
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9BE04C4AB18911EC892E2662C4F9AE02.roa
File: 9BE04C4AB18911EC892E2662C4F9AE02.roa (raw, json)
Hash identifier: sZbTdhMPNHpd2jErhOMPKPOFr76wqRGthJMfuE70HhQ=
Subject key identifier: FE:1B:90:D4:89:B0:43:80:83:A3:02:2C:50:AB:6B:B2:F7:0A:F1:11
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E585
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9BE04C4AB18911EC892E2662C4F9AE02.roa
Signing time: Sun 31 May 2026 17:02:49 +0000
ROA not before: Sun 31 May 2026 17:02:48 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 137658
IP address blocks: 103.181.118.0/23 maxlen: 24
2001:df1:3540::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58757 (0xe585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:02:48 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c69b8-42e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:65:b2:4e:1c:47:c6:79:fb:bc:34:5b:a1:
c3:fc:76:aa:90:50:f7:fc:1f:7a:ba:45:00:da:ed:
d6:ac:2e:83:38:ea:f4:8e:dc:54:cd:6c:70:41:1d:
8a:1a:c9:11:70:d9:bf:0f:c3:31:59:cc:e8:e7:5b:
84:c6:81:a8:e8:9a:4c:6b:70:17:b1:9f:db:25:d6:
36:35:0e:50:1d:fc:82:3a:eb:b7:0c:39:4d:71:da:
b7:4e:c4:46:62:84:67:83:5c:8a:50:a4:87:05:8d:
0b:ea:9c:11:0b:cb:03:e3:02:76:fc:07:fe:bf:41:
71:1a:86:df:7b:8d:c1:2a:50:c4:0e:a3:6c:1c:a3:
a3:e3:41:82:52:75:45:cc:ba:c9:a6:43:43:ed:bd:
ae:33:fe:ff:05:30:95:34:52:c7:24:e8:ce:0e:48:
99:01:73:0c:6f:02:b0:b2:8c:e9:d1:6d:cd:94:5f:
d5:7e:42:54:11:cb:35:78:2d:6b:d6:90:51:5a:d6:
c2:3e:1f:b1:6d:5b:d4:a1:5b:2b:9f:3a:60:02:00:
50:8a:fa:5a:7d:6b:01:21:00:9d:43:ce:7c:de:96:
d6:4c:71:e8:1c:56:bb:ab:9a:3d:e2:69:c2:ea:f9:
db:11:c7:5d:06:6b:ec:3c:3f:8e:b7:3d:77:4c:ec:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1B:90:D4:89:B0:43:80:83:A3:02:2C:50:AB:6B:B2:F7:0A:F1:11
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9BE04C4AB18911EC892E2662C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.181.118.0/23
IPv6:
2001:df1:3540::/48
Signature Algorithm: sha256WithRSAEncryption
80:c5:83:4b:0c:05:58:46:ae:f7:2c:5e:0f:fb:c1:0c:84:36:
fc:43:b0:6e:28:f7:ad:66:7b:cd:3e:64:07:4b:57:91:87:46:
28:e7:c4:1c:fe:ae:8c:3b:fe:14:54:e1:3d:83:06:d1:14:68:
63:02:99:f2:8b:97:b0:a5:88:b5:00:27:b4:3c:b8:b6:99:e7:
e0:a6:0a:7a:91:4f:c3:a1:de:28:89:64:5f:90:93:c1:92:33:
64:3f:fd:8b:c4:d4:e6:80:40:1e:56:c5:fe:d8:4f:46:c5:e5:
c6:f6:d5:12:86:d4:89:d3:2e:ce:d0:0a:54:73:2c:5f:cb:46:
f0:ed:f1:44:11:8e:fa:08:95:73:4c:ea:b3:52:76:f7:e8:93:
24:20:f5:a4:78:d1:f7:5b:db:52:9a:c6:6e:91:c7:2a:91:eb:
e8:3d:e4:26:45:2d:38:f4:15:6e:6a:e1:c0:16:59:e0:db:98:
1a:7f:d8:b2:8c:06:f3:a7:e0:41:17:fc:a2:5d:1e:99:9a:f7:
37:62:03:66:80:35:16:cb:41:08:5b:0a:3e:9e:8b:02:9b:1d:
e6:06:8a:fd:15:b1:da:9b:2b:38:83:e3:6b:b5:75:4a:bd:07:
63:fc:68:5d:31:5b:d4:60:bb:77:6e:e7:df:4b:01:9f:81:72:
8d:e4:4f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:07 2026 by rpki-client