
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD014932FFE211EBB4FA4965C4F9AE02.roa
File: BD014932FFE211EBB4FA4965C4F9AE02.roa (raw, json)
Hash identifier: yXbZQfzZM0fuV5H/MmOV8NNMnL8/xlqkR2ryi8qpbjY=
Subject key identifier: B9:7D:0D:A5:13:67:DB:18:CE:81:02:F4:28:44:11:3C:B1:FB:14:E2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E7CE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD014932FFE211EBB4FA4965C4F9AE02.roa
Signing time: Sun 31 May 2026 17:21:53 +0000
ROA not before: Sun 31 May 2026 17:21:53 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 142531
IP address blocks: 103.171.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59342 (0xe7ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:21:53 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6e31-30e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:db:8a:42:37:c5:ec:86:38:20:33:2d:13:
c8:ea:2e:b1:30:82:22:a7:50:4e:9c:e7:5f:5c:2c:
50:80:05:23:50:0d:d7:34:14:1a:54:7a:4e:2c:68:
56:13:4d:e9:4e:2a:94:4b:37:fa:8a:e4:0e:ee:51:
a5:8a:64:c0:47:7a:8a:46:b3:05:69:2f:a1:27:7f:
f3:5c:3f:a3:8f:b1:ff:93:78:b6:6a:11:01:23:40:
b4:65:9b:05:cb:66:c8:91:78:c9:0a:86:e8:83:d7:
53:47:e8:48:26:7a:ab:5f:1a:56:0f:3a:01:c8:b0:
58:cd:ca:d5:62:68:2a:35:b5:94:5a:2c:a6:0b:a5:
71:77:0a:02:e1:8e:1b:ba:46:0b:e6:5a:1f:b3:3e:
3f:00:58:40:f1:9f:3c:5d:26:dd:69:0b:c8:74:05:
bd:2a:07:07:91:16:c7:6d:5f:6e:93:de:a6:2a:cf:
bd:60:49:43:25:25:4a:06:70:84:17:16:b6:3a:7f:
af:fc:07:3e:b1:a1:b5:19:a6:7d:4d:eb:5f:ad:99:
36:58:e3:15:02:f4:9d:72:dd:20:12:5a:98:3e:ed:
f7:f3:1d:34:8d:4d:5a:5b:16:de:b4:09:a4:b4:c7:
c9:b2:04:d4:16:e5:20:80:43:ed:ab:2d:7f:b0:0d:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7D:0D:A5:13:67:DB:18:CE:81:02:F4:28:44:11:3C:B1:FB:14:E2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD014932FFE211EBB4FA4965C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.171.6.0/23
Signature Algorithm: sha256WithRSAEncryption
60:b1:66:5e:f1:9f:48:e3:22:18:fb:0c:17:cf:08:f2:a3:06:
e3:46:4f:69:2b:4d:b2:a6:0f:fd:03:e1:a7:22:1f:8b:b7:9c:
aa:f6:e8:63:8d:69:d0:ce:90:e4:e4:6a:5d:1f:8d:cc:9b:f1:
cf:3f:42:90:2b:14:db:34:22:76:db:6b:50:ef:6f:db:e2:27:
c2:95:ad:47:f2:c8:0d:87:a9:96:12:7a:3a:eb:4d:22:65:e8:
9b:8e:f8:7d:70:04:94:30:79:04:f6:11:94:a9:c0:8e:ec:67:
ca:08:bc:e1:f7:3f:f5:26:53:b4:f6:c0:9f:59:40:4f:28:48:
21:d6:a7:ad:3b:9d:69:23:0e:27:be:1c:89:fa:72:d6:57:fe:
fe:7a:c0:da:dd:d8:14:98:8d:ca:ee:fd:44:d7:80:7a:38:ed:
75:22:4b:58:bc:ad:73:2d:1d:f4:ae:72:ad:ce:60:f9:e2:93:
06:23:cc:fb:3e:5f:ee:06:47:83:19:20:fa:b2:04:a2:49:5c:
eb:f2:15:71:dd:aa:50:53:b4:3d:19:b7:98:cc:74:d8:d8:0e:
a8:54:2b:cd:c5:ba:2f:92:89:60:ff:79:86:c7:be:88:78:31:
0d:de:15:67:05:de:a6:89:c4:ef:53:6a:c3:21:f4:65:a7:a3:
3e:ee:dc:8d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOfOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MjE1M1oXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZlMzEtMzBlMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM7j24pCN8XshjggMy0TyOousTCCIqdQTpznX1wsUIAFI1AN1zQUGlR6Tixo
VhNN6U4qlEs3+orkDu5RpYpkwEd6ikazBWkvoSd/81w/o4+x/5N4tmoRASNAtGWb
BctmyJF4yQqG6IPXU0foSCZ6q18aVg86AciwWM3K1WJoKjW1lFospgulcXcKAuGO
G7pGC+ZaH7M+PwBYQPGfPF0m3WkLyHQFvSoHB5EWx21fbpPepirPvWBJQyUlSgZw
hBcWtjp/r/wHPrGhtRmmfU3rX62ZNljjFQL0nXLdIBJamD7t9/MdNI1NWlsW3rQJ
pLTHybIE1BblIIBD7astf7ANO/8CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBS5fQ2l
E2fbGM6BAvQoRBE8sfsU4jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JEMDE0OTMy
RkZFMjExRUJCNEZBNDk2NUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWerBjANBgkqhkiG9w0BAQsFAAOCAQEAYLFmXvGfSOMiGPsMF88I
8qMG40ZPaStNsqYP/QPhpyIfi7ecqvboY41p0M6Q5ORqXR+NzJvxzz9CkCsU2zQi
dttrUO9v2+InwpWtR/LIDYeplhJ6OutNImXom474fXAElDB5BPYRlKnAjuxnygi8
4fc/9SZTtPbAn1lATyhIIdanrTudaSMOJ74cifpy1lf+/nrA2t3YFJiNyu79RNeA
ejjtdSJLWLytcy0d9K5yrc5g+eKTBiPM+z5f7gZHgxkg+rIEoklc6/IVcd2qUFO0
PRm3mMx02NgOqFQrzcW6L5KJYP95hse+iHgxDd4VZwXeponE71NqwyH0ZaejPu7c
jQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:55 2026 by rpki-client