
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC539E2874B911EF96293618C4F9AE02.roa
File: BC539E2874B911EF96293618C4F9AE02.roa (raw, json)
Hash identifier: /oiqh4SIZnbEbIf9oINZSPsBL/IqU7j0YnsZnfsmoJs=
Subject key identifier: C4:E0:99:F9:21:30:0F:A7:1A:FF:8C:26:7F:65:AF:8C:05:4A:46:5C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E91C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC539E2874B911EF96293618C4F9AE02.roa
Signing time: Sun 31 May 2026 17:33:18 +0000
ROA not before: Sun 31 May 2026 17:33:18 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 150044
IP address blocks: 103.89.44.0/23 maxlen: 24
103.178.248.0/24 maxlen: 24
103.190.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59676 (0xe91c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:33:18 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c70de-fbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:7d:c7:42:9d:c5:64:bc:7f:75:63:f7:eb:
9e:94:7d:da:6a:38:bc:e0:44:7a:9b:0c:db:df:8a:
69:bf:91:8f:ca:5e:02:c0:ff:8f:83:b1:c1:de:37:
09:d4:c3:bb:9e:8e:ed:f8:66:9e:49:ac:36:88:62:
f0:07:cc:30:81:24:82:8c:19:df:15:45:ca:b5:ca:
c1:df:aa:54:c1:12:86:53:ff:2e:f9:a2:8c:22:8b:
be:cb:05:a6:ca:64:9d:1c:32:c6:bb:4e:3c:c5:c9:
9f:ed:f9:e6:ac:6c:96:4c:b2:be:e0:94:eb:20:67:
33:21:9a:00:3a:b7:b6:27:8c:98:f4:bf:47:34:db:
f2:b9:5f:55:65:45:50:ef:ed:f4:d8:e2:13:a3:28:
d2:3d:fb:63:4a:ea:59:40:08:63:7b:ec:56:a5:85:
e0:63:30:1d:6c:21:18:39:46:f6:3c:8e:b5:de:c6:
2f:c0:a3:9e:a7:06:bb:ab:cd:d3:37:bd:a2:37:34:
e5:6f:95:bd:78:af:46:c5:7f:c8:04:f4:4d:4f:41:
d5:b9:19:c7:82:5f:98:f6:ca:8c:a0:02:9e:9b:62:
2d:61:7e:13:6e:fe:c5:e2:ee:ec:d5:57:94:93:40:
2a:ff:5f:cf:95:47:2a:8f:d5:16:6e:c8:c2:f9:3b:
f5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E0:99:F9:21:30:0F:A7:1A:FF:8C:26:7F:65:AF:8C:05:4A:46:5C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC539E2874B911EF96293618C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.89.44.0/23
103.178.248.0/24
103.190.95.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:3b:98:b9:df:1a:ed:16:f9:c4:db:e8:a6:57:fa:a2:8c:08:
25:bf:42:38:ca:17:71:ec:f0:95:8f:43:99:ca:eb:d5:e9:97:
3c:15:96:cd:30:84:85:b8:71:e3:f2:05:f5:4b:11:49:f5:d4:
e9:a3:80:45:17:47:a6:12:1a:b6:51:fc:cf:2d:67:90:bd:da:
21:f1:3e:81:c9:fb:8a:57:82:64:2b:bd:73:1d:b0:93:1e:be:
cb:25:50:d3:f9:73:9b:66:d1:2f:cf:83:3c:3a:90:3b:7f:c4:
97:1b:9f:29:24:6f:4e:f9:46:67:9c:5b:70:3d:8f:b6:5f:22:
68:9a:64:82:85:6b:e4:77:15:bf:97:e1:c3:e4:a9:45:79:d6:
85:1d:bc:4a:a5:38:65:c5:11:b3:fd:cd:7e:f4:9f:2f:44:77:
21:23:ea:24:19:b0:4e:51:f3:dd:3f:e3:99:6b:ec:3c:26:90:
af:cf:36:ea:0d:3f:b8:53:95:b9:8a:44:8e:25:e1:12:cb:9a:
04:96:62:19:08:5a:f7:f6:d4:a4:cb:aa:d0:6e:1d:c1:65:7d:
7f:3f:4a:93:e3:d7:f9:fa:92:7d:83:d8:cb:57:b0:33:92:50:
2d:f8:b9:a0:c9:73:a4:c6:d9:dc:08:17:c1:ad:9b:2c:dd:12:
99:99:6c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:37 2026 by rpki-client