
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F21A9B38FFC911EFB90F061CC4F9AE02.roa
File: F21A9B38FFC911EFB90F061CC4F9AE02.roa (raw, json)
Hash identifier: Evnh6vkPRr6x2+/i69FFwC5YXMMkw7WL/gwGtbMGBIo=
Subject key identifier: A4:BE:B8:D0:4F:FD:98:47:C1:C4:2B:34:85:94:79:0E:BB:4A:9B:2F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E501
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F21A9B38FFC911EFB90F061CC4F9AE02.roa
Signing time: Sun 31 May 2026 16:58:25 +0000
ROA not before: Sun 31 May 2026 16:58:25 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 136956
IP address blocks: 103.177.190.0/23 maxlen: 24
103.177.190.0/25 maxlen: 25
103.177.190.128/25 maxlen: 25
103.177.191.0/25 maxlen: 25
103.177.191.128/25 maxlen: 25
103.178.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58625 (0xe501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:58:25 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c68b1-50a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:2f:0b:c5:c6:ef:2e:27:d9:55:7d:57:7c:
01:2b:65:a4:e6:48:7e:c6:1a:a3:2e:26:09:61:49:
77:3d:29:ce:f2:f5:92:cb:b0:0b:e7:62:48:36:7e:
36:dd:cc:05:c5:73:f7:42:13:fe:b4:78:dc:a3:c0:
50:d9:34:ab:ed:0f:9f:b5:51:d5:2a:b7:54:f5:ab:
39:69:3c:73:f1:b9:38:86:d1:68:7a:c4:b5:4d:52:
f9:e3:4e:2e:ba:7b:77:1f:76:ab:fc:01:cf:74:65:
10:82:2d:3b:96:3e:b2:90:db:38:d6:0c:59:08:ad:
80:e5:00:ed:4e:b2:32:0a:c9:61:9e:f6:7d:2b:a9:
a3:54:92:d5:ec:26:3a:ea:51:8e:85:99:50:07:05:
58:86:4c:5a:14:7b:2e:bd:bd:01:8e:14:87:17:28:
ef:68:4a:88:60:11:b7:39:35:a3:5c:5e:db:de:dd:
f5:d0:6b:3c:9a:3a:19:3e:12:fb:91:20:97:dd:ac:
d9:05:6c:ce:cb:f1:74:a9:d5:f3:fd:0e:97:07:b3:
03:53:2c:bb:d8:11:f6:e1:dd:c7:ab:b5:95:55:bb:
09:ff:77:52:da:4f:88:43:f8:f4:7e:8e:27:ef:76:
32:0e:e2:43:e3:77:b9:be:3d:1e:7b:aa:8f:ed:d8:
2d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BE:B8:D0:4F:FD:98:47:C1:C4:2B:34:85:94:79:0E:BB:4A:9B:2F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F21A9B38FFC911EFB90F061CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.177.190.0/23
103.178.180.0/23
Signature Algorithm: sha256WithRSAEncryption
52:e5:15:e4:9c:ec:5b:cd:26:d6:d0:c7:63:42:0d:f3:9e:1a:
ea:8b:08:2b:2f:b5:2e:b7:1c:90:55:f0:82:82:37:db:86:1e:
da:02:79:53:1e:f2:d9:12:c9:f5:fc:3b:8c:e1:58:bd:7b:a8:
59:59:c3:10:8c:ae:f2:d0:5b:06:e7:af:0b:91:67:20:49:06:
99:f9:f9:78:cc:91:3d:02:c9:53:25:49:0c:d7:36:a6:d8:e6:
fa:fb:00:e4:8c:d9:3c:4e:6f:28:ce:2d:9f:12:eb:be:cf:48:
db:d7:51:bf:f9:29:03:eb:e8:da:45:79:f8:9d:14:00:12:42:
49:4e:ee:32:ff:63:fa:b1:8d:97:76:55:d1:23:74:ac:4c:dc:
bf:38:cd:bf:eb:83:b6:0a:2c:fb:11:9d:4b:19:d2:b5:91:77:
93:26:49:67:df:f0:c8:d8:a9:61:59:3f:06:e0:ab:a4:e8:71:
63:49:b1:d9:b9:23:00:0c:39:f1:42:b7:78:9c:c8:25:81:c7:
55:6c:f5:64:7d:bd:6e:0d:90:2f:f0:f8:4c:8a:a9:a0:60:fc:
3a:42:e9:3d:02:86:d4:10:f3:12:bc:de:2a:a7:30:a0:86:83:
00:7e:cc:03:ee:b0:79:fc:7d:b3:2c:d1:3e:e1:d3:ef:1d:2c:
ff:72:3e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:14 2026 by rpki-client