
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5310FDCBDD011EA9702FC12C4F9AE02.roa
File: E5310FDCBDD011EA9702FC12C4F9AE02.roa (raw, json)
Hash identifier: HXnm2qzUvDhyKkxyMmR2DcmhGmoX+YAeIDSYQHGUqlA=
Subject key identifier: 9F:6B:F7:C1:93:1F:E5:6A:52:61:63:29:D4:2A:EC:0C:9A:B9:A9:8F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E659
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5310FDCBDD011EA9702FC12C4F9AE02.roa
Signing time: Sun 31 May 2026 17:09:39 +0000
ROA not before: Sun 31 May 2026 17:09:39 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 139559
IP address blocks: 103.147.250.0/24 maxlen: 24
103.148.230.0/24 maxlen: 24
2001:df5:b380::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58969 (0xe659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:09:39 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6b53-1ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9c:c0:5c:6e:1d:3f:98:3c:b9:3b:90:f7:6e:
91:5f:22:b0:93:31:70:39:65:7c:76:48:ce:d7:fc:
e3:30:0a:68:4d:1a:00:88:fe:1a:d4:9d:0a:ff:f2:
51:a3:44:7f:c0:ad:98:ed:45:cf:1d:a8:75:7d:3a:
c9:9f:28:02:21:57:cb:fa:81:73:fd:a5:32:d1:46:
46:3b:d5:4a:73:d0:e2:99:9c:4a:47:8d:a9:25:7e:
62:a3:3f:78:f2:53:51:3a:22:d9:36:6f:2f:2e:f8:
5d:dd:c1:cf:0d:c1:6e:9e:18:7c:06:e1:42:00:29:
66:09:32:e7:ca:c0:f0:e1:31:b4:d7:6a:82:63:66:
d0:7e:2b:38:33:ce:12:b9:9c:27:d4:20:30:bd:b0:
b3:c8:97:db:d9:a7:82:b6:d2:9d:19:ca:1f:ea:59:
db:24:82:41:41:2c:ff:e4:e7:bf:18:19:0a:af:c8:
b3:71:04:ff:33:ed:58:40:ac:a2:b9:13:11:e5:74:
3c:61:95:de:ca:c4:fe:78:10:da:09:98:9e:66:ff:
5b:0a:60:d0:38:5f:78:16:c0:01:d4:cf:81:b8:6d:
fb:33:f0:9a:fb:59:0f:c6:88:b6:11:6c:48:14:68:
e0:08:17:26:95:6e:55:ab:4b:fd:52:7a:bf:99:49:
a3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6B:F7:C1:93:1F:E5:6A:52:61:63:29:D4:2A:EC:0C:9A:B9:A9:8F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5310FDCBDD011EA9702FC12C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.147.250.0/24
103.148.230.0/24
IPv6:
2001:df5:b380::/48
Signature Algorithm: sha256WithRSAEncryption
b3:cb:15:06:0b:9f:1b:2b:b3:28:be:e1:2f:71:1f:25:ca:ed:
fc:72:5f:3f:53:ba:2a:c7:f6:d2:6b:c7:a7:0e:12:d9:b6:1f:
99:a8:3c:91:ce:74:5e:4c:fe:c4:48:15:1d:13:4d:22:ae:c0:
3e:7b:d6:98:51:96:94:22:08:fd:c1:f7:8f:c7:54:9a:19:0d:
a1:d1:77:02:c0:4b:81:81:f7:0a:17:dd:c1:62:c6:b3:92:9e:
ab:1e:f6:65:4a:e5:0b:c7:bf:bd:85:72:f6:ff:e0:1f:db:e9:
95:33:51:ef:5e:27:63:3b:a4:fb:8e:e6:c9:d5:b8:a9:71:41:
22:cc:0c:0b:38:1a:01:91:08:a3:32:50:e6:d1:13:cc:d0:a8:
44:1e:fc:44:56:1f:44:01:5d:bf:01:11:b0:99:24:a7:ea:2c:
5b:eb:8d:d2:b9:8f:a4:2b:94:11:0b:4b:77:0b:1f:c0:6c:36:
d3:64:e2:0f:93:96:12:39:6c:3a:fd:53:e8:b0:5d:a8:a3:74:
d0:9a:4b:0e:52:ef:ef:1f:e1:82:8b:c8:58:e6:43:bb:94:08:
a0:4a:51:10:49:5d:66:39:7c:9e:23:93:15:a4:c1:c8:b8:f2:
48:25:56:35:f0:39:14:6e:0c:e3:30:a5:8f:49:c2:2f:0f:5f:
5c:96:9d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:59 2026 by rpki-client