
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E057B2EEF60E11ED9440470CC4F9AE02.roa
File: E057B2EEF60E11ED9440470CC4F9AE02.roa (raw, json)
Hash identifier: O/HayC7iotLzWD07qR57wTGgIYsmr39JON0nQHLKG8g=
Subject key identifier: 0E:84:12:AA:36:16:26:54:78:A1:CF:4F:4A:09:8C:E8:9B:B4:03:BF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F5C1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E057B2EEF60E11ED9440470CC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:36:12 +0000
ROA not before: Mon 06 Jul 2026 17:36:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151098
IP address blocks: 103.148.134.0/23 maxlen: 24
2001:df2:a640::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62913 (0xf5c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:36:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be78c-f4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:3a:97:3b:ef:f5:29:0e:54:df:e6:4c:1d:
77:ea:bc:9b:0f:99:59:cc:73:22:5c:ff:80:45:4c:
56:ed:b7:2c:f9:56:05:88:88:13:3f:8e:2d:6e:e0:
7d:f5:bd:d3:2f:23:c9:80:b9:fe:25:40:43:39:02:
61:70:f3:f6:ee:1a:99:72:26:3d:d1:d2:76:58:54:
d6:6b:24:7d:bd:c4:05:ae:ca:cd:ee:cc:67:a3:a4:
a0:e8:2e:4e:b0:d1:94:13:63:58:d1:c3:54:7f:38:
51:03:8d:cf:f7:0b:5b:77:89:bf:a3:a5:9e:5a:2b:
8d:52:7f:38:9c:b9:78:df:d0:d9:3a:f2:03:bc:bc:
59:b0:20:c2:df:d6:c4:4d:38:9b:c6:0b:e7:7d:53:
52:28:b5:c0:aa:61:99:eb:44:91:67:28:73:9b:fa:
0e:7e:2f:45:59:4c:e0:aa:e0:3a:86:6b:f5:ab:74:
b4:b9:ff:6b:99:1c:7e:23:63:72:1a:c8:bf:c1:9e:
5f:5a:fc:ce:e7:02:de:ad:79:86:6d:b7:86:ca:52:
f4:f6:a1:8b:81:b4:9d:39:79:44:3f:88:28:53:dd:
fd:57:ae:f6:eb:b6:99:f2:9e:51:52:f3:c3:13:f5:
1b:f5:3a:6f:9f:c7:00:fc:3a:39:5e:89:95:43:31:
a2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:84:12:AA:36:16:26:54:78:A1:CF:4F:4A:09:8C:E8:9B:B4:03:BF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E057B2EEF60E11ED9440470CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.148.134.0/23
IPv6:
2001:df2:a640::/48
Signature Algorithm: sha256WithRSAEncryption
76:50:17:13:8e:0d:13:4d:fc:bf:fe:83:12:e5:3b:fa:b7:75:
93:61:11:bc:5c:1b:8b:4e:29:5b:36:41:82:0c:9f:2e:25:9f:
99:a0:f3:d4:89:52:93:05:b0:e7:f7:34:5d:08:ac:d9:fd:dd:
c7:e8:a5:e2:81:02:46:e5:bb:cc:bf:3c:28:dc:f4:be:a3:a3:
62:f2:9c:d5:90:dd:e5:84:9a:e6:a2:7f:a7:2a:3f:1b:6b:90:
9a:89:86:1c:65:63:c5:1e:e3:52:95:1e:8d:f3:1b:bc:b8:2b:
79:11:3d:69:66:c5:fb:e3:34:bd:e2:f4:03:1c:8e:c2:a0:4b:
ee:1e:9c:a1:18:1c:67:15:5d:f8:de:92:91:b9:35:38:a7:99:
58:ee:0d:31:6c:8e:62:0c:fe:b4:87:fd:0a:9f:e6:30:fb:da:
66:ca:db:99:d0:3e:76:21:f7:14:3a:f8:8a:60:cf:10:a1:51:
ee:44:d7:9e:1a:3e:e7:8d:ca:d0:80:e9:83:a3:03:7a:ed:31:
c7:60:d7:7b:c8:f3:e0:de:62:f2:a0:a0:1d:4a:67:10:75:8b:
98:99:92:7f:3b:dd:f0:7c:56:67:ec:c2:dd:03:94:cf:86:39:
77:85:c7:14:87:22:5a:5e:6a:2f:19:cc:b7:ea:4a:70:3d:58:
a2:86:3f:69
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAPXBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MzYxMloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU3OGMtZjRkMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKFnOpc77/UpDlTf5kwdd+q8mw+ZWcxzIlz/gEVMVu23LPlWBYiIEz+OLW7g
ffW90y8jyYC5/iVAQzkCYXDz9u4amXImPdHSdlhU1mskfb3EBa7Kze7MZ6OkoOgu
TrDRlBNjWNHDVH84UQONz/cLW3eJv6OlnlorjVJ/OJy5eN/Q2TryA7y8WbAgwt/W
xE04m8YL531TUii1wKphmetEkWcoc5v6Dn4vRVlM4KrgOoZr9at0tLn/a5kcfiNj
chrIv8GeX1r8zucC3q15hm23hspS9Pahi4G0nTl5RD+IKFPd/Veu9uu2mfKeUVLz
wxP1G/U6b5/HAPw6OV6JlUMxok0CAwEAAaOCAnEwggJtMB0GA1UdDgQWBBQOhBKq
NhYmVHihz09KCYzom7QDvzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0UwNTdCMkVF
RjYwRTExRUQ5NDQwNDcwQ0M0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAWeUhjAPBAIAAjAJAwcAIAEN8qZAMA0GCSqGSIb3DQEBCwUAA4IB
AQB2UBcTjg0TTfy//oMS5Tv6t3WTYRG8XBuLTilbNkGCDJ8uJZ+ZoPPUiVKTBbDn
9zRdCKzZ/d3H6KXigQJG5bvMvzwo3PS+o6Ni8pzVkN3lhJrmon+nKj8ba5CaiYYc
ZWPFHuNSlR6N8xu8uCt5ET1pZsX74zS94vQDHI7CoEvuHpyhGBxnFV343pKRuTU4
p5lY7g0xbI5iDP60h/0Kn+Yw+9pmytuZ0D52IfcUOviKYM8QoVHuRNeeGj7njcrQ
gOmDowN67THHYNd7yPPg3mLyoKAdSmcQdYuYmZJ/O93wfFZn7MLdA5TPhjl3hccU
hyJaXmovGcy36kpwPViihj9p
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:25 2026 by rpki-client