
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1AB953E745C11EDAA779675C4F9AE02.roa
File: B1AB953E745C11EDAA779675C4F9AE02.roa (raw, json)
Hash identifier: tHlNZUA5YAKM9cZ/FNmZhtUL/a5iMtv9gpnUPWJwtW4=
Subject key identifier: 5F:9E:42:20:7E:1B:8B:07:7B:76:8E:54:5B:A2:2B:17:2F:11:2D:EF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EB59
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1AB953E745C11EDAA779675C4F9AE02.roa
Signing time: Sun 31 May 2026 17:51:27 +0000
ROA not before: Sun 31 May 2026 17:51:27 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 45954
IP address blocks: 103.7.80.0/22 maxlen: 22
103.7.80.0/23 maxlen: 24
103.235.68.0/24 maxlen: 24
103.235.69.0/24 maxlen: 24
103.235.70.0/24 maxlen: 24
103.235.71.0/24 maxlen: 24
150.107.100.0/22 maxlen: 22
150.107.100.0/23 maxlen: 23
150.107.101.0/24 maxlen: 24
180.150.240.0/24 maxlen: 24
223.255.244.0/22 maxlen: 23
223.255.244.0/24 maxlen: 24
223.255.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60249 (0xeb59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:51:27 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c751f-f6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:6d:e3:85:77:eb:ed:5d:e0:b5:58:4a:ea:
77:54:cf:39:0b:96:3e:52:77:12:e7:ad:9f:ae:20:
c5:73:0e:20:f2:32:66:5e:ec:43:7b:e6:00:f3:31:
e2:f9:2b:93:5c:a1:54:e5:25:91:4d:96:75:09:fc:
f7:f6:27:3b:0c:0f:af:87:fb:42:15:d0:e8:7d:39:
fb:b4:4e:89:60:23:fe:b0:a2:30:d2:c4:4f:26:c7:
fc:fc:3b:37:03:8b:1a:ab:ba:20:e7:6b:43:11:87:
37:9f:9d:41:75:14:62:7a:da:89:e8:ba:35:cc:78:
b9:1b:ec:c7:d5:60:b8:d1:4f:00:9e:3e:52:c0:87:
c5:56:73:f0:08:f1:d7:bd:f9:78:7f:ec:82:b4:13:
9e:62:72:1e:1b:b8:10:b9:1d:78:f4:dc:4a:5b:09:
48:2a:09:ac:fb:38:0a:15:4b:0c:95:76:9d:48:90:
40:37:60:7f:b2:42:7d:1c:68:4b:2c:1e:22:a0:8e:
a8:7a:ff:c7:80:82:7b:37:8c:b2:47:37:f7:f5:5f:
3c:c5:67:d7:99:f3:2a:cb:8e:be:86:6e:90:b4:73:
e7:ce:74:21:a9:b5:e8:88:ed:4e:63:95:da:32:95:
38:4a:e3:18:ae:1e:25:90:49:cd:1d:fe:37:57:19:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9E:42:20:7E:1B:8B:07:7B:76:8E:54:5B:A2:2B:17:2F:11:2D:EF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1AB953E745C11EDAA779675C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.7.80.0/22
103.235.68.0/22
150.107.100.0/22
180.150.240.0/24
223.255.244.0/22
Signature Algorithm: sha256WithRSAEncryption
81:7b:fc:10:10:9a:49:39:6d:c8:84:c8:48:5e:0f:de:a6:c3:
da:93:af:16:0c:a8:c4:b4:1d:0a:4d:1f:71:51:42:6d:5f:6a:
ac:74:9e:bd:12:f3:b8:c3:90:b7:28:3f:42:68:06:36:de:5f:
ee:40:99:d6:56:53:a9:4b:da:a6:46:e5:4d:23:e2:b9:87:85:
cf:48:02:0d:57:7e:d8:5d:58:b1:b3:df:02:31:89:4e:df:47:
ab:af:a0:c9:05:41:93:94:f7:fb:29:b3:69:0c:b0:32:fc:29:
1e:d9:2a:fb:6c:88:09:a8:71:24:53:2a:af:de:23:d8:4c:81:
a2:dd:b7:91:01:7d:53:74:11:22:cf:34:b1:5b:78:21:69:ed:
a3:93:cd:9d:0f:c5:d0:6c:43:c3:54:c8:d0:e1:c2:4f:ab:ef:
84:1d:a4:e5:af:23:21:e4:3b:98:1a:81:2d:1e:23:62:85:2c:
23:3b:ef:29:4f:3d:1d:1a:60:10:fb:a5:f7:a1:92:92:7d:cf:
26:e5:f1:ad:53:48:9c:19:b6:a2:12:cd:4b:f0:2d:bb:e3:30:
cb:43:5c:f4:8a:93:f7:f6:85:2a:b0:ab:7f:36:2e:ab:ae:4e:
05:9d:d0:e7:11:03:dc:44:99:37:b4:da:23:9a:c3:8b:9a:58:
1c:16:45:a6
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDAOtZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3NTEyN1oXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzc1MWYtZjZlMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMfDbeOFd+vtXeC1WErqd1TPOQuWPlJ3Euetn64gxXMOIPIyZl7sQ3vmAPMx
4vkrk1yhVOUlkU2WdQn89/YnOwwPr4f7QhXQ6H05+7ROiWAj/rCiMNLETybH/Pw7
NwOLGqu6IOdrQxGHN5+dQXUUYnraiei6Ncx4uRvsx9VguNFPAJ4+UsCHxVZz8Ajx
1735eH/sgrQTnmJyHhu4ELkdePTcSlsJSCoJrPs4ChVLDJV2nUiQQDdgf7JCfRxo
SyweIqCOqHr/x4CCezeMskc39/VfPMVn15nzKsuOvoZukLRz5850Iam16IjtTmOV
2jKVOErjGK4eJZBJzR3+N1cZ1nECAwEAAaOCAngwggJ0MB0GA1UdDgQWBBRfnkIg
fhuLB3t2jlRboisXLxEt7zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0IxQUI5NTNF
NzQ1QzExRURBQTc3OTY3NUM0RjlBRTAyLnJvYTA3BggrBgEFBQcBBwEB/wQoMCYw
JAQCAAEwHgMEAmcHUAMEAmfrRAMEApZrZAMEALSW8AMEAt//9DANBgkqhkiG9w0B
AQsFAAOCAQEAgXv8EBCaSTltyITISF4P3qbD2pOvFgyoxLQdCk0fcVFCbV9qrHSe
vRLzuMOQtyg/QmgGNt5f7kCZ1lZTqUvapkblTSPiuYeFz0gCDVd+2F1YsbPfAjGJ
Tt9Hq6+gyQVBk5T3+ymzaQywMvwpHtkq+2yICahxJFMqr94j2EyBot23kQF9U3QR
Is80sVt4IWnto5PNnQ/F0GxDw1TI0OHCT6vvhB2k5a8jIeQ7mBqBLR4jYoUsIzvv
KU89HRpgEPul96GSkn3PJuXxrVNInBm2ohLNS/Atu+Mwy0Nc9IqT9/aFKrCrfzYu
q65OBZ3Q5xED3ESZN7TaI5rDi5pYHBZFpg==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:47 2026 by rpki-client