
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A11514B4B37411ED87DE486DC4F9AE02.roa
File: A11514B4B37411ED87DE486DC4F9AE02.roa (raw, json)
Hash identifier: f1F5GlHEM8KzFMfCgpLddZWX73I4OIEV22S+TtNdVx8=
Subject key identifier: 5C:14:02:21:F5:C6:7A:FC:F0:3F:D1:BA:89:F6:1C:D9:1C:9A:DD:C7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E55A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A11514B4B37411ED87DE486DC4F9AE02.roa
Signing time: Sun 31 May 2026 17:01:21 +0000
ROA not before: Sun 31 May 2026 17:01:20 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 137594
IP address blocks: 103.129.108.0/22 maxlen: 24
2001:df1:9040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58714 (0xe55a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:01:20 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6960-71f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:85:a3:44:a6:bb:e2:18:5a:36:0d:9e:99:
4e:dc:5f:c9:18:9b:6b:c3:9d:2e:03:71:4a:15:76:
5c:73:de:b4:7b:2c:1e:f3:69:02:0f:50:4c:99:2a:
a9:b8:fb:b9:44:26:51:f5:ea:0d:57:9d:58:3a:ff:
7c:2b:d1:69:1c:0a:ad:3f:40:e5:6b:ca:e5:58:12:
c1:83:99:ee:0c:f9:f5:d2:a3:80:f6:70:65:01:a6:
e6:78:39:f6:68:5d:d7:18:dc:51:69:a6:8e:67:49:
63:55:50:dd:1c:29:c1:58:94:48:74:53:78:e8:1a:
27:3f:0f:01:b2:01:72:0b:84:83:d6:a6:32:df:8c:
a6:70:8a:37:97:3e:81:3f:ac:cf:4d:8c:40:78:7b:
ef:e8:a3:89:01:36:33:0a:10:3d:af:b0:58:e2:c0:
fd:b6:47:8e:34:c4:45:91:27:18:fa:1b:a2:31:2d:
ec:a4:5c:43:df:18:35:18:15:eb:b3:67:42:ce:9c:
53:09:2b:c4:b9:6d:67:2b:02:5b:36:cb:55:94:a1:
32:0d:eb:6c:cd:4a:93:87:bd:92:e5:01:68:13:6d:
5d:f4:fd:24:26:cf:44:7a:75:96:19:4d:08:91:1f:
bf:71:12:93:ba:ac:0b:28:7a:8a:55:e6:94:e5:25:
61:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:14:02:21:F5:C6:7A:FC:F0:3F:D1:BA:89:F6:1C:D9:1C:9A:DD:C7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A11514B4B37411ED87DE486DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.129.108.0/22
IPv6:
2001:df1:9040::/48
Signature Algorithm: sha256WithRSAEncryption
77:db:bc:f5:ac:2a:d5:ae:f4:07:0d:08:4d:2c:f0:8c:26:92:
6c:d4:d0:38:6a:04:fc:5a:8b:5d:a5:a6:ea:7f:84:42:74:54:
c5:cc:6e:2c:21:24:0f:56:c3:03:fb:e3:13:a7:81:c8:7e:16:
15:9f:6c:02:1d:f2:6d:ea:a5:ab:93:5e:e7:79:23:98:b2:69:
8d:dd:7e:1e:f5:e7:f8:c6:ec:99:2b:b5:bf:4d:9f:15:9a:1a:
31:5d:37:26:bd:bb:eb:ab:7f:0d:9a:71:fb:98:40:53:b7:89:
1e:d6:ca:10:ed:c5:fc:8c:08:e8:9b:8c:10:87:a0:e7:8d:1e:
82:ea:ff:e8:da:86:94:e6:fc:91:3d:2a:38:8e:ed:96:c8:48:
50:19:d0:ad:d9:1b:c5:5f:24:61:63:6f:c7:cd:d7:2c:b9:5c:
9b:f3:30:5f:1f:29:30:9b:75:72:f2:ba:54:cb:5c:fc:24:2a:
b9:f9:8f:cb:b0:7b:c4:55:5a:ab:8e:56:32:7a:a5:9d:29:17:
ae:d2:4c:10:aa:f3:91:4f:85:8e:4e:9d:21:b8:8f:cf:f5:13:
af:f2:1d:ad:81:54:0b:d5:ac:f7:e6:5f:21:86:b4:c8:84:86:
21:0f:6b:4f:f4:df:e9:84:6a:ce:15:9b:e0:c7:dc:c0:4c:2c:
7f:13:e6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:25 2026 by rpki-client