
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D419127E7F8F11EE8E122B28C4F9AE02.roa
File: D419127E7F8F11EE8E122B28C4F9AE02.roa (raw, json)
Hash identifier: hExTqXNFvmVabmM88BaQzWADAo02VJdZxfdssrMXdFc=
Subject key identifier: B3:37:59:B7:D7:50:A7:52:FD:A1:A6:2B:44:1C:F8:15:BC:33:42:C2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E61A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D419127E7F8F11EE8E122B28C4F9AE02.roa
Signing time: Sun 31 May 2026 17:07:35 +0000
ROA not before: Sun 31 May 2026 17:07:35 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 138798
IP address blocks: 103.79.100.0/24 maxlen: 24
103.79.102.0/24 maxlen: 24
103.117.219.0/24 maxlen: 24
103.135.201.0/24 maxlen: 24
103.135.202.0/24 maxlen: 24
103.135.203.0/24 maxlen: 24
103.141.116.0/23 maxlen: 24
103.160.237.0/24 maxlen: 24
103.174.140.0/23 maxlen: 24
103.181.92.0/24 maxlen: 24
2001:df6:5280::/48 maxlen: 48
2407:35c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58906 (0xe61a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:07:35 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6ad7-e1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:f3:d2:87:1a:09:ac:17:97:0f:ef:5e:4d:
0c:a1:c0:43:01:88:4a:88:59:84:0c:7f:e7:f9:e2:
42:81:b4:12:f2:69:45:67:8e:51:73:7a:87:c1:ed:
a6:d3:0f:4a:9a:36:be:66:15:0c:51:7b:a2:6a:3d:
fe:1b:41:53:07:9f:81:41:5d:e8:13:31:b3:ba:60:
7f:fa:1c:d0:e1:51:29:cd:eb:92:29:fc:57:f6:a0:
95:4b:bd:60:95:35:81:c5:2b:60:75:a2:cf:cd:b4:
35:c8:11:ef:06:b9:e1:b0:b2:5a:2d:13:60:df:22:
b0:cd:71:43:4a:bb:c1:f9:cc:b1:ff:9e:18:bc:86:
55:7d:ba:5b:c0:de:a5:c1:e3:a1:8f:6f:a1:c4:1f:
fb:6f:e0:3f:e0:e7:e8:32:7b:be:4d:c1:4f:5f:d6:
c2:11:22:5c:4d:9a:94:36:49:58:6b:4e:1d:39:13:
44:b6:32:61:04:46:f4:29:80:1a:b6:6d:39:e6:b0:
c4:33:16:ea:63:87:7a:f8:fa:ad:11:2d:ae:2e:b9:
d7:a6:91:73:13:23:0c:f2:44:06:d0:00:27:d0:20:
15:7f:49:18:f4:02:fc:c6:f0:8a:1b:e4:0a:c6:64:
1b:59:2c:84:c6:a0:02:3e:2a:76:54:61:05:09:2d:
76:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:37:59:B7:D7:50:A7:52:FD:A1:A6:2B:44:1C:F8:15:BC:33:42:C2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D419127E7F8F11EE8E122B28C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.79.100.0/24
103.79.102.0/24
103.117.219.0/24
103.135.201.0-103.135.203.255
103.141.116.0/23
103.160.237.0/24
103.174.140.0/23
103.181.92.0/24
IPv6:
2001:df6:5280::/48
2407:35c0::/32
Signature Algorithm: sha256WithRSAEncryption
28:94:42:db:2e:10:95:ba:1a:fb:ec:ad:76:cf:72:cf:ee:50:
0a:46:79:43:b8:30:76:6b:48:5a:a9:e1:48:a3:d9:aa:4f:a3:
64:7f:c1:a5:e1:b7:1a:a4:3f:f8:78:82:db:59:5c:3e:15:13:
94:58:f2:54:16:e0:8d:94:3e:cc:81:1b:26:82:17:75:10:d9:
da:1e:de:7a:42:52:a0:5f:4e:eb:60:f3:f8:32:ac:8b:58:8d:
ab:3e:2f:20:8e:c7:f0:d2:22:e7:e7:39:e7:f6:40:86:91:bc:
93:81:b1:3e:a7:c1:ff:f8:8f:ad:5d:98:8f:39:75:dc:5c:2d:
03:aa:0a:42:76:70:b0:c0:43:fa:2b:0c:f3:ed:a5:ea:be:e8:
bc:77:af:0f:b5:df:89:a1:1b:37:8c:2f:18:96:98:54:55:5c:
e0:af:fd:a9:f4:03:b4:2f:69:c7:a9:cf:83:f9:0c:97:c8:86:
b7:7d:bd:ba:b5:7d:bb:d0:47:58:94:5a:46:d6:83:11:32:1f:
55:0c:40:ae:0e:f4:9c:51:74:4a:1a:f9:5c:4f:bd:5d:a2:f7:
47:a6:03:a2:e8:07:c8:39:5a:6b:52:f0:16:26:c2:46:4b:72:
98:87:d2:d5:fe:bb:7c:be:5e:57:c4:2d:49:6e:7d:db:8e:cf:
22:11:46:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:08:07 2026 by rpki-client