
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E68A4C6AAC3811ECAB9D0940C4F9AE02.roa
File: E68A4C6AAC3811ECAB9D0940C4F9AE02.roa (raw, json)
Hash identifier: ZgKbbrjyZEY7iwsj63lj5AhVAIPMzB9EwmcnfGip6FM=
Subject key identifier: 13:89:81:E8:95:05:E0:8A:AA:C2:37:36:88:89:8C:18:70:06:82:3B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E8B8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E68A4C6AAC3811ECAB9D0940C4F9AE02.roa
Signing time: Sun 31 May 2026 17:29:45 +0000
ROA not before: Sun 31 May 2026 17:29:45 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 149538
IP address blocks: 103.184.40.0/23 maxlen: 24
2001:df1:a240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59576 (0xe8b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:29:45 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7009-4e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:45:da:f3:7e:74:d0:d7:93:d7:5c:1e:80:
58:01:33:00:3a:f0:fd:71:2d:70:74:14:cc:d6:a4:
7e:59:d1:a2:d6:90:2d:0d:06:2c:c1:1e:6c:61:35:
d8:a5:7d:c3:11:92:9b:9a:e1:dd:e2:fb:96:e6:d9:
5a:8a:d3:b7:77:9d:20:a7:8c:91:4f:ce:55:7c:a3:
5e:fc:a6:d2:6f:e7:e1:10:31:20:08:10:4d:a7:1b:
f3:ba:f2:9c:91:d0:63:27:36:67:06:8c:31:c4:32:
a4:35:ad:d1:49:fe:05:5c:94:ee:39:ec:70:06:fa:
07:c9:36:2e:07:d9:b1:89:dc:0f:d4:79:3e:6f:27:
ee:6f:ae:29:d7:83:3b:fc:46:31:9e:ae:fe:da:b5:
d1:1f:d6:48:f6:31:b5:be:c6:62:e8:f9:a5:08:b0:
ab:37:bc:e3:aa:80:d3:f1:e1:bc:c9:b6:91:2f:80:
a4:5b:6f:f6:35:37:f3:99:fd:be:85:a4:a3:e0:33:
d7:dc:7f:c9:d2:17:53:24:31:40:bc:1d:af:7a:d0:
d6:9c:57:8d:ab:9e:35:ab:48:ef:9a:e5:21:7e:e9:
09:73:33:43:67:2f:fa:b0:52:49:f2:1e:a0:07:0b:
02:36:8a:87:f5:40:6b:9a:11:ad:0d:4b:7f:a3:c5:
88:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:89:81:E8:95:05:E0:8A:AA:C2:37:36:88:89:8C:18:70:06:82:3B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E68A4C6AAC3811ECAB9D0940C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.184.40.0/23
IPv6:
2001:df1:a240::/48
Signature Algorithm: sha256WithRSAEncryption
9b:a2:4b:7f:4d:9a:54:61:d0:3e:c6:ed:68:98:12:22:8c:3c:
32:71:4e:d4:79:00:6c:db:1c:58:0e:67:49:9c:9c:a0:eb:15:
33:3e:c3:d7:25:48:cf:95:d7:90:21:7d:41:47:7a:ca:c6:c1:
0a:2e:38:06:9f:29:4f:2a:0f:54:f0:2f:17:89:03:bf:58:db:
63:12:f5:ff:72:c9:8c:3a:a4:87:5a:10:77:e4:af:2d:93:98:
0b:c9:bb:8f:46:d1:53:df:ef:41:1a:4d:4a:3d:0b:3b:39:31:
73:6c:95:c3:2a:d8:4b:fc:b3:0f:26:68:21:07:f5:52:f4:7d:
77:35:53:97:3a:12:87:f0:9c:55:97:8a:62:30:a6:db:59:20:
51:86:5c:9b:ae:53:03:ec:cc:f3:30:b9:0b:f0:9c:86:d1:40:
ec:5a:ff:57:97:61:0a:36:a4:47:f5:0b:9f:b8:1a:fc:cb:f5:
f1:33:26:fb:a2:a1:ce:04:eb:b7:4d:e2:13:b9:bc:e2:b4:1c:
e1:a1:16:f3:28:af:e3:e4:26:36:24:fc:f0:66:2c:bc:a3:f1:
59:86:8d:92:46:8e:2d:8e:04:0a:a3:23:e9:b5:0f:9a:ec:03:
00:ad:22:08:eb:bb:5e:12:7f:f3:d0:9c:52:df:d4:e8:6d:b2:
3b:fc:7c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:24 2026 by rpki-client