
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA6244022FDE11EC90799967C4F9AE02.roa
File: BA6244022FDE11EC90799967C4F9AE02.roa (raw, json)
Hash identifier: /4n0cL1XfeH5FzRKz/r14PIHTTL26FNZJD5r6g++kNo=
Subject key identifier: AA:5A:8B:C8:4B:0A:21:CF:E1:B5:45:41:06:D2:C0:A8:F0:5D:A8:CD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E236
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA6244022FDE11EC90799967C4F9AE02.roa
Signing time: Sun 31 May 2026 16:35:22 +0000
ROA not before: Sun 31 May 2026 16:35:22 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133010
IP address blocks: 103.251.228.0/23 maxlen: 24
103.251.230.0/23 maxlen: 24
103.253.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57910 (0xe236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:35:22 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c634a-9ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:48:45:da:05:bc:f9:81:85:6c:ec:57:55:b9:
84:0a:96:4c:34:0f:f4:b5:77:dc:6e:d3:c6:e1:64:
37:db:35:19:87:20:21:31:25:c4:d5:9a:77:ac:ab:
ec:43:41:f7:5d:f1:78:de:87:a4:c5:ec:6d:7f:32:
a3:59:a5:b4:5c:3f:00:26:e7:95:28:f3:ad:88:c4:
a1:31:97:7e:2e:36:35:cd:4f:4b:54:b2:62:1c:c9:
59:bc:13:ed:87:07:3a:ee:66:04:38:01:d5:0f:92:
8e:df:64:f0:24:67:0c:24:78:29:ac:fa:b7:c6:b6:
72:2d:97:d1:35:2d:26:3b:51:d9:1a:ab:ef:a9:de:
19:94:36:7f:79:97:2f:9a:9e:44:7d:97:bf:fd:c9:
54:c7:ff:b4:70:59:0a:c3:9a:35:b0:b1:60:a7:63:
ef:27:7f:bb:17:67:19:5a:c8:c2:ad:be:22:99:ff:
e4:04:c9:88:97:a8:a7:44:4b:81:c8:f3:d4:e9:ec:
3b:10:a8:e2:6c:ff:70:d4:b0:8e:af:0b:85:fe:44:
62:cf:0f:3a:18:9c:a9:ea:1a:13:f8:a2:c7:aa:d8:
4f:cd:80:0b:f0:a3:ee:77:38:31:91:a0:84:3e:e4:
80:eb:1e:6c:f4:26:86:35:06:17:31:29:d6:71:57:
53:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5A:8B:C8:4B:0A:21:CF:E1:B5:45:41:06:D2:C0:A8:F0:5D:A8:CD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA6244022FDE11EC90799967C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.251.228.0/22
103.253.166.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:3d:a0:ca:05:fa:3c:47:88:81:cd:88:75:51:f5:65:49:34:
80:7e:74:ff:85:3d:fe:fd:80:b3:ae:81:07:9b:00:f3:9d:c1:
07:61:43:05:c8:1b:99:b0:a2:89:12:99:3a:ed:d2:54:89:a3:
8a:37:63:9e:4b:29:d2:16:50:6c:26:b4:93:cf:a1:c4:9a:3d:
00:17:05:27:25:f5:73:4c:2e:04:d3:79:f3:76:e8:48:90:e2:
ce:8b:0f:38:2a:db:07:c3:85:31:a5:3c:37:a1:0c:fa:38:25:
bc:9a:d9:98:98:3a:06:29:3d:da:e7:57:25:6e:24:8d:56:17:
de:df:60:35:93:4f:14:d4:b9:c0:dd:ed:97:46:91:46:87:c9:
76:e1:a7:12:24:57:81:18:82:c4:49:af:c2:4b:61:a6:b2:d4:
b6:b1:94:6b:e0:8f:43:59:b6:64:03:d0:41:d0:a2:c2:bb:df:
3f:2a:de:63:f2:6f:af:bc:b5:f7:72:1a:77:37:f8:8f:38:f7:
22:b1:28:d0:98:2c:e6:fa:99:c4:05:31:c8:ef:03:44:66:84:
05:3d:6a:52:f7:77:09:9a:d8:fa:56:b1:2b:45:a1:6a:41:51:
69:76:80:f4:9e:96:3a:da:61:0d:af:99:39:b8:38:07:80:55:
bc:c5:9f:54
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAOI2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2MzUyMloXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzYzNGEtOWVhNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOlIRdoFvPmBhWzsV1W5hAqWTDQP9LV33G7TxuFkN9s1GYcgITElxNWad6yr
7ENB913xeN6HpMXsbX8yo1mltFw/ACbnlSjzrYjEoTGXfi42Nc1PS1SyYhzJWbwT
7YcHOu5mBDgB1Q+Sjt9k8CRnDCR4Kaz6t8a2ci2X0TUtJjtR2Rqr76neGZQ2f3mX
L5qeRH2Xv/3JVMf/tHBZCsOaNbCxYKdj7yd/uxdnGVrIwq2+Ipn/5ATJiJeop0RL
gcjz1OnsOxCo4mz/cNSwjq8Lhf5EYs8POhicqeoaE/iix6rYT82AC/Cj7nc4MZGg
hD7kgOsebPQmhjUGFzEp1nFXU6kCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBSqWovI
Swohz+G1RUEG0sCo8F2ozTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JBNjI0NDAy
MkZERTExRUM5MDc5OTk2N0M0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAmf75AMEAWf9pjANBgkqhkiG9w0BAQsFAAOCAQEAWz2gygX6PEeI
gc2IdVH1ZUk0gH50/4U9/v2As66BB5sA853BB2FDBcgbmbCiiRKZOu3SVImjijdj
nksp0hZQbCa0k8+hxJo9ABcFJyX1c0wuBNN583boSJDizosPOCrbB8OFMaU8N6EM
+jglvJrZmJg6Bik92udXJW4kjVYX3t9gNZNPFNS5wN3tl0aRRofJduGnEiRXgRiC
xEmvwkthprLUtrGUa+CPQ1m2ZAPQQdCiwrvfPyreY/Jvr7y193Iadzf4jzj3IrEo
0Jgs5vqZxAUxyO8DRGaEBT1qUvd3CZrY+laxK0WhakFRaXaA9J6WOtphDa+ZObg4
B4BVvMWfVA==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:29 2026 by rpki-client