
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8DF09804032711F084421860C4F9AE02.roa
File: 8DF09804032711F084421860C4F9AE02.roa (raw, json)
Hash identifier: dKybsm1yOedGU5sUh5rk/9cYzPjzBT2hVirhdBiIkGw=
Subject key identifier: B1:28:2A:E0:0A:1D:C5:5B:B8:93:F1:92:3B:DE:39:3C:51:FE:29:BB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E5C1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8DF09804032711F084421860C4F9AE02.roa
Signing time: Sun 31 May 2026 17:04:44 +0000
ROA not before: Sun 31 May 2026 17:04:44 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 138279
IP address blocks: 103.127.188.0/22 maxlen: 24
2406:68c0::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58817 (0xe5c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:04:44 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6a2c-a8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:86:33:32:fd:0b:dd:ab:47:15:3b:95:a6:80:
52:30:07:1e:f2:53:53:f1:0d:dc:8b:60:3e:4a:1a:
bb:ba:8e:4a:fa:c0:48:fc:6a:8e:ef:01:90:b3:3d:
2e:34:93:18:31:72:a0:02:0d:f1:41:50:98:d5:82:
5e:71:e0:0d:b9:23:9e:aa:70:09:21:84:9a:dc:76:
91:c8:8c:e2:27:4b:70:99:b2:27:b3:50:5f:9d:09:
80:39:ed:7d:1f:e3:dd:a2:58:1d:1a:8e:de:b5:54:
42:85:fb:90:0f:67:3a:2a:25:74:41:20:54:d3:39:
0c:24:5d:c1:27:ed:e2:26:98:cc:00:50:c4:c2:45:
51:df:5b:2a:16:b5:d9:d0:41:4e:04:d1:03:57:4f:
8d:31:25:4d:2e:46:0b:e5:a1:ae:c5:2c:14:90:cf:
2a:d8:04:08:1f:09:3f:d0:b3:75:dc:ec:15:23:63:
87:00:b2:a3:32:7d:7f:c6:c5:ae:fc:a4:3b:53:53:
26:33:b6:3c:40:b9:70:dd:de:8a:3d:1f:bc:1b:39:
06:fb:29:9c:66:39:1e:11:97:4c:0a:50:bd:27:08:
01:25:7c:f2:85:5f:45:de:f2:7a:81:a8:e4:e4:e2:
53:7c:2b:ec:cf:8c:6b:c7:12:20:7c:b0:e5:8f:87:
35:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:28:2A:E0:0A:1D:C5:5B:B8:93:F1:92:3B:DE:39:3C:51:FE:29:BB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8DF09804032711F084421860C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.127.188.0/22
IPv6:
2406:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
7e:5e:22:47:85:2c:62:45:3c:59:3b:89:f3:5d:ce:79:f1:03:
47:22:10:57:9d:8e:58:9e:5b:c9:aa:f9:b3:9e:b4:01:03:1f:
c7:87:c5:51:13:bb:10:76:ef:b3:45:10:13:4f:e5:f5:91:1a:
ea:aa:4a:0b:d8:25:93:d2:d3:9a:cd:73:e8:23:9c:1d:4b:16:
93:96:c2:55:95:32:9a:a3:8b:78:ef:9d:95:c9:b6:01:32:ea:
73:c7:70:0a:c4:f0:e8:87:45:c5:a4:6d:99:de:1c:45:b0:de:
f6:73:65:03:9e:05:ec:4c:81:57:f9:68:68:57:18:f5:3b:7b:
88:d1:09:ad:14:73:40:92:38:06:ea:52:8f:f6:d0:09:58:b2:
41:a8:ff:1f:03:02:ef:38:56:ff:c2:f4:63:52:8f:a7:09:a6:
c1:3d:6d:6a:9e:3b:32:46:bd:bb:61:7b:86:79:bb:da:c1:70:
9f:4c:6d:fb:82:89:d7:79:39:b7:6d:6a:ec:b6:e2:56:a2:3b:
f9:a0:bb:7b:c8:16:22:85:fc:37:6a:22:04:c8:11:2c:68:99:
34:b1:0b:44:6f:14:54:ab:46:5a:9e:2f:43:03:7f:37:f0:eb:
f7:b7:eb:67:a6:8e:70:cc:01:8c:6d:23:92:c0:c0:35:cc:eb:
7c:0b:51:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:19 2026 by rpki-client