
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B203C4A4CBE711EAAB6A9B7FC4F9AE02.roa
File: B203C4A4CBE711EAAB6A9B7FC4F9AE02.roa (raw, json)
Hash identifier: 89pRlvFQBYtlLzQg0PorFym5Ibfm4fw8/WTIWWsgIzY=
Subject key identifier: 96:E4:C8:1F:8D:B8:33:65:3C:70:9B:55:B5:31:1A:2A:48:6B:65:3A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E263
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B203C4A4CBE711EAAB6A9B7FC4F9AE02.roa
Signing time: Sun 31 May 2026 16:36:48 +0000
ROA not before: Sun 31 May 2026 16:36:48 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133284
IP address blocks: 103.153.140.0/24 maxlen: 24
103.157.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57955 (0xe263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:36:48 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c639f-8036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:86:78:19:84:52:1d:ca:1b:a5:88:29:4a:c2:
02:e1:1d:bf:97:f6:58:d7:e0:53:6d:f1:56:7c:7c:
02:6c:cf:81:4e:a2:21:c1:7b:c1:5d:cd:84:da:25:
e6:1b:9a:22:50:24:95:7b:a3:f4:50:c7:09:14:8c:
7f:9c:bb:62:de:5f:8f:cc:ee:cc:d1:b8:e9:47:f9:
7e:f1:49:4b:f0:59:cf:03:05:c4:c5:1f:fb:6e:b9:
63:3d:ef:9f:1c:8f:5c:23:6d:7c:85:6f:0d:1b:7d:
84:d8:87:40:0f:73:09:c1:a7:fb:0c:cb:2a:f6:07:
13:a7:0c:53:0f:71:ec:aa:02:ad:9a:7e:fc:0b:9b:
56:9b:fb:cb:ba:f2:7e:36:ef:b6:a5:fb:3c:76:81:
5e:9c:4d:01:92:02:f9:07:48:c5:39:e8:d7:a2:8b:
e3:b9:2c:1d:42:db:2d:94:27:86:a1:6a:64:d5:30:
50:68:dc:9d:09:96:33:b9:6d:2a:cb:a5:ab:53:5b:
05:24:3e:0c:eb:f0:b7:32:63:73:1e:96:93:d4:ef:
53:c7:48:f1:65:c1:f6:87:a5:5a:b8:4f:7b:ff:a2:
35:44:f8:12:11:aa:80:d4:16:f2:8f:a0:76:c0:3f:
88:4f:42:c7:fc:ce:7d:00:09:81:c2:10:12:bc:6c:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E4:C8:1F:8D:B8:33:65:3C:70:9B:55:B5:31:1A:2A:48:6B:65:3A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B203C4A4CBE711EAAB6A9B7FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.140.0/24
103.157.132.0/24
Signature Algorithm: sha256WithRSAEncryption
57:fe:08:6f:a3:dc:f2:40:b5:32:5e:61:bb:16:7f:26:03:ec:
fd:44:77:31:a8:2c:8c:2c:6f:54:9c:f7:73:cc:1b:ca:58:43:
06:74:fa:54:a7:12:9a:36:63:6e:60:29:b7:6b:be:f6:24:f3:
f4:4d:7e:f3:4f:b3:b4:d2:b1:fc:c9:b4:4f:31:f0:76:97:81:
aa:20:9c:b9:96:60:5d:5e:25:16:8e:67:5d:21:71:f6:68:2e:
54:4d:d0:c3:e4:b5:2a:16:e2:ce:52:8c:bd:ee:8f:2c:7f:74:
b5:57:c9:77:58:2a:3b:07:e4:bf:79:ae:f9:86:5b:8e:b7:70:
55:88:d2:cc:4f:b5:31:3e:98:bf:28:92:ae:0e:74:c1:3e:8f:
59:2c:31:48:58:27:63:dc:93:a2:56:e0:15:43:ac:5c:fc:16:
ae:f1:01:cb:0d:76:c8:52:09:28:87:d5:8b:97:fa:e6:64:36:
4e:ae:63:02:ae:c4:f0:8d:5c:9d:1f:a4:ac:e0:35:10:35:0d:
c4:e4:62:d4:00:41:86:35:15:b0:8b:dc:3f:68:e8:f1:c0:96:
95:02:cc:a1:c8:22:c5:5b:03:3d:f0:c4:30:14:74:45:4c:d2:
0f:3a:3f:82:86:54:b8:6a:44:1c:5f:0a:af:94:45:3e:fb:2a:
2f:56:f3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:08 2026 by rpki-client