
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D669CEE6E52411EF80DB6781C4F9AE02.roa
File: D669CEE6E52411EF80DB6781C4F9AE02.roa (raw, json)
Hash identifier: 3N6fiL03Rl/tDFUoxbxN7P5rA18GQepaW5IwRR/t4O0=
Subject key identifier: 8A:77:C6:52:66:F9:D0:99:DB:6B:A5:60:14:47:38:9C:6E:09:51:B3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EB23
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D669CEE6E52411EF80DB6781C4F9AE02.roa
Signing time: Sun 31 May 2026 17:49:47 +0000
ROA not before: Sun 31 May 2026 17:49:47 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 21789
IP address blocks: 103.190.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60195 (0xeb23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:49:47 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c74bb-2c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:a4:24:69:97:e5:31:f1:a5:f0:1b:95:84:
97:5e:54:87:ca:6f:21:86:7f:ea:07:69:32:0b:05:
8c:5f:fa:5c:62:be:fc:06:96:5a:9e:a7:b9:89:22:
2f:e6:58:4e:c3:fc:2b:bf:ce:4b:9c:01:80:6c:ef:
06:01:b5:39:48:e9:57:e4:a1:e6:2d:5b:d3:74:41:
16:36:5d:e9:01:de:32:bc:b8:c5:18:71:45:c4:02:
42:0a:38:e8:51:ba:4b:cd:f3:f8:a8:01:26:bb:b3:
33:f8:32:a7:82:56:cf:ab:fb:24:0c:ba:85:30:e8:
f3:42:eb:d0:be:05:fa:38:1e:e9:eb:d8:76:00:13:
5a:07:f4:e1:4d:91:d5:04:da:e4:0a:41:8e:9c:0e:
9f:b4:93:fa:ba:e9:16:4a:31:24:dc:df:f3:e0:29:
95:42:15:ea:74:17:1d:97:64:8b:1f:79:17:e1:c1:
12:0e:54:b1:9b:ec:1f:cf:dc:98:1f:91:f3:63:1d:
86:e3:3f:1b:14:13:2a:c3:5d:bc:d5:69:49:2a:20:
cc:8e:c3:62:44:cb:0a:3b:ab:ec:64:dd:70:30:8f:
78:4d:87:89:af:4f:9f:5f:e4:e2:92:68:03:28:27:
f5:e1:d4:5f:35:91:2e:d9:f6:7a:a8:8c:a4:28:d6:
1d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:77:C6:52:66:F9:D0:99:DB:6B:A5:60:14:47:38:9C:6E:09:51:B3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D669CEE6E52411EF80DB6781C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.190.231.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c1:70:97:f1:c2:7a:c6:eb:72:6f:a6:3a:16:49:7c:e1:9e:
85:b2:29:a8:a9:97:53:14:4f:34:d0:30:5b:f5:d1:ce:66:99:
98:5f:3c:fa:f2:0f:e8:a4:1b:c0:a7:60:a0:35:21:66:1c:e8:
b5:7d:e6:2a:c2:c1:cf:49:b7:f6:6f:e7:6e:ac:b5:bf:b3:d9:
a2:26:55:b9:56:4b:4e:67:3b:0b:88:6d:6f:24:4c:79:e3:3e:
0e:28:e1:13:da:dd:c2:24:42:c5:02:3f:1d:9e:35:95:9a:e8:
76:da:7c:8c:dd:9b:aa:97:14:90:fa:e3:ae:fa:1f:4a:c0:d1:
a5:01:9c:01:2b:a3:61:fe:28:45:27:a9:93:e8:86:f1:26:8f:
3b:d8:ca:b5:ea:81:1f:05:10:db:60:e3:ed:85:27:fa:a1:28:
77:c1:80:31:55:c2:34:2b:6b:3d:02:e3:c0:54:10:04:77:3b:
2c:81:dc:6a:96:1a:ef:bc:1c:9c:23:84:41:bf:16:fe:31:9b:
79:29:ef:89:e6:fb:80:a4:a7:96:10:05:29:0e:90:52:e7:89:
35:5d:2c:8e:d0:3c:bf:84:b1:67:16:36:93:05:f0:25:d4:b3:
44:21:62:a9:3e:25:0b:da:b1:20:4c:74:52:0b:0e:3b:2a:de:
7a:42:46:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:05:11 2026 by rpki-client