
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCDE7654AC8C11EFA02C7636C4F9AE02.roa
File: CCDE7654AC8C11EFA02C7636C4F9AE02.roa (raw, json)
Hash identifier: pubPGOw19RJOiZUJHHX0ejiP5AiBVqjpcpFzr5E1sJU=
Subject key identifier: 78:0F:43:D5:8E:3F:2C:96:83:C3:E0:73:7A:5F:D7:FA:DB:28:CB:79
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E26F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCDE7654AC8C11EFA02C7636C4F9AE02.roa
Signing time: Sun 31 May 2026 16:37:12 +0000
ROA not before: Sun 31 May 2026 16:37:12 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133304
IP address blocks: 103.105.100.0/24 maxlen: 24
103.105.101.0/24 maxlen: 24
103.105.102.0/24 maxlen: 24
103.159.30.0/24 maxlen: 24
103.159.31.0/24 maxlen: 24
2400:5ca0::/48 maxlen: 48
2400:5ca0:1::/48 maxlen: 48
2400:5ca0:2::/48 maxlen: 48
2400:5ca0:3::/48 maxlen: 48
2400:5ca0:4::/48 maxlen: 48
2400:5ca0:5::/48 maxlen: 48
2400:5ca0:6::/48 maxlen: 48
2400:5ca0:7::/48 maxlen: 48
2400:5ca0:8::/48 maxlen: 48
2400:5ca0:9::/48 maxlen: 48
2400:c5e0::/32 maxlen: 32
2400:c5e0::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57967 (0xe26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:37:12 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c63b8-37c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:7a:cf:bd:10:e6:6b:d9:39:38:48:d8:de:
c9:4b:7d:5a:40:c6:27:f9:cf:08:05:a4:b2:37:b5:
ca:89:20:e1:ba:d4:f6:a3:53:19:e1:dd:34:b8:54:
2e:9c:10:41:84:94:ad:5f:b7:c4:6b:1b:bc:37:84:
41:dc:4b:82:5b:8b:e3:1f:1b:54:a3:de:0d:39:2f:
1f:21:da:f3:1a:fa:98:55:75:89:f4:a7:3d:f1:5e:
d0:01:2e:ba:76:ec:41:10:a6:92:0c:98:25:2f:7f:
30:1b:ce:cd:06:a0:11:ec:f1:33:fb:07:21:36:a0:
33:1f:17:c0:99:6f:cf:de:fe:df:e4:ec:33:e9:45:
cd:dd:17:84:8c:fe:f9:0f:a7:a9:e9:0c:32:23:d4:
bd:34:98:8b:ce:63:71:fe:a6:12:99:df:fa:1e:ee:
88:99:dc:99:77:ce:bf:23:00:4e:c4:fc:7f:4c:94:
92:03:16:ca:37:b2:6b:f4:78:dc:69:7b:a4:d4:44:
49:75:ba:3e:56:31:6e:8b:72:f1:0b:4e:44:55:0c:
ff:02:a6:9e:07:08:6e:ad:0e:c4:21:a9:2b:9a:4a:
03:18:13:54:15:76:8f:64:d6:df:a3:14:28:19:7b:
7a:43:cc:77:ba:36:4f:64:7c:ef:09:c8:31:46:52:
eb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0F:43:D5:8E:3F:2C:96:83:C3:E0:73:7A:5F:D7:FA:DB:28:CB:79
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCDE7654AC8C11EFA02C7636C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.105.100.0-103.105.102.255
103.159.30.0/23
IPv6:
2400:5ca0::-2400:5ca0:9:ffff:ffff:ffff:ffff:ffff
2400:c5e0::/32
Signature Algorithm: sha256WithRSAEncryption
90:9d:d9:8a:55:84:3e:ea:58:88:5a:d0:86:40:ff:6d:d6:0d:
b8:15:8a:6f:c3:06:ec:87:6d:d8:be:a9:09:d6:7c:eb:43:03:
e4:79:d6:de:42:b8:42:ea:48:e8:3e:b8:1e:1c:cf:1a:e0:6f:
b5:c7:61:ea:ee:4e:bc:26:c1:ec:70:ab:32:4b:45:2d:f2:0c:
e0:65:2c:6d:02:1a:d5:bf:49:d9:bf:0e:5a:d7:71:88:07:b2:
54:6c:59:ed:63:49:49:ff:4b:75:62:32:b5:ba:69:89:6b:83:
bb:88:b8:82:18:e3:1c:95:7e:0d:29:3b:42:52:e6:b7:af:a9:
3d:35:cd:0c:54:6e:ab:b9:2a:a6:f4:72:12:0c:ab:39:20:97:
df:0a:b0:3f:bf:e2:5b:d8:48:88:36:6f:76:b4:02:4e:3d:25:
30:77:56:0d:12:f1:ec:f6:52:04:da:9d:84:d8:55:43:e5:0f:
ee:3e:b8:d5:58:c7:8a:45:d7:6c:58:c3:43:95:c2:c4:5b:90:
45:6f:d1:56:c8:7c:69:3b:43:7b:70:69:60:9c:6e:3b:f3:61:
be:21:3f:94:67:c3:18:84:ed:01:36:92:e4:ba:83:5a:30:2c:
ad:aa:ed:bb:3f:af:cf:b5:87:c4:b6:47:fe:75:ab:f4:bc:6f:
44:40:3e:8a
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIDAOJvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2MzcxMloXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzYzYjgtMzdjNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ5ues+9EOZr2Tk4SNjeyUt9WkDGJ/nPCAWksje1yokg4brU9qNTGeHdNLhU
LpwQQYSUrV+3xGsbvDeEQdxLgluL4x8bVKPeDTkvHyHa8xr6mFV1ifSnPfFe0AEu
unbsQRCmkgyYJS9/MBvOzQagEezxM/sHITagMx8XwJlvz97+3+TsM+lFzd0XhIz+
+Q+nqekMMiPUvTSYi85jcf6mEpnf+h7uiJncmXfOvyMATsT8f0yUkgMWyjeya/R4
3Gl7pNRESXW6PlYxboty8QtORFUM/wKmngcIbq0OxCGpK5pKAxgTVBV2j2TW36MU
KBl7ekPMd7o2T2R87wnIMUZS66UCAwEAAaOCAo8wggKLMB0GA1UdDgQWBBR4D0PV
jj8sloPD4HN6X9f62yjLeTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NDREU3NjU0
QUM4QzExRUZBMDJDNzYzNkM0RjlBRTAyLnJvYTBOBggrBgEFBQcBBwEB/wQ/MD0w
GgQCAAEwFDAMAwQCZ2lkAwQAZ2lmAwQBZ58eMB8EAgACMBkwEAMFBSQAXKADBwEk
AFygAAgDBQAkAMXgMA0GCSqGSIb3DQEBCwUAA4IBAQCQndmKVYQ+6liIWtCGQP9t
1g24FYpvwwbsh23YvqkJ1nzrQwPkedbeQrhC6kjoPrgeHM8a4G+1x2Hq7k68JsHs
cKsyS0Ut8gzgZSxtAhrVv0nZvw5a13GIB7JUbFntY0lJ/0t1YjK1ummJa4O7iLiC
GOMclX4NKTtCUua3r6k9Nc0MVG6ruSqm9HISDKs5IJffCrA/v+Jb2EiINm92tAJO
PSUwd1YNEvHs9lIE2p2E2FVD5Q/uPrjVWMeKRddsWMNDlcLEW5BFb9FWyHxpO0N7
cGlgnG4782G+IT+UZ8MYhO0BNpLkuoNaMCytqu27P6/PtYfEtkf+dav0vG9EQD6K
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:47 2026 by rpki-client