
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BBE7B19C48CA11EF96754382C4F9AE02.roa
File: BBE7B19C48CA11EF96754382C4F9AE02.roa (raw, json)
Hash identifier: C/iQPySBi6sqNei0zUG2Qg2bhyZ9z/ZnQ643hQ8zpyg=
Subject key identifier: 99:C2:41:1D:15:C2:73:4C:04:D6:FC:C6:62:3C:95:BE:13:E1:8E:FE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E1E9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BBE7B19C48CA11EF96754382C4F9AE02.roa
Signing time: Sun 31 May 2026 16:32:51 +0000
ROA not before: Sun 31 May 2026 16:32:51 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 132746
IP address blocks: 103.91.68.0/22 maxlen: 24
103.160.198.0/23 maxlen: 24
103.163.244.0/23 maxlen: 24
103.215.106.0/23 maxlen: 24
163.223.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57833 (0xe1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:32:51 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c62b3-a885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:ec:75:0b:1d:47:bc:fe:32:35:b3:c9:3d:
24:a5:3d:18:b5:27:c7:e7:53:5a:90:8f:d8:e8:61:
e8:4a:5b:53:26:61:e3:57:fb:48:14:58:1d:f5:45:
2b:a7:fe:be:40:63:77:4d:63:ee:bd:0e:eb:76:95:
0d:23:0d:9a:ee:47:f8:5e:96:c3:70:a7:d8:58:d7:
a8:6c:ed:fd:69:6e:ed:ea:58:4c:f3:9b:cf:16:7a:
db:2d:5b:e0:84:17:77:97:6d:21:a8:42:21:04:45:
c0:2b:37:61:01:d0:10:53:e1:1c:33:c7:f9:88:18:
44:80:d9:4b:37:44:82:d1:f4:dc:fa:dd:81:51:1b:
e7:db:5e:ad:7c:1a:fe:6d:eb:5b:4e:1d:b0:1a:43:
b7:55:35:4d:15:f2:e1:d6:a7:45:2a:a0:56:ff:cd:
52:34:18:96:0c:dd:65:bd:67:b1:74:20:7d:3c:3c:
6a:1f:d5:d6:8c:f9:2e:3e:7a:14:9d:a2:a7:0e:b9:
d0:c8:db:3b:0a:a2:99:c2:a0:cb:e2:cf:93:31:7a:
b8:50:32:f3:1b:92:b6:44:1b:70:93:08:27:59:48:
10:c7:f4:17:38:87:8e:dd:5b:b8:c2:30:57:31:2d:
e6:28:87:ac:35:f3:65:a0:d3:69:f0:2e:e6:de:8c:
31:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C2:41:1D:15:C2:73:4C:04:D6:FC:C6:62:3C:95:BE:13:E1:8E:FE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BBE7B19C48CA11EF96754382C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.91.68.0/22
103.160.198.0/23
103.163.244.0/23
103.215.106.0/23
163.223.130.0/23
Signature Algorithm: sha256WithRSAEncryption
30:7f:5b:c5:88:f3:a4:f0:e2:4d:72:99:79:bc:07:b1:2b:54:
61:bb:67:f4:2b:4c:09:ee:77:a0:6a:34:72:8b:0d:49:e3:50:
25:1f:91:fb:c3:6d:53:07:fa:40:57:c5:c2:68:58:32:05:9a:
48:47:77:cf:be:90:a3:b1:00:3b:c9:4a:ce:19:3a:85:11:59:
57:29:f7:35:f4:d4:84:fe:99:04:a5:9e:97:62:a9:eb:2c:6b:
b5:ac:43:2b:62:56:19:bf:77:a1:f3:16:c2:23:fc:c9:e2:a9:
7d:7a:27:72:da:95:32:4e:9d:39:b6:b6:86:53:72:8a:78:eb:
6e:55:78:73:8f:1e:a1:1e:de:8b:03:30:a6:8e:da:e5:6f:f1:
9c:b2:c6:5a:d0:62:b1:37:0c:b1:19:c8:e4:70:b8:ed:3f:c7:
6d:8b:77:0b:46:e7:69:3e:ff:7c:69:1c:83:66:59:aa:94:e1:
a6:cb:19:6b:ff:c4:36:2c:6f:b0:42:a0:5c:e2:ef:13:02:1f:
da:41:c7:4d:c8:b4:de:9a:a3:25:f9:7a:52:de:48:41:c2:93:
6f:0e:65:0f:88:9d:78:d2:1f:c7:7b:c3:d9:e6:00:fc:f1:01:
10:69:dd:83:d6:b0:73:23:a5:4e:30:8c:3b:67:e8:03:de:67:
56:7a:ba:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:48 2026 by rpki-client