
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AB93EEC0A7CD11EF97E9412CC4F9AE02.roa
File: AB93EEC0A7CD11EF97E9412CC4F9AE02.roa (raw, json)
Hash identifier: pMkd1DnkkTAK+pgxtc4+T23cAULeDJTt9QKOYS8D8g0=
Subject key identifier: 60:E1:2A:62:9E:15:7B:24:1C:34:F1:36:63:27:8F:AC:3E:E5:C8:7E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E251
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AB93EEC0A7CD11EF97E9412CC4F9AE02.roa
Signing time: Sun 31 May 2026 16:36:14 +0000
ROA not before: Sun 31 May 2026 16:36:14 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133257
IP address blocks: 103.121.68.0/22 maxlen: 24
2001:df6:ac0::/48 maxlen: 48
2400:9d60::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57937 (0xe251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:36:14 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c637d-4dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:07:ab:1b:d3:a9:95:4d:77:dd:e2:e4:ad:69:
55:e5:f4:94:cd:fb:3b:fd:51:ca:e2:4f:db:36:a4:
77:37:d0:dd:78:1b:b7:a2:fd:e9:f8:d0:74:95:c3:
b1:3d:b7:48:76:80:0a:92:e4:6b:cf:c3:34:da:8f:
1c:0a:87:ac:d1:b5:a8:10:92:0e:91:5a:ee:a7:45:
2e:56:3e:ac:ea:97:65:6d:76:14:a0:33:e2:f1:6c:
d5:8b:ab:dc:b0:a7:17:f9:bc:35:f1:d5:63:a8:de:
3a:e9:ea:aa:af:39:13:c7:f4:eb:fa:ad:a3:fc:f0:
4b:a7:aa:80:60:a2:13:59:2d:f0:0d:78:ca:9e:3b:
ed:d5:3b:50:d5:4a:82:77:12:5a:d0:94:1f:50:27:
5f:75:a8:02:58:bb:06:95:7c:1a:6f:e9:1d:69:91:
2a:d8:96:22:de:f3:b9:fe:22:a8:ac:45:cc:8e:06:
0c:7d:1c:f8:c2:ec:5f:fc:88:cf:43:20:ab:84:d1:
27:f3:e0:66:9d:bd:4a:a7:94:90:47:12:ef:31:91:
0e:a0:89:67:1c:f7:04:64:38:52:9b:ee:29:42:df:
0a:0d:36:34:c6:36:b4:03:36:27:d1:53:6d:89:a6:
3b:88:53:38:1e:47:b4:2a:5f:59:71:43:13:6b:68:
bc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E1:2A:62:9E:15:7B:24:1C:34:F1:36:63:27:8F:AC:3E:E5:C8:7E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AB93EEC0A7CD11EF97E9412CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.121.68.0/22
IPv6:
2001:df6:ac0::/48
2400:9d60::/32
Signature Algorithm: sha256WithRSAEncryption
34:f5:d6:67:f8:5e:aa:dc:4f:bf:e7:cb:d3:1b:2d:7c:14:13:
fd:83:93:bb:85:df:e4:60:a6:aa:bd:94:83:e3:a9:60:af:2d:
96:39:b6:92:67:8a:3b:c5:37:42:db:86:50:66:f8:3d:1d:fd:
f1:79:cb:03:4f:31:56:93:c1:f0:48:40:1b:3f:13:12:f9:21:
04:8e:00:ec:48:c8:48:11:d5:07:5c:a9:58:5c:7c:88:cd:de:
98:17:44:99:2c:38:cc:0d:bb:0c:18:c5:66:94:0f:e9:27:90:
24:c4:e3:2a:e1:60:5b:7b:38:1d:49:ea:d2:4b:19:7d:37:16:
b1:39:22:99:0e:c8:e9:d6:1c:c8:a2:52:6f:ce:0e:8c:ad:e0:
2f:47:8f:62:47:8c:f4:80:9d:9b:10:9c:94:17:fe:d3:1b:2a:
7e:23:7e:cf:cf:30:3b:f3:5c:15:e6:38:7b:59:75:df:1a:6a:
e2:8b:2b:04:3c:cf:95:d6:b1:53:4f:0a:45:5b:69:4a:c6:72:
a6:39:5e:eb:c2:2c:08:79:ce:06:1d:53:1d:1e:97:c2:3a:d8:
47:cc:98:51:e8:84:42:3a:2c:e2:5b:c8:53:46:fc:81:02:0a:
ba:7f:4f:a0:43:00:ee:f9:94:03:ff:10:87:85:db:e8:0c:e8:
98:c2:b7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:16 2026 by rpki-client