
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3FC332838A411EC8182937EC4F9AE02.roa
File: C3FC332838A411EC8182937EC4F9AE02.roa (raw, json)
Hash identifier: A5S5btbF0zp5sAsDawdgQ3A50uyIF423mr2zsjT75sk=
Subject key identifier: 6F:72:91:6F:90:62:A7:FA:F2:A9:E7:23:13:9B:58:33:98:59:2F:B8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E289
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3FC332838A411EC8182937EC4F9AE02.roa
Signing time: Sun 31 May 2026 16:38:02 +0000
ROA not before: Sun 31 May 2026 16:38:02 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133657
IP address blocks: 103.67.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57993 (0xe289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:38:02 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c63ea-43f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:12:1b:15:f1:33:8c:d9:92:ec:9c:63:23:
4e:f3:29:4d:79:6f:19:f4:01:bb:df:31:82:ba:43:
43:ff:37:78:c0:bb:89:6d:df:b5:a7:94:92:c4:0a:
2b:bb:15:ef:14:e2:7e:4a:c3:ab:0d:fd:19:f2:ca:
09:60:a0:b2:84:e9:ba:5e:c5:c6:35:f6:6c:c1:4e:
3b:f7:c5:64:f0:83:11:2f:ce:24:21:a1:d4:6d:08:
ba:23:88:65:bd:47:84:02:1d:86:58:85:f3:ca:d0:
74:60:c3:f3:df:5b:90:02:3b:e6:8c:5e:54:99:00:
ae:0e:ae:ab:62:28:d4:55:4c:94:c2:18:ea:2e:ff:
76:a2:25:b6:72:44:ad:3f:6b:18:37:ce:6c:3d:41:
26:f5:a0:d6:62:45:22:a3:fa:c6:77:b1:5b:ec:a3:
a1:40:0e:4c:f1:e6:ab:6e:c9:3f:75:3d:b2:6a:f9:
f1:70:b9:f6:21:03:f2:09:0b:d9:e9:4c:74:2a:a0:
5e:bb:8e:9a:5c:e8:3b:9f:da:11:be:e8:f4:cd:95:
06:44:af:b7:ec:6d:79:ae:bb:04:9a:64:d4:e9:63:
c1:cc:be:a4:be:68:7e:ab:7d:a7:26:2f:98:0a:1b:
45:99:db:58:86:a8:a7:9a:25:bb:46:b7:a7:4a:b9:
75:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:72:91:6F:90:62:A7:FA:F2:A9:E7:23:13:9B:58:33:98:59:2F:B8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3FC332838A411EC8182937EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.67.35.0/24
Signature Algorithm: sha256WithRSAEncryption
20:01:23:6b:af:03:4a:36:65:86:b6:eb:e5:90:cc:b7:7f:97:
75:e6:5b:4e:9c:a0:36:37:4a:ea:b8:01:16:ea:46:74:13:f8:
85:e4:33:d2:3d:4c:7a:4b:fb:a2:f2:39:54:ed:52:81:e2:c6:
e1:b9:b5:70:35:c4:55:e1:3d:03:8b:d2:65:e7:e4:17:c7:61:
66:7e:1e:8d:91:fe:26:af:cc:39:01:3e:35:55:b1:62:17:a2:
cb:bd:ba:0b:a4:63:14:04:c7:a3:72:ba:c8:5d:5d:3f:50:9c:
94:dc:b3:70:19:81:12:2a:65:ad:9b:41:8e:6f:35:18:0f:d6:
8b:a5:a6:5b:8d:b9:fe:d2:90:a3:3d:74:3b:a9:d2:23:19:f0:
37:69:50:d8:74:83:0e:aa:82:55:ca:5b:76:91:1d:4d:24:92:
ad:8b:2d:e9:3e:9d:47:d5:a2:d3:29:46:24:99:a9:67:81:50:
2c:1e:04:64:9c:c4:2f:1e:0d:eb:fb:e9:f3:5c:08:4e:d4:fb:
b2:a8:05:1c:27:29:e0:1a:5b:62:9a:6f:8a:ca:e7:c4:48:fd:
3a:83:1c:5c:88:bf:61:ce:17:9a:53:bc:9b:92:ef:87:34:c1:
d6:d3:67:f2:28:c9:b1:6f:3c:e6:8e:1e:d7:75:97:d0:22:37:
a5:04:c0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:35 2026 by rpki-client