
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B5D3C33AB0F211EC8875227FC4F9AE02.roa
File: B5D3C33AB0F211EC8875227FC4F9AE02.roa (raw, json)
Hash identifier: pBsAY2k2PHjOe221d5rglKw/OyXoMeJVI7sv4GB1KEA=
Subject key identifier: 5A:48:1D:8F:C0:AC:FF:7E:A4:2F:A1:96:07:E2:F3:2F:24:3D:C8:0C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EFB0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B5D3C33AB0F211EC8875227FC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:44:54 +0000
ROA not before: Mon 06 Jul 2026 16:44:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135173
IP address blocks: 103.215.208.0/24 maxlen: 24
103.215.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61360 (0xefb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:44:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdb85-e41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:68:76:0d:90:c0:e4:bc:16:97:0d:36:68:24:
f2:9a:ec:65:74:dc:9f:c9:78:4f:5a:78:25:a3:de:
66:6f:33:43:94:7a:44:bf:08:e8:80:1c:ad:8b:28:
6d:54:05:40:31:9d:0d:74:13:7f:f1:ed:c4:d4:ba:
43:07:0a:51:bc:f8:b8:ec:2b:ac:94:d4:16:48:33:
82:1e:aa:99:63:ab:fb:e5:ae:41:c0:2c:54:c6:7f:
cf:6a:65:ed:32:1a:31:11:1d:44:db:1d:b5:83:6e:
71:46:ef:2a:96:ed:a4:bf:77:ab:e8:d8:b3:69:22:
aa:bf:00:3b:31:33:04:97:28:e8:ee:89:f6:14:93:
46:08:c6:df:17:75:3c:fe:32:b0:30:2e:10:ef:cb:
30:ea:16:63:88:f9:bf:aa:75:8f:c4:a7:36:55:ca:
1c:06:cd:42:5e:b8:b0:5a:3e:4c:c2:a8:50:cd:99:
b4:fc:77:85:ee:83:b7:e4:2b:e1:bc:e6:aa:c9:b7:
49:f1:bc:81:b6:d8:5e:8d:72:cb:eb:fc:3d:29:65:
7d:b3:40:4e:97:5b:e3:bf:4d:26:ef:ce:88:dd:fb:
7d:bd:e1:14:37:ac:ec:8b:8f:44:04:f3:be:1d:ce:
a0:1f:37:97:19:d5:87:8a:ec:bc:29:d7:05:bd:55:
c8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:48:1D:8F:C0:AC:FF:7E:A4:2F:A1:96:07:E2:F3:2F:24:3D:C8:0C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B5D3C33AB0F211EC8875227FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.215.208.0/23
Signature Algorithm: sha256WithRSAEncryption
79:22:05:8b:56:20:d2:93:c2:e8:94:f1:d1:1c:fa:9b:a0:6e:
5d:96:99:4e:39:99:13:81:f4:8d:62:3c:3b:e8:ee:d0:ee:17:
2e:18:f0:23:49:80:9c:f2:2d:4e:0c:71:dd:ea:af:3f:d4:b4:
c7:c8:1e:4a:3e:b0:b4:96:24:01:a9:29:b4:e5:67:fd:46:8d:
8a:39:b1:9a:bc:97:47:65:5e:c0:ac:95:3b:bb:26:6c:3a:56:
6b:f7:f9:1d:67:ef:62:5c:29:e9:09:b9:22:ff:c5:bc:ec:07:
6f:40:b6:e4:5d:d3:e3:8b:b8:70:6f:8b:32:84:bd:66:d5:1a:
45:93:dc:14:ca:99:bf:89:40:20:b6:61:e5:6b:1a:06:ca:fb:
3c:f1:ef:b6:c0:f6:92:39:66:59:98:4c:9b:f6:82:bb:6d:a2:
b9:5f:32:86:50:b6:cf:b4:5f:93:de:d2:57:e4:58:13:e5:39:
35:44:66:02:41:73:45:97:2f:90:51:b3:a4:c9:a5:16:70:c9:
f7:2e:48:ee:51:6b:78:e5:64:d1:03:47:38:6b:30:88:44:89:
ff:64:ab:61:e2:75:37:78:d6:9d:dc:fd:01:67:5f:a0:8f:9a:
63:5c:b3:fb:bd:e5:db:20:07:31:87:14:2d:d2:6c:5f:c7:3a:
8b:84:a0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:44 2026 by rpki-client