
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC5648F2A40811EBB35F484FC4F9AE02.roa
File: AC5648F2A40811EBB35F484FC4F9AE02.roa (raw, json)
Hash identifier: XJq5YEstnjxgtOFWmXfKTR9p5UvTfy8MxPTxgHp+l/4=
Subject key identifier: 89:B0:56:DE:0A:A1:CA:F0:C8:97:F6:46:90:6C:A1:6D:F9:D6:8E:E1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E3AE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC5648F2A40811EBB35F484FC4F9AE02.roa
Signing time: Sun 31 May 2026 16:47:32 +0000
ROA not before: Sun 31 May 2026 16:47:32 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 135216
IP address blocks: 103.75.156.0/22 maxlen: 24
2400:1720::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58286 (0xe3ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:47:32 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6624-7820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:51:5f:24:33:bf:24:a7:f4:f8:5d:66:db:c6:
ca:40:5c:e2:45:7b:42:59:c1:3c:1e:85:96:22:5a:
cb:9a:82:b4:c7:85:61:29:a7:c4:7a:2a:b9:1d:fd:
90:69:65:1f:d4:02:e5:32:7e:ca:a4:3a:2d:90:41:
6c:f2:1f:40:5f:2b:2f:34:ea:68:3e:a2:c0:f1:9e:
65:b0:1f:54:cb:3a:b6:b3:6e:64:57:22:f1:3e:34:
09:5e:5f:6e:50:c8:ea:66:86:56:00:9d:7f:75:ab:
18:ca:e3:60:38:29:f4:b4:09:db:b9:b7:fe:b9:1c:
66:52:33:a9:d5:49:4e:b1:19:15:f6:ca:23:87:43:
4f:8e:25:3b:68:7c:c5:0d:42:69:52:da:d4:c1:2f:
1d:a7:96:44:db:37:0a:c2:24:cf:86:13:47:a1:66:
df:ef:ff:43:d8:96:df:e8:bb:6f:88:67:9b:94:93:
09:05:77:30:41:23:98:ef:1f:b4:f3:06:90:70:b9:
51:ef:78:93:9f:b6:00:c4:d7:aa:19:16:b7:24:8c:
9d:a8:1a:0b:81:da:4f:63:a1:81:78:30:b7:ce:e4:
1f:63:bb:9c:60:e3:6f:db:db:e2:9d:69:7c:05:a3:
9a:99:30:03:cc:2a:65:7f:a8:95:87:86:26:4d:2e:
31:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B0:56:DE:0A:A1:CA:F0:C8:97:F6:46:90:6C:A1:6D:F9:D6:8E:E1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC5648F2A40811EBB35F484FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.75.156.0/22
IPv6:
2400:1720::/32
Signature Algorithm: sha256WithRSAEncryption
b4:8b:e7:10:1d:0b:99:33:44:35:58:e4:60:4e:52:e4:89:b4:
20:c3:59:ac:87:06:97:e9:d5:56:83:ef:50:a5:6f:4c:dc:30:
ad:d7:c7:f0:28:4e:12:ac:23:b0:39:c1:b4:2e:fb:99:db:6d:
ad:f1:bc:85:5b:64:13:6d:01:cc:5a:6c:f6:7a:58:b4:f4:95:
97:0a:7b:a7:3b:56:26:f8:5c:67:9e:d8:f1:44:e0:a2:c5:84:
ee:0c:5b:f5:e0:6c:51:ce:9b:d8:91:e2:59:9d:85:5c:d2:b8:
9e:a7:f4:49:b3:1e:7a:c8:6f:eb:f4:94:45:33:df:83:ee:8a:
ec:19:8c:c5:17:b7:b7:f3:a7:08:93:80:6e:e8:71:d7:bd:ac:
42:20:27:72:1f:90:0c:28:d7:c3:84:c4:ec:86:5e:f6:a2:ca:
0b:a5:f1:91:13:62:8b:34:30:bf:1d:1d:6d:9e:4a:be:90:b7:
c0:1d:f8:35:e8:d8:86:70:c6:33:e9:53:64:ec:17:06:e7:2b:
94:17:64:c1:2c:fa:f7:72:ca:6b:5f:f5:4c:38:54:41:80:ec:
75:76:85:17:05:10:88:c7:2a:ce:ac:12:88:97:16:5e:b7:bf:
f1:12:da:f3:1f:bc:0d:66:23:dc:35:75:c2:ce:c1:61:ac:72:
4e:41:98:b1
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDAOOuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2NDczMloXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzY2MjQtNzgyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALBRXyQzvySn9PhdZtvGykBc4kV7QlnBPB6FliJay5qCtMeFYSmnxHoquR39
kGllH9QC5TJ+yqQ6LZBBbPIfQF8rLzTqaD6iwPGeZbAfVMs6trNuZFci8T40CV5f
blDI6maGVgCdf3WrGMrjYDgp9LQJ27m3/rkcZlIzqdVJTrEZFfbKI4dDT44lO2h8
xQ1CaVLa1MEvHaeWRNs3CsIkz4YTR6Fm3+//Q9iW3+i7b4hnm5STCQV3MEEjmO8f
tPMGkHC5Ue94k5+2AMTXqhkWtySMnagaC4HaT2OhgXgwt87kH2O7nGDjb9vb4p1p
fAWjmpkwA8wqZX+olYeGJk0uMWECAwEAAaOCAm8wggJrMB0GA1UdDgQWBBSJsFbe
CqHK8MiX9kaQbKFt+daO4TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FDNTY0OEYy
QTQwODExRUJCMzVGNDg0RkM0RjlBRTAyLnJvYTAuBggrBgEFBQcBBwEB/wQfMB0w
DAQCAAEwBgMEAmdLnDANBAIAAjAHAwUAJAAXIDANBgkqhkiG9w0BAQsFAAOCAQEA
tIvnEB0LmTNENVjkYE5S5Im0IMNZrIcGl+nVVoPvUKVvTNwwrdfH8ChOEqwjsDnB
tC77mdttrfG8hVtkE20BzFps9npYtPSVlwp7pztWJvhcZ57Y8UTgosWE7gxb9eBs
Uc6b2JHiWZ2FXNK4nqf0SbMeeshv6/SURTPfg+6K7BmMxRe3t/OnCJOAbuhx172s
QiAnch+QDCjXw4TE7IZe9qLKC6XxkRNiizQwvx0dbZ5KvpC3wB34NejYhnDGM+lT
ZOwXBucrlBdkwSz693LKa1/1TDhUQYDsdXaFFwUQiMcqzqwSiJcWXre/8RLa8x+8
DWYj3DV1ws7BYaxyTkGYsQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:28 2026 by rpki-client