
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A71F30AEEDFC11EBB3FCC283C4F9AE02.roa
File: A71F30AEEDFC11EBB3FCC283C4F9AE02.roa (raw, json)
Hash identifier: GW6FLgF5lw3tqG9TWXJE6mmHpmtEZqHSV/YEY+hOz+E=
Subject key identifier: E2:98:F5:37:15:33:A5:0C:F5:A7:E9:0A:E3:54:68:0D:7F:E4:3D:81
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E76C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A71F30AEEDFC11EBB3FCC283C4F9AE02.roa
Signing time: Sun 31 May 2026 17:18:45 +0000
ROA not before: Sun 31 May 2026 17:18:45 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 141846
IP address blocks: 103.97.226.0/23 maxlen: 24
103.166.14.0/23 maxlen: 24
103.233.218.0/24 maxlen: 24
103.233.219.0/24 maxlen: 24
2001:df2:5140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59244 (0xe76c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:18:45 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6d75-9e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f4:ed:2a:c5:3e:e8:c2:51:78:9b:27:35:b5:
d8:3c:da:40:d6:1f:16:0e:7b:e1:fd:29:b2:c6:10:
ff:07:78:a7:2b:b1:62:f8:69:c1:a4:f0:f8:d2:c5:
35:70:7a:1e:73:8f:77:f9:6a:b3:0e:20:45:1a:3c:
07:4d:54:59:57:92:3a:d3:ad:61:35:f3:19:a8:ad:
ba:a3:fd:5d:d9:8b:8b:71:08:68:ea:59:e3:df:c3:
e7:ed:b3:c5:f1:5e:82:d4:47:1a:10:b5:23:a0:d1:
c1:d2:9c:19:34:38:32:54:37:09:d6:8c:85:63:e1:
b0:be:15:1c:62:a5:a3:13:a4:8c:76:a7:66:a9:b4:
7a:fe:d0:51:e9:15:db:81:0c:6a:66:56:24:51:f7:
0f:57:16:6b:f5:e8:1d:37:09:25:d2:a5:af:8d:f5:
eb:01:88:f7:b6:26:da:81:cd:ae:9a:6b:29:6f:1a:
86:07:9d:98:9a:d2:3a:af:67:49:e9:eb:6d:04:d2:
22:34:d9:4b:0b:5e:e6:22:74:8e:3a:f5:73:f9:59:
6b:bb:cb:a7:0c:44:7d:64:6c:23:d8:3b:ec:11:cb:
d4:5b:e2:10:d0:47:6f:c5:ed:ec:54:d7:b2:ba:48:
1d:b1:05:67:d0:1f:7f:d5:46:32:9a:16:ef:f5:7e:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:98:F5:37:15:33:A5:0C:F5:A7:E9:0A:E3:54:68:0D:7F:E4:3D:81
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A71F30AEEDFC11EBB3FCC283C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.97.226.0/23
103.166.14.0/23
103.233.218.0/23
IPv6:
2001:df2:5140::/48
Signature Algorithm: sha256WithRSAEncryption
69:c4:ef:a5:42:49:b5:eb:e2:50:94:a4:52:a5:f7:14:83:e5:
a4:fb:6a:89:95:1b:a7:4d:34:78:29:31:33:c6:4c:31:13:e0:
cf:c7:21:c9:95:a1:30:64:3b:09:07:3c:b3:97:b6:c2:c5:0f:
84:0f:65:68:34:49:9a:8e:05:62:b1:93:c2:6b:c7:ee:b2:a5:
a3:80:8b:2c:85:56:a5:f2:71:e0:41:36:05:73:90:ff:52:c4:
46:66:e8:10:cf:6a:ce:4f:fa:ce:ab:cd:a0:5e:d8:3c:6f:13:
f5:d1:27:66:d9:ce:eb:d3:4b:98:1e:15:dc:cd:46:dd:46:99:
af:f3:df:5f:fc:cc:ea:57:e0:80:2e:7f:33:e0:15:d1:a4:f5:
0a:f8:c2:1a:bc:af:ae:7f:63:ef:e3:10:06:cb:60:06:6f:a8:
dd:12:b2:8a:fe:97:d3:85:cf:6e:96:6b:7b:7d:24:0d:47:81:
1f:2c:08:54:df:2b:c0:fd:82:77:97:a6:4c:c5:fb:a8:69:ab:
bd:64:d5:3a:50:35:f8:f6:81:c4:19:83:a8:91:b0:1e:76:98:
ff:cb:5a:e4:de:17:55:f1:ae:17:19:3e:b5:23:04:62:c9:f1:
e5:ce:20:1d:ca:67:2f:bc:99:41:3b:14:b9:cf:e7:cd:ef:1d:
3a:a0:ed:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:44 2026 by rpki-client