
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2DE47F6F30A11EE879BB97AC4F9AE02.roa
File: C2DE47F6F30A11EE879BB97AC4F9AE02.roa (raw, json)
Hash identifier: mNFms4i0vomR/Kc5RWu1jWRboLzv7aonGe+Y0sGjd0w=
Subject key identifier: AC:73:24:68:B8:C3:CB:E5:7D:E7:58:44:B1:C4:21:83:47:98:34:DE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EA2F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2DE47F6F30A11EE879BB97AC4F9AE02.roa
Signing time: Sun 31 May 2026 17:42:06 +0000
ROA not before: Sun 31 May 2026 17:42:06 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 152494
IP address blocks: 103.153.142.0/23 maxlen: 24
2401:8ee0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59951 (0xea2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:42:06 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c72ee-2b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:49:63:9a:88:30:e7:0f:58:41:ef:76:ad:f9:
31:5b:2d:1e:a9:e9:2a:b9:db:f0:8a:e9:c9:38:e1:
2c:0c:38:62:a8:96:84:04:d9:11:b5:1c:4e:35:5c:
58:4d:15:74:f9:82:e8:bc:0d:64:a9:25:8f:2a:a5:
ec:e1:b1:88:88:d0:a1:dd:2f:fd:2b:5a:cd:9f:85:
31:9b:95:45:13:1e:48:bc:07:1a:0e:28:d8:0b:48:
88:c2:f2:59:d8:67:dd:1d:86:7e:e2:db:c0:8f:c2:
a5:e2:48:9d:0a:9f:ab:ee:8f:ba:ea:9b:42:d0:c1:
b0:91:de:73:15:33:dc:b1:c1:b7:81:75:9a:38:55:
a2:98:84:84:15:61:58:21:94:96:c1:80:d4:14:da:
55:7e:1a:19:56:28:7e:07:67:eb:e1:1e:96:61:25:
94:d5:77:a5:b5:26:3c:f8:e5:4d:ae:03:eb:28:f5:
7c:1c:d4:93:07:7c:e6:cc:67:7a:28:79:15:26:56:
36:78:bc:fe:18:a6:fb:8c:de:9e:3b:06:2d:87:07:
cd:f2:69:09:67:fc:c6:47:45:5d:89:a4:3e:f2:e6:
b7:10:7b:43:14:a4:f8:1d:86:53:09:24:1d:f2:39:
f5:d5:19:92:00:58:ed:d1:90:3f:1f:d3:79:28:f9:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:73:24:68:B8:C3:CB:E5:7D:E7:58:44:B1:C4:21:83:47:98:34:DE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2DE47F6F30A11EE879BB97AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.142.0/23
IPv6:
2401:8ee0::/32
Signature Algorithm: sha256WithRSAEncryption
93:96:e5:9c:4f:35:70:e3:2b:0c:20:18:2a:57:1c:3f:78:7e:
3b:cf:39:a7:55:45:2d:d9:d9:d1:92:5a:d1:c3:84:69:f5:f1:
ee:6d:22:2d:7b:aa:26:0f:b7:74:66:1c:a4:20:f3:9b:aa:85:
38:87:a9:32:cb:8b:10:04:7b:56:e9:85:da:2b:14:1f:f5:d0:
60:4e:a5:95:27:38:19:f5:4a:f1:b4:2c:50:30:05:a3:3b:ee:
13:46:dd:8c:4a:b5:8d:4b:91:86:ba:8a:74:32:c9:9f:f3:e4:
c6:c3:8f:75:6e:85:74:98:3e:fc:7f:87:e9:f9:57:ed:78:1f:
46:31:22:c4:b6:98:cd:93:9f:34:c0:dc:ee:09:0a:ca:10:48:
50:06:0d:ae:6a:45:6c:41:b3:ec:3f:30:c3:ee:74:18:ae:ab:
b3:e6:a2:9b:42:7e:22:45:fa:5c:26:b1:c7:88:95:67:94:32:
2d:57:eb:14:ce:16:5f:d4:90:8c:9e:89:86:68:53:96:26:34:
f5:ef:87:68:ba:e5:e2:52:5b:d6:ea:1a:e2:08:bb:83:b1:ea:
f7:98:c0:82:86:41:ee:28:92:68:6c:45:6c:59:5c:61:55:88:
5e:8e:06:68:88:76:7b:15:91:ae:73:eb:15:dc:07:84:6d:1d:
5e:ca:95:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:06:58 2026 by rpki-client