
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B576D062FDA711EFA5218D84C4F9AE02.roa
File: B576D062FDA711EFA5218D84C4F9AE02.roa (raw, json)
Hash identifier: 0K+jBjhMjdcEolPftrngcgBChFEHlEVvzmNlX88Gzl0=
Subject key identifier: B6:44:4C:A5:50:31:48:CB:4B:7C:41:82:AD:AC:28:F2:97:E0:D9:C7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EA8A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B576D062FDA711EFA5218D84C4F9AE02.roa
Signing time: Sun 31 May 2026 17:44:58 +0000
ROA not before: Sun 31 May 2026 17:44:58 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 153637
IP address blocks: 103.48.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60042 (0xea8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:44:58 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c739a-6a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:c3:5b:42:25:25:27:44:9a:e1:86:cb:33:
78:e8:22:fc:dd:7c:ee:77:ad:3e:3b:c4:eb:fa:81:
12:10:5a:6b:42:02:97:5e:ba:6e:0a:e6:a6:99:20:
5e:3f:4b:a1:00:69:b3:e7:b9:be:82:57:d7:9f:66:
28:29:a3:62:ac:56:24:46:79:59:86:1a:ed:4f:56:
1e:5a:e4:1b:58:e6:9d:4a:8e:7f:1c:7d:e8:05:66:
07:52:c6:3c:f0:51:85:83:b5:c4:9d:1e:b3:0b:f8:
80:47:3a:80:69:95:f0:a9:a7:a2:78:80:52:79:43:
7e:69:f6:72:2a:cc:36:90:ca:a6:01:e9:5a:78:da:
13:e8:7a:4c:28:a8:8c:5e:9b:47:b9:53:98:38:e9:
ef:44:8c:7a:5e:31:5c:b2:30:1c:c4:c7:ca:30:2f:
76:50:6e:e0:df:01:cc:f1:a4:f2:00:ac:0b:d5:a5:
6b:69:f4:16:9a:71:d7:51:bd:c3:17:f5:d4:7b:ed:
30:91:16:d9:24:27:7d:2b:67:93:2c:e1:b2:36:30:
a2:88:3d:93:c6:ef:83:a3:90:9e:31:af:2c:c4:31:
b6:91:c0:99:3f:ee:8f:36:74:78:64:b8:fb:a6:f3:
43:26:96:4c:c7:9c:28:a1:46:4f:54:f7:69:3c:3c:
21:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:44:4C:A5:50:31:48:CB:4B:7C:41:82:AD:AC:28:F2:97:E0:D9:C7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B576D062FDA711EFA5218D84C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.48.42.0/23
Signature Algorithm: sha256WithRSAEncryption
98:eb:f0:0b:ff:9c:44:ef:a1:dd:9b:9f:81:ce:39:92:2d:f0:
75:1c:23:2e:bf:87:b8:0f:35:20:84:32:4b:29:01:99:0d:06:
03:4c:de:0c:c4:e2:89:4c:fe:8e:84:5b:51:2d:5e:09:41:b7:
28:c0:3c:c3:3b:3a:b3:63:26:c5:b3:1c:95:3b:d9:9f:19:71:
3b:52:fd:8c:ae:93:41:63:75:1a:93:91:21:7f:6e:7e:8d:1c:
53:db:25:74:bf:a3:39:7c:d7:b6:2d:a9:a6:b3:f5:0f:40:e5:
1b:03:91:2e:7c:52:85:61:ae:4b:38:16:c6:b6:04:2a:4d:93:
58:02:4f:18:69:ed:51:e8:ff:1f:98:70:ed:7d:5b:44:cd:f3:
af:41:27:c8:b3:6e:7b:b1:c7:bb:a0:97:c0:d8:98:0a:39:49:
54:67:02:68:53:9e:f7:f3:e6:b0:c0:5a:5b:b5:13:26:18:23:
a4:d5:93:ca:b3:98:97:af:2a:68:29:83:b4:16:c5:b0:82:d5:
f5:70:44:d0:a6:ec:d6:30:17:ac:71:40:e0:02:6e:47:9c:11:
53:52:79:e0:bf:98:8e:e3:16:3b:13:60:b9:ef:11:ea:7f:6d:
05:27:a1:1e:b0:e0:79:90:9d:7e:ae:ca:31:ec:4d:ed:a0:70:
e6:bf:88:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:40 2026 by rpki-client