
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA2B4C7E789B11EEBD606376C4F9AE02.roa
File: BA2B4C7E789B11EEBD606376C4F9AE02.roa (raw, json)
Hash identifier: Qx31CSdf4d1ceszHeinemNRyxCgFsGiiiXIDI8uR9eA=
Subject key identifier: 89:6E:CA:21:29:B7:4A:24:80:0E:3B:CE:A4:20:5B:44:BF:8F:AC:2F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E9D2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA2B4C7E789B11EEBD606376C4F9AE02.roa
Signing time: Sun 31 May 2026 17:39:09 +0000
ROA not before: Sun 31 May 2026 17:39:09 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 151164
IP address blocks: 103.115.236.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59858 (0xe9d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:39:09 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c723d-e406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e1:1e:4a:a7:99:a9:f5:71:bc:7b:7f:de:23:
e0:a7:af:be:a0:1e:fd:c0:b3:0c:55:66:c7:d8:db:
88:70:80:de:04:32:72:2a:a2:96:72:a9:d1:40:29:
12:17:48:b0:d7:4f:b0:6b:5a:f6:ed:81:b0:34:ff:
df:58:f1:21:c5:58:f9:0a:b0:52:b6:99:9b:e8:bc:
71:14:60:81:62:4e:07:87:81:cd:08:6c:b7:0c:57:
49:95:34:11:9c:f2:04:80:dd:75:d4:fa:d9:a3:19:
fb:d8:31:2f:d1:f5:bc:a8:ef:aa:e3:53:d5:e8:fb:
c8:0a:93:13:1f:63:f7:f3:a9:67:cd:81:f6:10:c0:
ea:f9:0f:c0:74:f5:6d:8a:d0:88:3c:11:5f:80:2a:
2b:b6:46:eb:32:f5:22:4b:97:f3:5c:50:2d:92:5f:
00:91:56:fa:8c:38:59:2b:57:76:45:29:ba:47:7f:
2b:9c:a7:bf:db:45:be:4c:bd:fe:13:7b:2c:af:11:
fb:d1:44:f0:8a:a2:7e:8f:5d:5b:c1:3f:55:38:9d:
fb:2e:82:d2:24:e6:23:20:34:1f:5c:38:b1:b1:81:
10:03:a7:47:66:11:d1:43:a5:c3:4e:1f:0e:3e:37:
8c:6a:56:66:38:17:3d:ea:16:2b:57:64:93:7f:12:
00:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6E:CA:21:29:B7:4A:24:80:0E:3B:CE:A4:20:5B:44:BF:8F:AC:2F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA2B4C7E789B11EEBD606376C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.115.236.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:e6:31:69:18:4c:a1:0e:8e:1d:1d:05:11:54:36:f7:3b:81:
43:01:bc:cf:a1:a0:6d:c0:00:29:20:7b:48:86:03:bb:c6:48:
c3:97:eb:6d:49:32:0c:ef:2c:fb:7d:59:ae:3c:df:9a:a7:d3:
3f:ed:ef:42:0f:2b:18:aa:64:08:1a:47:28:51:d9:07:28:71:
73:ca:ff:e0:5f:49:bc:be:1f:1e:b8:ca:25:1f:70:6b:01:2f:
2a:93:19:aa:44:c7:b9:57:b2:f9:f1:74:c4:e2:90:81:66:ff:
c0:32:9f:bb:46:9b:73:6c:92:a5:4d:57:dd:64:23:04:57:ed:
5d:d9:c1:40:1a:e5:d0:f1:9c:50:f8:63:09:c4:2c:e1:6e:c0:
31:80:5f:bf:d0:5a:aa:e7:71:64:f7:84:8c:27:a0:be:9f:7b:
58:f5:15:aa:59:b0:94:7e:7f:fa:02:79:9f:2f:2b:42:6a:68:
e9:ee:4b:9a:8a:82:7b:e5:02:cc:30:9e:47:f7:b4:13:de:e9:
16:94:bc:df:3b:9c:af:67:0b:87:48:d8:9c:a3:35:5c:a4:da:
c1:e5:f4:36:e7:5a:ca:52:99:63:96:28:d3:34:e7:7f:f1:ef:
25:cb:19:6e:37:f0:95:e8:7b:35:00:c0:fc:95:68:93:15:83:
d0:e7:3b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:40 2026 by rpki-client