
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/987C91E639CA11EF91621E57C4F9AE02.roa
File: 987C91E639CA11EF91621E57C4F9AE02.roa (raw, json)
Hash identifier: 9EF0z7B2PgWdpEmlafwTbiaHVoT1tQn2gGOlYvKVcM8=
Subject key identifier: E8:B3:32:AF:14:CD:7F:A6:15:7E:6F:51:ED:B9:B2:33:F4:D6:CD:11
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E3DD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/987C91E639CA11EF91621E57C4F9AE02.roa
Signing time: Sun 31 May 2026 16:49:03 +0000
ROA not before: Sun 31 May 2026 16:49:03 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 135686
IP address blocks: 103.69.44.0/22 maxlen: 24
2406:29c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58333 (0xe3dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:49:03 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c667f-7fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cf:ad:79:ae:43:f6:fc:7c:03:38:53:9d:b9:
98:0e:76:fb:8f:49:7c:9f:f8:55:e4:1c:2e:4e:46:
01:94:51:06:52:92:1a:82:03:dd:22:db:05:83:4b:
3b:a7:98:d3:6e:43:d7:c8:33:9f:8b:3e:cf:fa:69:
77:85:bd:37:f1:fc:24:85:c8:9d:97:dc:d6:a7:f6:
d6:7b:30:53:69:67:47:67:3f:2f:81:59:98:b0:cc:
b2:4e:26:c0:bb:62:e4:55:a6:ac:74:eb:ae:38:5f:
50:a8:4a:a4:5f:ee:a1:39:c9:bf:7b:50:b6:a3:1a:
81:3e:d3:fe:19:cb:6d:2c:30:6b:73:8c:28:8d:30:
23:88:41:81:09:e5:0a:28:0d:34:3f:30:39:e1:d5:
c9:69:fa:ea:50:31:a3:7d:36:66:51:33:93:df:d6:
71:43:e8:5c:07:58:1d:52:ff:1d:21:3b:b4:2f:2b:
41:ee:dc:0d:b5:ce:74:d0:27:03:7c:cd:96:ea:d8:
44:8f:3d:9d:df:25:1d:3f:37:17:75:63:4b:94:33:
c6:5c:62:6e:a7:d4:b4:e6:69:e5:b1:1d:b7:e1:47:
97:c7:d7:ae:e8:48:60:8e:d8:80:d7:65:fc:22:a2:
62:44:78:31:03:e0:6b:7d:6a:c5:06:cd:e9:ae:cf:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B3:32:AF:14:CD:7F:A6:15:7E:6F:51:ED:B9:B2:33:F4:D6:CD:11
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/987C91E639CA11EF91621E57C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.44.0/22
IPv6:
2406:29c0::/32
Signature Algorithm: sha256WithRSAEncryption
23:f3:9c:ff:f9:a2:a3:f7:07:cf:76:4c:de:62:8b:95:2d:51:
17:c5:ab:f0:d4:29:81:c1:d3:26:e8:63:ae:2e:5b:6e:61:55:
78:7e:15:54:9e:fc:21:d0:72:b2:9f:29:22:e2:97:64:e3:94:
04:0f:83:64:f8:fb:ae:5f:19:53:19:47:55:51:0d:c5:26:1d:
30:6b:78:17:2b:83:18:b0:00:21:60:2e:89:56:be:b4:a0:dc:
f4:7a:d6:e0:24:b5:ed:5d:ae:aa:09:b0:18:84:c2:61:60:f1:
96:11:2e:0f:ed:85:23:4a:ed:91:0b:38:76:d5:d5:fe:1b:1f:
93:96:e5:8d:15:9c:49:61:74:04:2e:f7:12:d2:45:66:69:c8:
27:36:ff:d6:9f:2f:f6:5e:13:07:77:e1:1f:85:94:ef:0c:69:
51:ff:08:d2:06:78:3c:5d:d6:27:74:63:49:63:c7:f5:9a:46:
13:57:58:bc:1d:d2:31:85:01:5b:b7:50:a5:e7:e4:ef:c1:30:
96:bc:02:a7:d3:c9:b1:05:b6:8c:1e:0d:d4:0a:e3:73:05:02:
df:d7:91:93:6d:46:c6:41:c5:28:83:f0:e8:a8:c3:58:10:10:
d9:9e:8a:ee:0d:99:d2:ba:ef:6b:9c:d2:c9:84:63:c9:5f:f3:
c9:90:3c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:13 2026 by rpki-client