
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE76AB063FB711EB998C0020C4F9AE02.roa
File: EE76AB063FB711EB998C0020C4F9AE02.roa (raw, json)
Hash identifier: IpYOEbIs4vlBsIQQEzXNuHWbTWIAh5qLNnn7MpXNI6A=
Subject key identifier: 72:F1:77:A5:BE:34:F6:E7:90:B1:42:AD:F4:01:A8:36:D8:6D:F4:F8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E6D0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE76AB063FB711EB998C0020C4F9AE02.roa
Signing time: Sun 31 May 2026 17:13:41 +0000
ROA not before: Sun 31 May 2026 17:13:41 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 141288
IP address blocks: 103.160.128.0/24 maxlen: 24
2001:df5:9e80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59088 (0xe6d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:13:41 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6c45-2d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:23:fc:27:ff:d0:bb:32:b8:b9:3a:57:b7:
98:4d:2e:86:1e:b4:64:68:e8:35:7d:14:10:8e:cc:
c3:93:b0:45:80:3a:b5:90:f2:a3:ff:24:09:5b:7d:
8a:fe:77:15:c8:a4:5a:aa:57:b6:33:76:7a:6f:92:
8c:d9:3c:1c:88:25:4e:5a:8f:a9:d9:8b:9e:43:ae:
de:b8:ba:1c:ee:02:b3:5b:77:39:c2:72:e1:93:64:
4b:c1:7c:bf:ad:43:bb:26:6a:16:29:59:fb:9a:33:
a4:8d:58:4a:36:18:d7:b0:43:98:26:01:ef:8e:12:
31:66:f5:39:77:6d:10:16:47:cd:f3:8a:b9:76:5e:
86:32:46:7e:8e:79:b3:1f:8f:de:9a:d4:03:de:f1:
4e:cf:88:a8:e3:cf:87:9c:53:91:4d:14:5d:b2:98:
08:cc:64:cb:a9:df:45:18:05:58:49:18:cc:d7:a6:
fb:50:99:26:86:6d:2c:8b:14:70:e6:19:3c:b1:7d:
d2:06:4b:39:91:76:26:95:cc:64:8b:79:cf:50:e7:
51:8b:9c:1f:3f:50:53:96:8d:f6:15:e6:45:fa:fe:
16:7e:b2:eb:3f:b2:2d:37:46:d4:8a:42:74:3c:0b:
27:f5:b2:9c:1b:a3:78:a5:e7:85:4f:01:d1:b9:36:
a7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F1:77:A5:BE:34:F6:E7:90:B1:42:AD:F4:01:A8:36:D8:6D:F4:F8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE76AB063FB711EB998C0020C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.160.128.0/24
IPv6:
2001:df5:9e80::/48
Signature Algorithm: sha256WithRSAEncryption
95:8a:7d:ab:e1:04:c0:38:4f:68:af:78:9f:42:bb:1d:19:6c:
07:91:56:8c:16:22:5f:4d:a0:41:5f:c7:24:07:4c:79:27:5c:
8c:0c:0e:11:f2:56:12:27:3f:a1:1d:6c:ad:64:e1:ef:cd:99:
c5:0a:53:b5:d5:63:4e:33:f1:e2:bc:5f:7b:b6:5a:4e:6b:b0:
8c:1f:8d:45:2e:cb:0c:6a:03:63:fb:b6:98:7a:13:47:f7:f5:
54:98:ec:31:a3:2f:cd:80:9c:ea:7c:b7:fe:cb:69:48:92:9c:
a7:9d:9c:b8:35:ba:80:9c:eb:53:bc:e1:75:ee:d6:b7:50:ad:
52:87:44:a4:b3:4a:4d:f8:63:01:4d:07:5a:10:55:de:46:74:
7d:55:8f:80:0c:c5:52:30:d1:f4:00:75:94:2b:e5:fc:e7:05:
6e:a7:8b:f7:9b:a7:10:5c:c1:d0:48:09:63:2a:f3:e0:ed:a4:
59:53:e0:7e:c4:0e:9a:c2:da:44:70:45:05:4e:96:d2:32:46:
0b:c0:2d:41:5d:c3:e0:39:3a:b5:c8:81:7c:63:06:70:56:fc:
15:2c:74:5d:b8:2e:68:52:e5:fc:43:2c:14:93:09:ff:ef:c6:
22:07:dc:d5:ac:02:8f:dc:26:58:39:a2:c7:0b:94:b9:16:d2:
81:bd:27:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:59 2026 by rpki-client