
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A79EE6C4321C11F09F67030DC4F9AE02.roa
File: A79EE6C4321C11F09F67030DC4F9AE02.roa (raw, json)
Hash identifier: oY51NOrvc3Vwb+jhx4SvUuwvXAISFeYr2ulZ5pM3K6w=
Subject key identifier: 5D:8B:C7:C1:51:99:89:B6:17:C5:0D:DF:02:BF:4C:73:D0:14:53:D5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E2D0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A79EE6C4321C11F09F67030DC4F9AE02.roa
Signing time: Sun 31 May 2026 16:40:19 +0000
ROA not before: Sun 31 May 2026 16:40:19 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133995
IP address blocks: 103.53.21.0/24 maxlen: 24
103.109.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58064 (0xe2d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:40:19 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6473-6908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fc:5d:3f:74:70:8c:06:0f:6b:d0:da:49:d8:
00:cb:97:48:13:8e:9f:f4:e4:b5:4c:5f:f7:db:4d:
92:ba:07:2a:86:5c:fd:31:63:3d:8e:3d:f5:04:73:
f3:15:13:01:65:93:dd:40:a2:5e:1c:4a:49:95:75:
f7:92:5e:8d:bd:0b:a1:de:f5:0d:f8:fa:8f:f1:33:
d3:07:1b:76:3d:99:c3:55:be:5f:6a:f4:c6:24:8b:
fa:4f:0d:f6:a8:04:8e:84:bb:7b:aa:43:4a:47:6e:
b6:3b:d7:eb:45:b0:56:1b:32:c6:3f:47:13:fd:5d:
ec:03:04:ae:4c:71:c7:0e:8e:5b:c7:31:5b:b4:21:
c7:94:bf:e0:36:08:2a:e6:80:25:4b:5d:a9:10:37:
64:3f:53:4a:ad:65:b1:d3:90:65:63:62:fb:50:65:
48:e9:81:81:07:ae:e1:6f:7c:7d:60:7f:d2:5c:ec:
b8:36:38:7d:2c:8d:d8:b5:c8:59:42:4d:85:06:8a:
d2:d8:e3:aa:c8:bd:b2:44:10:d2:ae:9d:b8:be:bc:
c9:2f:30:95:da:e8:90:e8:96:56:64:70:33:bc:2f:
f3:7f:d1:99:0e:8c:37:1c:36:1c:4f:68:0d:17:5f:
15:4b:01:35:1b:b3:65:ee:9e:2d:1b:52:95:86:38:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8B:C7:C1:51:99:89:B6:17:C5:0D:DF:02:BF:4C:73:D0:14:53:D5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A79EE6C4321C11F09F67030DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.53.21.0/24
103.109.211.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c6:56:2d:8f:e9:9e:19:cc:79:a2:3e:e3:75:db:1c:55:5a:
8e:b8:a5:dd:fb:e8:68:68:14:71:d7:7c:05:93:84:42:19:6d:
d0:5c:20:d4:38:84:f5:31:98:5f:01:16:6a:c4:69:e1:1b:91:
94:ac:a6:8a:ec:3f:35:06:13:80:e0:3e:e3:73:ab:f5:9f:e0:
78:3c:c7:1b:c2:f0:57:6f:34:f9:a9:67:3b:52:a5:71:d0:c2:
68:bd:61:4e:a9:a2:7f:7f:3e:db:56:55:af:51:a4:dd:fc:b7:
95:44:e0:15:6c:e8:3b:05:dc:cf:07:68:b0:67:d2:f8:6f:ba:
4b:9c:32:88:8e:7a:2d:ee:23:cf:84:fa:cf:31:22:70:0e:59:
e6:4f:72:e6:76:45:e5:0a:8d:9f:b1:c0:c4:0a:b1:83:04:68:
15:4a:8f:39:10:8d:6f:eb:4f:fa:1f:30:aa:b5:67:b9:df:07:
67:b4:97:17:84:27:7e:68:b7:a6:bc:8b:22:2a:9b:bf:45:8e:
5c:9d:08:80:59:08:f6:6f:d0:e4:36:99:08:76:d3:54:27:83:
50:fb:da:50:a5:08:c5:26:17:27:d2:3d:0e:34:f1:dd:2d:ac:
c3:03:d9:75:53:cc:84:7b:f4:c5:23:16:57:65:5b:52:6e:bf:
1a:28:1b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:29 2026 by rpki-client