
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A673E0B6146611EB9279264FC4F9AE02.roa
File: A673E0B6146611EB9279264FC4F9AE02.roa (raw, json)
Hash identifier: YJsFtsrp9pebh4afd+NEGMr6TZweyr3oQG1iZNRA7nQ=
Subject key identifier: 91:01:00:12:0D:96:57:F0:1D:28:8D:27:B7:DD:19:FE:25:72:65:BB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E1FF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A673E0B6146611EB9279264FC4F9AE02.roa
Signing time: Sun 31 May 2026 16:33:34 +0000
ROA not before: Sun 31 May 2026 16:33:34 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 132783
IP address blocks: 103.48.45.0/24 maxlen: 24
103.48.46.0/24 maxlen: 24
103.48.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57855 (0xe1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:33:34 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c62de-583a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:14:97:82:ed:98:31:18:29:3b:ab:c6:c9:
59:f8:77:b1:02:42:0a:86:d9:f2:83:97:05:3c:57:
c1:74:3d:c4:41:7a:3d:65:74:3b:a2:1f:bc:c0:ec:
dc:a6:a6:95:41:c6:77:27:ff:b3:ab:ee:41:7b:e5:
6d:35:58:85:30:4e:c7:78:2f:bb:34:b3:a1:f8:e4:
93:be:4a:03:aa:7d:0f:f1:4e:4f:88:7c:49:e6:03:
72:42:81:57:49:ce:79:e0:a0:50:2c:69:30:c4:c3:
e5:d6:4b:5c:23:1a:ab:68:ed:0a:71:75:e6:bd:bf:
28:4a:44:da:ce:17:bf:79:51:83:7c:19:9c:c9:f6:
a3:71:58:50:ff:17:e9:29:94:32:14:94:ca:aa:81:
20:f7:e6:e7:69:5e:f3:97:0e:48:0d:9d:89:56:3d:
2f:b5:88:44:5d:a6:95:03:a2:b0:c3:cd:2f:a7:f4:
4a:e1:0d:b3:3f:47:0d:a3:dd:d1:41:75:55:cd:02:
75:42:c3:3d:d8:fc:4a:38:48:85:dc:04:b4:9f:f2:
79:60:65:29:be:dc:08:fc:79:dd:ad:52:47:6c:4f:
82:e1:c0:03:a4:d5:25:f3:09:47:c8:74:4e:a0:74:
e4:22:1f:43:3b:ff:69:e5:53:e0:64:6d:00:38:63:
2a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:01:00:12:0D:96:57:F0:1D:28:8D:27:B7:DD:19:FE:25:72:65:BB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A673E0B6146611EB9279264FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.48.45.0-103.48.47.255
Signature Algorithm: sha256WithRSAEncryption
1b:63:bf:f5:52:a8:ac:9c:35:cd:bb:2a:a4:87:8d:ac:99:69:
90:1e:ef:00:8e:97:4b:95:ea:35:f8:fa:58:a3:e8:8d:4b:6b:
61:39:95:47:08:33:61:e0:b6:0d:ca:b8:dd:90:d1:9c:1d:3e:
ba:6c:04:90:d8:1f:5f:c4:05:7a:45:d1:63:6e:b2:8a:ad:d5:
bf:0f:70:34:8c:3e:ee:7c:e1:ec:80:18:eb:09:c1:fd:e7:c6:
72:22:c9:e4:61:d9:88:b7:23:42:6b:2f:92:f6:dc:bf:b7:54:
33:3f:d3:59:b2:58:e7:c9:f3:02:8d:04:93:6b:63:ff:f7:53:
f7:be:66:0d:a3:91:f7:b1:5c:bb:6e:ab:0b:15:4c:1f:81:cb:
8e:16:e4:99:af:4d:2c:ab:d3:6b:7b:0c:a2:91:c1:7d:a0:e5:
7c:bb:40:51:3d:9e:70:6b:e4:d7:c2:80:3e:98:8d:27:75:9d:
3b:ad:df:5e:d1:9b:60:bb:5c:02:2f:5d:0e:b4:08:19:81:99:
95:27:4f:d3:bf:61:96:3e:d4:05:f6:3f:15:55:f7:56:47:87:
fb:5b:f9:2d:73:c4:4b:15:c7:6f:db:9d:cd:7d:58:e0:45:f2:
14:65:22:89:40:4c:65:85:54:9a:6f:75:ba:24:e1:85:39:4a:
70:25:46:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:57 2026 by rpki-client