
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB500454BDD011EA9702FC12C4F9AE02.roa
File: EB500454BDD011EA9702FC12C4F9AE02.roa (raw, json)
Hash identifier: hkTU+1n3pyGoyP5F8fRTnePXtYAF9nd0Ok04M2/k1Cg=
Subject key identifier: 02:42:01:67:FE:61:74:BF:FB:63:CD:BC:0C:FF:82:27:97:4F:7B:6B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E66E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB500454BDD011EA9702FC12C4F9AE02.roa
Signing time: Sun 31 May 2026 17:10:24 +0000
ROA not before: Sun 31 May 2026 17:10:24 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 140116
IP address blocks: 103.151.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58990 (0xe66e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:10:24 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6b80-0623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:fe:24:15:78:57:fa:d2:39:03:b7:9d:09:
b0:d2:e2:1e:ae:07:52:ba:cb:78:a5:17:1f:0b:5c:
41:14:b5:08:94:36:f7:3e:5c:1f:22:80:74:eb:57:
eb:aa:c2:88:5f:1c:a8:33:5e:bd:cc:5d:a4:41:ac:
8f:7d:13:ab:40:2a:f8:41:ed:64:8c:b6:f0:04:f6:
b8:05:e5:9f:33:54:3e:01:9a:6b:ad:04:8d:d0:ee:
25:76:4e:9d:90:7f:a5:c5:b3:61:9c:37:29:4b:08:
16:19:57:bd:27:f7:31:45:3e:e8:10:52:0f:d4:1e:
f5:82:c5:b6:d0:a8:63:11:bb:9d:ac:33:d0:a8:07:
d6:f4:8a:f9:41:e0:78:3e:7c:10:c2:ad:90:60:74:
d6:96:d3:7a:92:b0:29:02:08:a6:b3:98:c9:58:79:
19:8c:21:1e:b4:37:12:91:ff:fa:c3:d8:12:b1:5e:
a7:38:d7:d4:c9:a6:f7:33:f6:91:f4:38:e2:76:9f:
b8:4a:f0:da:ff:14:f6:51:a4:0c:0f:31:15:fd:ff:
6c:59:72:b3:d1:5c:41:85:44:e0:8c:a8:c0:69:d4:
28:5d:96:f0:a6:eb:95:35:39:0f:a8:f8:79:fb:3c:
43:0b:8f:ee:c2:65:68:8d:65:f1:3e:c9:e2:37:2c:
87:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:42:01:67:FE:61:74:BF:FB:63:CD:BC:0C:FF:82:27:97:4F:7B:6B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB500454BDD011EA9702FC12C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.128.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:62:e9:10:26:87:2b:8c:e9:0b:b5:e2:66:da:a9:5e:04:88:
dd:65:bf:6d:05:3d:ab:10:5e:92:d9:53:ff:37:e0:e8:f5:06:
17:14:9a:2b:77:28:94:0c:dd:39:68:16:ee:73:62:b8:45:b8:
d8:a8:25:8a:ad:c9:61:31:ea:46:7a:74:f6:b1:c5:59:f2:6e:
c2:64:5b:6d:d1:ea:dd:82:a3:13:15:21:23:c8:3f:8f:6b:f1:
ba:b0:e7:a2:81:48:bd:57:26:bd:ac:10:7c:34:db:92:1c:6f:
e7:6d:83:f0:ea:d4:0f:17:02:6d:ef:55:e3:bf:20:46:13:74:
3d:16:94:9f:3a:08:c4:cf:8b:fe:b8:f6:6f:c2:fc:a3:94:8c:
26:ac:65:be:93:47:90:16:70:c6:5d:b9:b5:52:84:1e:b0:2e:
f4:eb:ca:51:7d:05:22:17:c5:c5:5f:0d:03:b2:49:41:cb:04:
89:e9:a1:93:8c:73:cd:17:89:5b:cb:64:39:b9:18:4a:1c:49:
cb:7c:cf:13:53:43:1e:0b:80:0d:11:6b:0b:31:bf:5f:00:88:
1b:d6:1b:15:56:9f:5c:11:6c:96:4a:58:1c:15:27:f6:94:68:
89:d4:f6:ff:da:8a:4b:ae:eb:3f:e7:c5:f1:f6:c2:21:6d:84:
5f:1d:72:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:39 2026 by rpki-client