
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5ED667CE0C511ECBD46DA33C4F9AE02.roa
File: E5ED667CE0C511ECBD46DA33C4F9AE02.roa (raw, json)
Hash identifier: Le/mFnOZEsGTPyaJONwOwaL9RS486SWbG/04xKiSlqI=
Subject key identifier: 37:97:A1:35:12:38:AF:D5:F0:8E:2D:EF:66:8B:FF:3B:97:F4:09:41
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E2AB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5ED667CE0C511ECBD46DA33C4F9AE02.roa
Signing time: Sun 31 May 2026 16:39:08 +0000
ROA not before: Sun 31 May 2026 16:39:08 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133715
IP address blocks: 43.239.212.0/22 maxlen: 24
103.188.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58027 (0xe2ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:39:08 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c642b-8ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:5a:79:04:6c:22:dd:d0:9b:67:af:54:68:
1b:ad:74:90:8d:bb:db:ad:63:a0:f9:c0:35:cd:dd:
03:ea:1a:1d:2e:c1:dc:71:d2:81:c1:72:62:12:d6:
9d:27:c9:f4:31:4a:5b:52:ae:0d:04:58:1e:78:fb:
61:75:95:54:56:9b:f7:7f:6d:c8:d8:cb:8a:c1:01:
8f:3a:3e:4f:48:34:d0:69:c7:23:32:e2:66:e6:e2:
3f:7c:c1:0c:4e:4d:c4:31:02:a9:5f:5d:bd:1d:24:
30:d8:0f:9f:5d:ef:f1:4c:1a:c5:65:a6:7f:89:09:
95:69:c6:28:46:59:0f:bb:43:4b:e9:55:ff:72:60:
c2:cd:8a:d0:d8:5b:4d:f4:c1:22:3c:ca:bf:8f:24:
83:5c:ba:07:f9:94:d2:5c:03:48:83:2e:d5:93:0f:
bb:69:13:68:63:24:71:9d:cb:b5:f8:4c:70:ae:93:
35:14:fa:25:4c:51:ab:a5:7f:2c:58:69:45:61:03:
5b:bd:2f:9c:34:e7:f4:9e:f3:cd:7b:41:33:52:5b:
aa:58:6e:f8:7e:f1:06:d2:06:cf:90:41:69:32:99:
29:de:08:da:b7:ce:23:23:39:a7:17:e9:82:76:29:
81:64:e9:91:e3:95:17:d7:d0:e6:29:fa:39:af:69:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:97:A1:35:12:38:AF:D5:F0:8E:2D:EF:66:8B:FF:3B:97:F4:09:41
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5ED667CE0C511ECBD46DA33C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.239.212.0/22
103.188.18.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:28:96:7b:69:db:56:a4:c5:84:2d:f9:cf:f3:14:94:0f:62:
05:03:06:77:ca:e5:e8:56:22:51:4c:a0:04:47:e5:4a:5e:1a:
4a:17:85:37:ee:24:e0:60:2a:94:c7:31:0d:eb:ea:13:33:75:
fd:e2:bb:63:fc:78:31:6d:42:50:5a:34:11:60:4a:16:af:c4:
46:ab:2c:19:c5:be:a8:c2:34:11:7e:ee:a8:18:2e:e7:ea:89:
3f:67:f9:70:4a:bb:81:f0:fc:28:7b:19:8f:45:13:03:3c:5d:
47:1a:2b:11:1a:98:b4:b5:45:d1:f0:b5:74:3b:fb:6f:70:8c:
6d:a5:18:ab:e6:42:44:be:52:c6:5f:6d:69:60:8f:7a:8b:a7:
0b:ec:2a:a6:fe:b1:5f:9b:16:d8:c5:ce:6c:88:62:00:0d:c8:
19:3f:7f:83:e5:f7:07:ca:c8:04:b9:28:f2:8a:40:42:50:b9:
51:16:67:16:3a:6e:da:5c:da:19:ca:06:79:0d:a2:46:4c:44:
4f:57:6e:53:f5:1a:e4:87:e5:98:11:2d:23:40:36:62:c3:2e:
cd:27:85:fc:07:3a:b6:ce:8d:f1:d0:5c:8e:e1:aa:8b:86:4a:
df:1b:66:1b:a1:17:74:24:6c:8e:70:f3:52:3a:9a:be:e4:f6:
82:7b:af:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:02:49 2026 by rpki-client