
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3C794CCE22611EFBBF69E1FC4F9AE02.roa
File: C3C794CCE22611EFBBF69E1FC4F9AE02.roa (raw, json)
Hash identifier: 5mXIuC/658ME3HBbC7Xn+oAeuRVNOVH2Y5DqAzWWlo4=
Subject key identifier: EE:A4:5F:A9:88:23:52:78:17:07:3F:C5:50:0D:27:DF:6B:7B:7B:FC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E75F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3C794CCE22611EFBBF69E1FC4F9AE02.roa
Signing time: Sun 31 May 2026 17:18:19 +0000
ROA not before: Sun 31 May 2026 17:18:19 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 141826
IP address blocks: 103.167.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59231 (0xe75f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:18:19 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6d5b-5459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:d9:3f:1d:de:51:a4:80:26:6e:02:95:1b:
28:52:0c:d1:93:bc:99:3f:e8:cb:67:9a:d5:4d:93:
2d:7e:02:88:5d:10:cd:02:3b:f3:83:7c:38:fa:7b:
b6:aa:7c:1b:df:13:aa:81:62:60:e4:4d:bf:ce:55:
69:66:d6:fb:2e:04:cf:2a:b7:9a:95:bb:7b:02:65:
32:58:94:3c:26:c3:53:2d:4f:c4:ba:5b:43:f3:05:
85:7f:11:d6:6d:4b:9f:16:03:d7:22:ef:66:c3:9f:
c2:e0:da:f9:01:ff:f7:8f:16:72:b3:24:0d:4e:7d:
ba:cc:1b:1a:61:13:59:0e:93:c7:71:1b:7a:49:ac:
d2:87:93:2d:79:e0:f4:81:8e:52:72:b0:eb:38:87:
c6:86:e5:bc:be:aa:52:f9:31:46:4f:aa:4f:78:19:
8d:46:55:9f:3f:54:ff:14:02:30:87:6d:29:58:7a:
02:22:e7:01:8a:c7:4c:d1:91:9b:96:3b:08:98:b7:
06:3e:8a:49:ce:e5:6c:ac:68:2d:b0:6b:ff:59:b6:
79:f8:c4:28:87:4d:6f:e5:ac:ac:78:b6:d7:56:97:
df:9f:f6:6c:cd:8f:fc:35:a4:d0:79:76:23:2f:79:
1e:8b:e2:4d:ef:89:5a:3d:d3:ff:b5:fc:5f:d0:fa:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A4:5F:A9:88:23:52:78:17:07:3F:C5:50:0D:27:DF:6B:7B:7B:FC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3C794CCE22611EFBBF69E1FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.157.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:0a:bc:bf:64:c2:bb:4c:9d:f6:06:40:c6:6e:df:e1:6b:68:
22:ae:dc:9f:f8:80:9a:59:03:5c:0e:3e:09:81:f0:f7:fe:22:
ae:11:50:85:02:28:33:c8:79:80:87:e8:8e:5e:03:50:f4:f5:
87:56:af:d0:a5:ad:f2:35:38:32:a3:b7:73:49:3b:a9:48:f1:
95:ac:fc:1c:e8:61:32:73:9a:14:6f:96:ba:6e:02:1d:f4:de:
b1:a6:20:e2:8a:3f:bf:c7:9d:66:b1:b5:20:8f:b2:84:45:c5:
e5:79:3f:79:37:e0:91:25:4f:39:38:d8:2d:9b:c1:dc:19:3c:
58:c7:45:91:06:8a:a3:be:2b:5c:a1:8b:dc:58:a6:0c:71:b3:
e6:94:de:6f:27:85:98:8b:25:7b:60:c3:e1:98:de:c7:a2:47:
c9:b7:83:fb:99:b4:54:14:76:28:c0:48:5f:1d:5f:3b:d7:c8:
02:3d:86:8a:2c:bc:8d:42:80:25:dc:ab:6d:3c:e7:51:7d:1b:
57:6c:e2:e8:c8:d9:b9:86:a5:18:ab:6b:7a:05:62:ef:46:3a:
03:70:fb:3d:65:1d:bd:32:e6:b4:1a:40:7a:65:cb:d5:d0:52:
d6:f3:b9:d5:57:f8:63:2f:ad:9a:e9:07:a0:72:7a:7b:0a:ce:
ad:f1:00:00
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOdfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MTgxOVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzZkNWItNTQ1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALLf2T8d3lGkgCZuApUbKFIM0ZO8mT/oy2ea1U2TLX4CiF0QzQI784N8OPp7
tqp8G98TqoFiYORNv85VaWbW+y4Ezyq3mpW7ewJlMliUPCbDUy1PxLpbQ/MFhX8R
1m1LnxYD1yLvZsOfwuDa+QH/948WcrMkDU59uswbGmETWQ6Tx3Ebekms0oeTLXng
9IGOUnKw6ziHxoblvL6qUvkxRk+qT3gZjUZVnz9U/xQCMIdtKVh6AiLnAYrHTNGR
m5Y7CJi3Bj6KSc7lbKxoLbBr/1m2efjEKIdNb+WsrHi211aX35/2bM2P/DWk0Hl2
Iy95HoviTe+JWj3T/7X8X9D6yaUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTupF+p
iCNSeBcHP8VQDSffa3t7/DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0MzQzc5NEND
RTIyNjExRUZCQkY2OUUxRkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGennTANBgkqhkiG9w0BAQsFAAOCAQEALgq8v2TCu0yd9gZAxm7f
4WtoIq7cn/iAmlkDXA4+CYHw9/4irhFQhQIoM8h5gIfojl4DUPT1h1av0KWt8jU4
MqO3c0k7qUjxlaz8HOhhMnOaFG+Wum4CHfTesaYg4oo/v8edZrG1II+yhEXF5Xk/
eTfgkSVPOTjYLZvB3Bk8WMdFkQaKo74rXKGL3FimDHGz5pTebyeFmIsle2DD4Zje
x6JHybeD+5m0VBR2KMBIXx1fO9fIAj2Giiy8jUKAJdyrbTznUX0bV2zi6MjZuYal
GKtregVi70Y6A3D7PWUdvTLmtBpAemXL1dBS1vO51Vf4Yy+tmukHoHJ6ewrOrfEA
AA==
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:38 2026 by rpki-client