
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB9F2F829E7E11EB95A1EF65C4F9AE02.roa
File: DB9F2F829E7E11EB95A1EF65C4F9AE02.roa (raw, json)
Hash identifier: /MNqdViDm7CiX1l7zSuN/+mpagMyCnDdRzNUnX2hPzM=
Subject key identifier: 65:1E:0D:48:26:E0:5D:E7:85:9E:62:35:B9:9A:29:C4:3B:37:A3:16
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E4E9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB9F2F829E7E11EB95A1EF65C4F9AE02.roa
Signing time: Sun 31 May 2026 16:57:41 +0000
ROA not before: Sun 31 May 2026 16:57:41 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 136701
IP address blocks: 103.102.84.0/24 maxlen: 24
2001:df2:cd00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58601 (0xe4e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:57:41 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6884-65a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:70:a0:e8:f2:b0:91:e7:1d:c8:72:d3:58:
6f:c5:15:6d:91:d9:3d:2b:69:98:49:4c:9e:62:78:
9b:19:48:62:75:b1:0b:be:e9:6d:6f:b1:6e:dd:65:
64:90:59:12:6c:9f:fb:f8:22:52:c9:e3:64:b5:3f:
cd:3e:2e:9c:42:2a:81:43:60:e7:13:77:07:42:66:
6d:f4:ff:bf:c2:3e:02:56:6e:2e:80:46:c6:b9:5b:
a0:1b:41:ed:e8:6c:e2:d9:8d:86:87:46:27:40:e9:
d0:c5:05:a1:2e:a5:84:0e:9e:ad:7d:5d:5f:e5:64:
2c:b4:47:7d:67:9b:96:f7:f5:11:2f:47:ae:c2:f0:
c3:0c:17:f3:05:1d:67:df:09:59:16:53:50:7a:d7:
79:2a:c1:04:10:77:f6:94:58:ab:51:9d:60:3b:0f:
d9:fb:e9:a9:71:9c:53:54:61:a2:dd:0a:e8:59:87:
a4:9d:89:a0:2e:fa:db:0a:6e:8b:0c:49:73:a0:c3:
3b:af:13:88:a4:4f:5c:4e:91:3b:60:56:1c:25:ca:
5b:82:5d:eb:a1:5d:8f:15:40:b2:0b:bd:91:c3:b1:
90:61:a8:0d:5c:d1:5b:0e:93:c3:47:4f:9e:64:9f:
23:8b:1e:a8:62:5f:5b:76:b5:b0:4a:ed:36:01:07:
01:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1E:0D:48:26:E0:5D:E7:85:9E:62:35:B9:9A:29:C4:3B:37:A3:16
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB9F2F829E7E11EB95A1EF65C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.102.84.0/24
IPv6:
2001:df2:cd00::/48
Signature Algorithm: sha256WithRSAEncryption
7f:ac:18:0a:5b:32:33:7d:83:39:d2:25:12:37:e5:23:ae:b9:
3f:15:7d:c1:61:c4:a4:fb:2f:e9:41:46:db:a0:09:6d:9b:fa:
c7:cc:96:dc:8d:e7:74:15:00:aa:71:8b:1c:6d:76:18:da:6b:
4c:4f:22:21:4e:22:0f:b9:a0:02:78:06:69:dd:07:43:30:89:
0a:f8:8d:39:75:4f:e6:ca:7e:b4:0d:a5:4a:6a:f3:d3:a7:6c:
50:0e:49:ef:ae:5e:a1:44:17:a1:81:0e:80:e2:86:9a:64:1e:
c2:dd:8c:a8:6a:d4:61:cb:c7:4e:2c:6b:f1:70:1f:1e:6f:19:
3b:88:47:bd:62:2b:33:c6:b5:7d:30:bc:d5:9d:2f:7e:0e:f6:
64:3a:f9:3d:0b:02:c7:6e:3b:08:9c:3c:7d:a4:c8:c6:8c:82:
ed:17:18:94:20:ac:58:d5:00:dd:00:5b:9a:5f:58:e1:d4:83:
45:f2:42:3f:dc:3a:b9:1e:53:66:0d:51:50:bb:ad:27:25:ff:
7f:95:f6:2c:8e:11:05:b7:48:5e:26:1d:ba:06:cf:ee:1b:03:
a9:ba:18:66:de:fd:91:0f:89:ab:0d:1c:ed:25:4b:09:bb:28:
ba:60:91:18:80:26:77:0d:e6:f1:36:dc:82:a4:ba:97:f9:0e:
b2:80:8e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:33 2026 by rpki-client