a:de:2f:
9e:5e:dc:ce:7f:2d:27:a5:a7:82:4e:78:d2:ec:8c:9e:d5:66:
3c:eb:aa:33:6d:fe:61:80:90:76:60:05:c9:e1:8a:b0:42:d8:
a5:90:91:ce:50:c7:7a:47:55:04:69:6e:75:11:a3:10:34:55:
20:69:19:ad:ef:7a:ed:34:96:32:a2:63:2e:9c:06:c4:43:2b:
50:8d:ad:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:08:05 2026 by rpki-client