
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F44DE9A8687011ECA192E768C4F9AE02.roa
File: F44DE9A8687011ECA192E768C4F9AE02.roa (raw, json)
Hash identifier: 5+qpwinpeK4F8t4ZH+3CjuYF6i2XXqUSrPdkLft5JF8=
Subject key identifier: 4C:18:BD:C5:C1:DB:08:A4:C6:F3:2B:80:52:E9:65:B3:F8:5E:84:C1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E4FB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F44DE9A8687011ECA192E768C4F9AE02.roa
Signing time: Sun 31 May 2026 16:58:15 +0000
ROA not before: Sun 31 May 2026 16:58:15 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 136722
IP address blocks: 103.101.134.0/24 maxlen: 24
103.185.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58619 (0xe4fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:58:15 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c68a6-bab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3c:bc:35:17:0e:04:59:fb:c9:2f:d6:19:77:
d7:15:92:6d:c6:8f:0a:0b:a6:fa:66:3c:d7:0c:ec:
5d:7b:0b:7b:ec:cc:42:bd:39:d8:b8:37:4f:8e:aa:
e2:7b:29:c7:c6:2f:db:b1:5a:02:99:3d:75:f5:f5:
0e:8c:33:af:cf:73:79:36:db:b3:37:b9:90:ce:e7:
fc:df:92:d4:14:d6:a5:de:57:e9:e5:78:ab:f0:33:
d3:73:df:2e:b6:07:0e:5d:65:47:de:9c:42:0d:42:
03:d5:98:3d:3b:25:10:d2:db:91:2b:42:bf:21:22:
bb:b9:86:84:3f:fa:49:fb:1d:55:19:ec:44:4f:b3:
e1:0b:05:c5:8e:7a:99:08:18:09:d7:fc:a7:b5:4f:
44:23:9c:e2:fb:7a:ce:b9:e4:52:5f:81:92:62:13:
bf:be:29:8a:09:2a:4e:e9:38:02:0c:9a:4e:81:cf:
74:2f:c4:d3:9d:f6:fd:18:3a:ab:b2:70:cb:78:b3:
73:9f:5b:1f:30:5f:f3:ef:cc:db:42:d9:e9:80:99:
12:b7:c2:3e:48:f0:b8:f0:c6:4d:d2:68:36:95:7f:
4e:88:14:2f:7d:1e:eb:6c:11:ee:fc:ff:4e:41:da:
7c:bb:4b:b7:4a:21:14:cb:e5:ea:ab:94:6b:98:58:
47:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:18:BD:C5:C1:DB:08:A4:C6:F3:2B:80:52:E9:65:B3:F8:5E:84:C1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F44DE9A8687011ECA192E768C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.101.134.0/24
103.185.179.0/24
Signature Algorithm: sha256WithRSAEncryption
69:36:92:86:2a:a3:a8:2c:13:9b:e9:5b:c3:a9:f5:f4:98:34:
4d:94:57:b1:e0:73:ef:50:05:08:7e:7c:74:e7:2c:57:ab:33:
57:ed:84:ec:ac:c4:cf:46:f8:a5:c6:48:ee:8f:43:d4:6a:06:
ad:df:f3:5f:0e:b0:56:0a:ab:d0:e4:4d:00:77:a1:8f:24:11:
bd:7a:db:7d:3a:7f:95:39:29:93:e7:ef:9f:e6:48:32:b5:6c:
80:6e:45:69:88:73:48:1a:a3:a6:68:2f:ce:d8:c6:1a:b6:eb:
7c:54:73:1d:00:7f:77:93:21:09:60:97:8f:1b:01:a9:9b:7d:
c7:08:20:a2:a3:3a:a5:08:da:71:b3:93:84:a7:56:84:7c:1a:
69:51:59:69:02:f5:54:b5:a9:57:17:ab:10:65:a7:34:6d:c6:
ef:d4:66:1e:a0:6a:fb:fd:c9:ad:8a:d1:43:e0:0c:4a:33:ee:
44:3e:5c:e0:d3:c2:43:83:ba:41:a5:d4:3d:5a:68:64:4a:55:
8e:07:49:bf:1f:a3:20:54:59:bc:06:22:95:e2:ef:99:ef:cd:
08:6d:f3:c1:0d:4c:2e:d9:58:d3:23:f2:7c:50:14:f1:48:56:
7f:d8:c0:74:5b:07:fa:bd:50:61:0d:de:aa:8a:cd:f8:23:29:
cf:d5:86:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:40 2026 by rpki-client