
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E685B48E438811F1AC66FD97C5833773.roa
File: E685B48E438811F1AC66FD97C5833773.roa (raw, json)
Hash identifier: c4onCou32rGHi696g+jotvqwzXox9qJusIKJby5YWtI=
Subject key identifier: 92:6F:90:28:82:AF:87:38:45:EE:BF:BC:BB:0B:9C:FF:97:A1:AF:4C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E349
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E685B48E438811F1AC66FD97C5833773.roa
Signing time: Sun 31 May 2026 16:44:15 +0000
ROA not before: Sun 31 May 2026 16:44:15 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 134858
IP address blocks: 103.39.116.0/22 maxlen: 24
103.80.22.0/23 maxlen: 24
103.105.96.0/23 maxlen: 24
103.127.224.0/22 maxlen: 24
103.148.8.0/23 maxlen: 24
103.157.52.0/23 maxlen: 24
2407:8c0::/32 maxlen: 32
2407:8c0:1900::/48 maxlen: 48
2407:8c0:1900::/51 maxlen: 51
2407:8c0:2000::/48 maxlen: 48
2407:8c0:2000::/51 maxlen: 51
2407:8c0:2100::/48 maxlen: 48
2407:8c0:2200::/48 maxlen: 48
2407:8c0:2300::/48 maxlen: 48
2407:8c0:2400::/48 maxlen: 48
2407:8c0:2500::/48 maxlen: 48
2407:8c0:2600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58185 (0xe349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:44:15 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c655f-b78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fc:13:07:57:3a:5f:65:a5:16:e3:44:68:b2:
cf:04:28:f5:94:5a:d8:81:cc:90:77:c7:b6:ac:7b:
97:d8:c3:7f:4b:62:08:79:49:b1:fc:25:a2:37:3e:
7e:27:cc:b3:2e:1d:0f:0a:dd:d0:8e:2d:61:63:3f:
89:0a:2d:94:1f:18:83:b2:03:96:e0:60:d2:e3:18:
31:23:fd:2e:da:d3:52:a1:e1:11:4d:28:7d:af:83:
b9:9e:78:ea:f9:e1:38:76:b3:64:cd:46:69:27:d9:
ba:e4:13:b4:78:0a:a2:2c:bc:86:77:70:56:e7:b5:
b9:87:d3:11:2f:7d:e0:59:47:e2:27:4f:d2:ec:88:
ed:7d:44:43:4a:ce:ea:79:71:99:3d:c9:7b:4c:48:
1c:4d:06:74:ef:b8:1e:32:32:3f:01:c0:5e:fe:77:
34:74:e7:dc:70:ce:71:12:f7:0f:f2:ef:03:7a:f9:
4a:80:ec:a1:0c:44:41:d2:5e:29:b5:cd:76:44:34:
eb:38:38:80:d2:ee:14:a2:13:7c:b8:e8:42:e7:50:
c1:10:ae:99:09:a9:7e:ec:27:2d:75:59:68:3a:02:
b9:0a:c9:b1:c2:7c:1b:05:fe:04:da:8b:12:74:c6:
79:bb:4a:ea:6c:06:f4:e0:cd:d6:27:67:51:27:5b:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6F:90:28:82:AF:87:38:45:EE:BF:BC:BB:0B:9C:FF:97:A1:AF:4C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E685B48E438811F1AC66FD97C5833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.39.116.0/22
103.80.22.0/23
103.105.96.0/23
103.127.224.0/22
103.148.8.0/23
103.157.52.0/23
IPv6:
2407:8c0::/32
Signature Algorithm: sha256WithRSAEncryption
2f:13:57:c7:89:7c:06:63:53:00:42:dc:7c:d0:74:5c:ac:fa:
3c:22:c3:5c:42:ce:6b:53:da:79:04:e3:3e:1c:da:df:67:6e:
31:fb:b2:f2:a9:87:3b:17:e2:ad:ee:90:a3:25:a6:16:b1:1d:
b6:dc:84:8f:1c:e0:20:c4:f7:41:21:b6:3d:f5:25:dd:c6:45:
06:66:1b:ca:7c:38:b4:90:55:25:04:40:7b:b0:45:c9:ca:63:
4a:2a:62:f0:94:e6:5e:b9:67:5e:42:e7:0c:2b:39:30:48:83:
2a:70:37:95:31:ab:f8:d5:db:70:0f:d3:4e:51:e8:37:0a:42:
9b:18:8a:12:eb:b7:6c:37:fc:61:cf:0c:28:dc:aa:16:f9:d9:
53:14:38:85:29:7b:39:96:09:b4:cb:7c:89:c2:de:10:ca:09:
bb:9a:16:08:a5:99:eb:d2:67:cc:33:5e:2c:6e:74:fc:90:e1:
94:bc:9a:de:a0:b6:fb:fa:e3:10:e7:44:c4:80:43:c4:82:6b:
f7:bc:4e:e4:fb:3c:d9:b8:2f:63:36:0d:5a:93:f6:b7:ba:9d:
f3:31:fc:db:58:98:db:c1:5b:ef:75:57:f5:73:93:18:82:99:
21:42:7f:f7:3a:e1:41:6c:7e:89:92:22:1b:2f:bc:dc:82:1c:
60:11:20:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:57 2026 by rpki-client