
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B96ADF2AE51911EF8E6BA96AC4F9AE02.roa
File: B96ADF2AE51911EF8E6BA96AC4F9AE02.roa (raw, json)
Hash identifier: /s9UspEUx1vyEHqq251/HVj/zjP4DTf9EMDnJy8lNe0=
Subject key identifier: AA:A5:10:BC:BC:8B:A5:34:2E:39:28:1C:64:05:0B:00:13:31:EE:BA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E2AA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B96ADF2AE51911EF8E6BA96AC4F9AE02.roa
Signing time: Sun 31 May 2026 16:39:06 +0000
ROA not before: Sun 31 May 2026 16:39:06 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133713
IP address blocks: 45.125.68.0/24 maxlen: 24
45.125.69.0/24 maxlen: 24
45.125.70.0/24 maxlen: 24
45.125.71.0/24 maxlen: 24
103.43.37.0/24 maxlen: 24
103.44.141.0/24 maxlen: 24
103.44.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58026 (0xe2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:39:06 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c642a-bb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:c1:9e:1b:25:c7:60:7f:89:2d:e9:94:76:
d6:11:cd:65:19:e9:87:ca:df:fc:c9:06:05:0c:77:
e6:ac:43:cc:36:b9:53:af:99:6d:92:bc:13:b1:e9:
d4:0c:41:37:36:d4:03:03:37:05:5e:df:2a:eb:8f:
67:5e:03:86:9a:4b:97:1f:13:7c:36:0f:ca:ad:bd:
ff:c7:63:88:6e:78:40:14:f8:0c:23:ac:13:ef:61:
91:42:ab:63:a0:ee:15:d0:20:02:f3:2c:dd:73:08:
e0:fd:23:75:b0:49:e5:64:74:c5:4d:5f:6a:93:3f:
b5:2b:09:e6:24:b3:c4:94:f0:d9:2e:0f:24:78:2d:
cb:4e:48:02:93:cf:90:b7:b4:c2:52:86:d8:90:9e:
8c:e6:43:84:1e:94:11:94:d5:e9:b5:89:b0:38:1c:
fc:b0:7d:4f:e8:e8:fb:e2:f8:c3:eb:fc:56:7c:0c:
cd:e6:05:48:33:12:64:6b:aa:9c:e7:aa:da:d6:04:
a6:b7:70:d7:6d:64:00:c7:79:bf:d1:5a:a4:d6:a3:
c3:e7:0c:65:aa:3f:b0:d5:50:65:c1:1f:26:90:7b:
d7:11:05:9c:52:7d:3f:b8:e1:dd:c0:78:69:1f:39:
ed:25:9c:bd:99:28:38:dc:85:32:b8:40:3c:52:b2:
e2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A5:10:BC:BC:8B:A5:34:2E:39:28:1C:64:05:0B:00:13:31:EE:BA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B96ADF2AE51911EF8E6BA96AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.125.68.0/22
103.43.37.0/24
103.44.141.0-103.44.143.255
Signature Algorithm: sha256WithRSAEncryption
7a:35:1e:19:24:92:b1:29:bd:88:dd:a2:b6:19:65:c6:58:b7:
ca:d7:2c:bc:46:d7:2d:c2:8b:f5:2e:f3:51:d8:53:bd:ac:70:
c2:76:a8:b2:3c:ae:fb:4a:27:ad:c5:7c:90:70:17:3a:a8:30:
8a:e2:43:6a:ea:33:05:5c:b9:2e:7c:19:46:9c:5a:7f:bc:9d:
63:28:f3:83:4a:84:a5:5c:89:79:24:ac:1c:43:b5:2f:5f:c7:
17:45:5b:ae:6e:58:3f:4f:6e:f8:4f:ec:73:b4:e0:07:59:2b:
f5:04:18:cf:5f:e6:3d:ad:40:bc:ba:63:89:50:62:b1:ed:3a:
99:8f:d7:52:be:ee:76:be:85:dc:4c:1e:59:05:cc:96:7f:57:
b1:84:9c:04:9b:d5:2a:63:d4:dd:88:51:2c:77:6a:4c:37:b2:
5b:7b:bd:70:2b:c6:57:ab:d1:b0:78:d1:1d:86:cb:e7:f4:1d:
df:7f:29:e2:4f:7d:dc:d1:fb:42:8b:cb:89:a1:b4:83:ad:2d:
f4:cf:0b:e7:a8:5b:b2:04:86:9e:e7:df:1a:73:c2:be:2f:9c:
5e:6b:25:01:80:d0:e4:ba:7d:7b:3a:6f:d3:78:8c:4f:0a:8e:
5c:58:b9:bc:49:f2:9a:0f:15:bd:c9:1a:a9:1f:31:99:51:04:
7a:57:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:25 2026 by rpki-client