
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5C8FDDCFA1811ED90D18C3EC4F9AE02.roa
File: A5C8FDDCFA1811ED90D18C3EC4F9AE02.roa (raw, json)
Hash identifier: C09nJ2CnKXZwnLHDj7y2PS6iRtoQAn0l6UdixxD0gJI=
Subject key identifier: B2:93:5D:F7:BF:25:AB:33:3C:A3:88:A9:AD:FF:3B:D4:09:B9:01:8A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E8CD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5C8FDDCFA1811ED90D18C3EC4F9AE02.roa
Signing time: Sun 31 May 2026 17:30:27 +0000
ROA not before: Sun 31 May 2026 17:30:27 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 149560
IP address blocks: 103.185.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59597 (0xe8cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:30:27 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7033-3ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:46:ed:09:82:b3:f8:b8:60:2e:e8:e8:49:
80:82:ab:9d:17:2e:7d:b7:c2:e7:13:e1:ae:9b:89:
f3:c0:2a:c0:b9:36:f7:86:ae:37:e1:0f:74:35:48:
10:4b:b4:da:c4:7a:88:33:ee:90:d0:51:7d:50:48:
ec:51:e9:62:9d:08:5c:99:11:d4:d7:7f:9b:d6:68:
61:cd:ba:f3:f3:0d:bf:7d:b1:f7:95:c4:fb:bd:2c:
83:da:7c:24:9c:10:29:6a:24:16:6e:58:38:13:81:
f6:99:82:e7:17:a3:b5:aa:9e:18:0b:4f:01:26:7b:
63:e7:6a:4f:52:a1:94:d3:8c:06:19:ea:22:a4:22:
4b:08:bf:02:81:3c:1a:da:8d:63:15:0e:8f:34:8f:
01:d4:d0:49:15:ad:46:d5:e5:6a:89:dd:4e:a1:71:
d1:b1:24:ae:dd:1a:6e:7b:b1:1a:96:52:0f:a7:8d:
2e:bf:48:1c:2f:88:fc:5b:d0:37:f8:7a:83:54:ec:
e9:c0:dc:78:96:40:d8:b8:3b:6b:03:ca:85:fe:fd:
74:15:ca:14:a8:75:96:89:17:9f:66:cf:36:4e:ea:
72:db:2c:71:79:75:db:f1:e3:91:dd:76:69:ec:55:
58:e8:54:e9:4b:52:a4:29:53:23:42:ca:15:ad:e8:
dc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:93:5D:F7:BF:25:AB:33:3C:A3:88:A9:AD:FF:3B:D4:09:B9:01:8A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5C8FDDCFA1811ED90D18C3EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.185.104.0/23
Signature Algorithm: sha256WithRSAEncryption
32:79:be:a9:8c:5f:39:c7:b4:e8:40:e1:e7:a2:97:c6:26:a8:
11:1a:91:f6:22:50:f7:f2:2e:e8:db:c9:c0:31:be:d0:d7:82:
cb:18:8b:5a:aa:ea:5c:41:0f:23:95:b1:8f:aa:c0:68:3a:12:
93:b5:3d:39:9d:11:ed:9e:8a:b6:3a:57:ad:94:5c:b6:5a:5a:
43:fa:6c:e4:ca:8f:0f:22:ec:d0:fc:f6:22:90:60:ef:c9:39:
37:1e:f0:cc:28:0a:69:45:b4:6a:8c:22:9f:b8:cd:af:12:9c:
3b:6a:88:b5:7a:9f:dc:28:bd:a0:f5:3a:b1:bd:54:de:b2:e4:
8e:48:e2:5d:db:ef:62:14:4b:10:58:3d:3b:59:03:c1:97:bf:
4f:8d:32:61:88:5a:1a:e6:1f:41:76:8a:4f:1c:ea:1e:cc:b2:
0b:ff:44:c7:7c:bc:90:ba:d6:b5:04:9d:98:53:35:84:b8:2b:
ae:9d:c1:a2:dc:b0:7f:16:76:cf:37:55:26:d6:37:b2:2a:da:
66:f4:10:68:83:83:15:c1:69:4b:07:5d:14:4f:e2:5c:f4:61:
b8:36:12:9d:06:79:62:da:26:cc:3f:08:cc:6a:9f:d3:46:cc:
66:e0:e5:bd:95:ce:1a:3c:2f:ce:ec:9c:e2:a2:e9:40:1a:99:
ea:d1:d9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:02:42 2026 by rpki-client