
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9C9FB3444C2E11EBBEF5052DC4F9AE02.roa
File: 9C9FB3444C2E11EBBEF5052DC4F9AE02.roa (raw, json)
Hash identifier: 7xWxoZkI0+Y++gXLFp0CRtQV8y6l+CUnjXHPPUtWIO0=
Subject key identifier: 1A:E2:76:19:81:E6:E1:21:43:B5:2D:79:26:1B:C4:E0:CB:14:57:4B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E6FC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9C9FB3444C2E11EBBEF5052DC4F9AE02.roa
Signing time: Sun 31 May 2026 17:15:07 +0000
ROA not before: Sun 31 May 2026 17:15:07 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 141487
IP address blocks: 103.161.42.0/24 maxlen: 24
103.161.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59132 (0xe6fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:15:07 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6c9b-8143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:82:3b:a8:c1:63:37:6d:13:0b:59:d6:7a:
f6:2f:e8:cf:89:69:92:74:fc:91:ae:38:87:99:95:
db:fe:92:0a:4b:1d:77:09:58:4e:02:7b:21:49:9c:
e4:09:58:f5:e6:9b:ea:a2:4f:6c:98:47:57:78:83:
70:3a:99:15:15:ea:e5:13:76:f8:20:68:08:59:81:
f6:02:ef:39:ff:be:27:47:a1:9f:48:52:25:d4:10:
e5:b8:88:2a:53:54:07:b9:be:15:65:00:cc:48:b1:
71:50:ed:e3:dd:8b:49:d6:9c:1b:59:93:81:78:d9:
a9:3c:45:5f:31:4c:30:cc:ce:bc:26:3a:5a:0d:39:
32:34:52:ef:fd:6e:52:42:5d:28:74:9f:98:8b:7e:
0d:96:f5:b9:62:26:96:79:6f:15:da:c6:a0:d2:c2:
7a:b3:30:2e:4c:f2:05:e9:8f:53:8a:fa:55:a2:3d:
a4:76:a1:cd:a4:c9:3d:c9:67:f2:20:9c:b7:16:d2:
da:0e:c6:61:cd:4b:67:7b:c1:b3:e2:5c:be:bb:ae:
e0:d9:6f:8f:76:e4:da:12:5a:cd:1c:8f:82:c9:d1:
b4:3a:43:53:cf:f4:79:41:60:a6:e6:e2:6e:52:ee:
82:13:fc:9f:58:a5:28:1f:e9:17:a7:9d:47:76:ad:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E2:76:19:81:E6:E1:21:43:B5:2D:79:26:1B:C4:E0:CB:14:57:4B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9C9FB3444C2E11EBBEF5052DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.161.42.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:2e:06:6a:29:2c:82:04:dc:71:50:29:3b:3a:44:74:75:b5:
cc:f6:4b:45:58:b5:a8:92:b3:51:87:12:3f:59:5f:79:a5:c2:
66:00:4c:42:7b:48:6d:6d:28:23:65:74:48:fd:77:b7:c4:70:
8f:12:86:04:6a:77:71:e8:13:1f:04:e0:22:4b:29:31:d1:8f:
3d:fc:99:05:4f:42:c4:35:b4:70:5a:f4:90:33:28:26:57:45:
99:7c:f5:6c:89:fd:2a:29:0e:04:c4:32:eb:20:ff:23:52:4e:
29:8f:3f:8a:5e:7e:1b:e9:39:a9:07:7c:57:8a:0b:32:4b:ef:
f0:d1:79:a0:cd:22:27:ba:08:e5:2d:30:2f:dc:68:03:5b:af:
1f:dd:cd:92:bd:88:f4:15:c7:92:8c:f3:19:b1:6b:86:7a:84:
3f:88:89:54:fb:30:62:ee:59:b1:99:89:c4:85:7f:b7:55:c3:
09:02:da:4a:79:3c:01:b3:10:2d:f4:9e:85:57:c0:38:ed:db:
26:fb:81:e4:fa:22:cc:91:4c:82:7b:10:f6:34:42:e7:13:65:
60:1c:63:df:cb:6d:67:99:87:b3:30:23:cc:a7:46:c3:e7:3a:
82:62:74:0b:4e:05:b6:c8:a2:ed:9f:47:ba:f4:fd:03:55:76:
79:c9:22:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:14 2026 by rpki-client