
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AA815CE2370111ECA56A865CC4F9AE02.roa
File: AA815CE2370111ECA56A865CC4F9AE02.roa (raw, json)
Hash identifier: x3X5ehb39JQstqk0AwpzSUjPwKOpVWQvE981bec8IkY=
Subject key identifier: 64:76:E0:FD:00:92:B6:12:DA:4E:07:65:76:C2:7B:E9:3D:4A:C2:58
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E807
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AA815CE2370111ECA56A865CC4F9AE02.roa
Signing time: Sun 31 May 2026 17:23:39 +0000
ROA not before: Sun 31 May 2026 17:23:39 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 146925
IP address blocks: 103.172.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59399 (0xe807)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:23:39 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6e9b-3e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:c9:fb:9d:0b:e0:a1:22:e1:b2:54:7d:14:
29:0b:bd:b5:5c:a5:27:c3:16:3f:f1:65:7c:38:fc:
f5:05:b3:fd:92:7c:3d:90:d2:e4:21:12:3b:99:c3:
84:af:50:d5:a6:43:8f:c9:c7:76:f1:b1:a9:01:a0:
c9:ce:ce:e9:1b:88:f2:f7:67:b7:97:34:79:bf:43:
13:2c:7f:8e:bb:36:25:22:b7:89:13:e9:1b:b6:cc:
b4:02:9d:67:e7:03:15:62:b8:3c:eb:1e:31:29:1a:
b8:62:2e:21:a3:e5:e0:28:54:a7:0e:4e:9f:10:e5:
7d:e6:de:cb:0e:c8:d2:e0:ea:f7:f4:ae:90:a0:63:
c5:c3:e2:26:69:47:93:82:5b:38:7b:a7:bb:59:3b:
ff:98:df:8d:25:65:e1:1c:f9:90:49:9b:92:c2:b6:
3a:af:7e:d2:6b:2c:65:58:5c:85:77:c8:15:66:8a:
c8:9b:ee:f3:d1:5b:7c:b9:2b:70:34:28:bf:f9:24:
71:5e:85:9a:1d:99:e2:74:de:cd:26:b1:b4:cb:ef:
18:78:73:90:27:9e:4e:2f:a0:79:c0:e0:b6:44:2d:
b3:8d:bb:db:9c:73:a0:8d:6a:73:d6:9d:e9:a4:15:
4d:97:3e:42:55:7e:c5:31:8c:a9:49:8b:93:55:e0:
67:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:76:E0:FD:00:92:B6:12:DA:4E:07:65:76:C2:7B:E9:3D:4A:C2:58
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AA815CE2370111ECA56A865CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.8.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b5:21:f1:2a:0c:00:d7:68:e3:b8:3e:10:71:53:e1:9d:9a:
d1:18:ec:44:de:62:65:7a:7b:68:e2:b5:e7:07:38:75:cb:6c:
ef:df:44:3f:73:7f:a1:ab:87:93:50:b1:3d:59:d9:6a:fc:7c:
ce:de:75:e6:a0:80:aa:75:1d:eb:88:88:e0:84:43:3d:cd:0d:
f3:2a:2f:4c:88:8b:c0:58:d3:65:86:4d:fe:b6:f8:76:06:e6:
e4:50:8a:82:c9:cf:52:87:a9:c4:89:46:b6:32:14:17:8d:d7:
c7:44:b3:c2:f4:56:80:e4:40:27:8d:ff:69:96:c9:81:75:79:
08:c0:f7:fc:58:35:0e:d4:04:9f:fa:4d:4d:67:ff:7c:70:34:
e3:c4:9a:fa:2d:05:b4:6d:bd:02:18:71:47:b3:4c:fb:bf:2c:
6b:3a:a3:81:0f:f1:f8:2f:cf:14:c7:6d:52:4e:e8:f6:19:0f:
66:a6:e5:aa:d2:9a:48:ed:13:9e:fe:b9:16:b9:f0:16:7e:8f:
89:75:4e:5c:05:a3:fb:0e:16:f2:16:62:02:4e:4c:9f:d1:16:
1c:04:d7:2b:c2:8c:b3:2d:da:27:1c:8b:1e:2f:3e:46:7f:a4:
ef:50:62:16:7d:34:ca:69:ec:50:8e:15:6f:ff:68:59:ed:50:
27:45:43:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:28 2026 by rpki-client