
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB4C036EDF6311EEB15F0859C4F9AE02.roa
File: EB4C036EDF6311EEB15F0859C4F9AE02.roa (raw, json)
Hash identifier: 6xajghc++VaeFlUPVQOkcHn1SNwDt1iAPtBzt9RSqJw=
Subject key identifier: 4D:57:BF:79:90:A9:58:F3:D4:D8:D6:97:D7:D1:68:73:9B:8B:AC:F2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E9FB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB4C036EDF6311EEB15F0859C4F9AE02.roa
Signing time: Sun 31 May 2026 17:40:26 +0000
ROA not before: Sun 31 May 2026 17:40:26 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 151714
IP address blocks: 103.67.92.0/23 maxlen: 24
103.139.226.0/24 maxlen: 24
2001:df3:2940::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59899 (0xe9fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:40:26 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c728a-cafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:64:ea:5c:a0:91:3e:72:fd:c8:67:c9:1f:
f9:1c:61:70:9b:ad:e7:1a:7e:07:bd:d6:f4:19:0d:
6e:37:8a:a7:7f:c6:5a:67:00:ff:b2:e9:75:f9:85:
32:8d:c5:1b:15:25:ed:db:1e:2a:14:6c:6e:49:a2:
a2:5a:b2:68:61:c7:4e:69:68:7e:5e:24:86:d8:8c:
94:d8:67:17:74:71:6a:d7:61:b4:6a:52:d3:65:cd:
b2:ca:dc:aa:69:b8:82:aa:6a:12:fc:f4:83:b5:66:
c4:01:91:90:f7:e4:5e:09:c1:e5:b1:da:17:92:e6:
7b:37:9f:6b:d5:ff:09:c0:f3:89:6d:7b:01:b7:d0:
f4:3c:60:ee:29:16:ad:31:d1:f7:37:dc:5a:12:dd:
41:b2:9d:9a:04:73:c8:77:af:e6:d8:ae:ba:b5:d9:
83:8f:f9:fb:16:51:8c:70:11:b9:0f:3b:b8:c7:60:
07:05:c1:88:8b:f3:c1:c5:d5:9e:f4:3e:7b:ed:9b:
cd:a0:d6:7e:f6:72:7f:e7:0c:c1:87:92:20:ab:85:
1f:30:e6:31:61:39:e6:cd:df:9f:e5:97:8a:5f:9c:
65:ae:3a:2f:a1:fc:51:a4:7f:df:94:e3:1e:b6:b0:
11:57:69:24:94:f5:94:9f:13:94:42:56:10:da:56:
ff:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:57:BF:79:90:A9:58:F3:D4:D8:D6:97:D7:D1:68:73:9B:8B:AC:F2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB4C036EDF6311EEB15F0859C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.67.92.0/23
103.139.226.0/24
IPv6:
2001:df3:2940::/48
Signature Algorithm: sha256WithRSAEncryption
b6:d0:84:15:45:67:ed:83:62:42:64:e4:57:f5:c1:0c:2f:25:
e2:b0:8d:f2:f9:c2:e6:2c:90:f3:38:d2:23:38:a0:a2:ca:de:
9f:c5:90:7e:b0:90:59:22:fe:9b:b1:a8:b3:7c:da:8e:b1:b0:
e4:6d:42:63:c4:3f:23:51:03:bf:d6:37:f2:c1:7f:22:45:62:
84:47:bf:af:a8:b1:58:83:c9:93:fd:df:16:eb:ed:f8:dd:1b:
68:0b:be:e2:28:0f:3e:23:09:8b:06:fc:80:f7:fe:56:36:01:
92:a5:58:af:df:22:1a:e9:63:d9:c9:d3:6b:9e:e7:d3:43:78:
08:72:9a:fd:92:a8:be:f4:53:92:36:de:e2:a0:0f:ae:a9:6f:
0c:22:9c:a8:8b:02:c0:0e:01:61:47:7d:ad:fc:7c:da:84:d2:
7f:ca:84:e4:ab:9f:0b:6a:03:d7:88:6f:f3:0e:e4:c1:70:af:
b4:24:72:10:b1:63:98:8d:2d:3a:9c:c8:65:31:2e:3b:4e:b2:
78:8b:38:3c:fb:0e:a0:54:7c:e1:e8:81:95:e2:ce:66:5b:ae:
94:aa:95:4b:ab:cd:0a:2b:73:8a:61:35:fc:b1:35:ad:4a:14:
6b:3f:81:33:da:69:75:64:11:9c:96:91:0d:82:e9:87:da:0d:
9c:dd:60:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:12 2026 by rpki-client