
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4F7FD7ABDCD11EA8E393E09C4F9AE02.roa
File: F4F7FD7ABDCD11EA8E393E09C4F9AE02.roa (raw, json)
Hash identifier: g5DSTuo7SdU2cINeeWgBvNv5BgkzVXDUt6Sm2XasnB0=
Subject key identifier: 3A:2D:25:D8:60:11:95:11:D9:DB:AF:97:F9:C7:B5:C1:71:AF:90:CF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E56E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4F7FD7ABDCD11EA8E393E09C4F9AE02.roa
Signing time: Sun 31 May 2026 17:02:05 +0000
ROA not before: Sun 31 May 2026 17:02:05 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 137627
IP address blocks: 103.129.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58734 (0xe56e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:02:05 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c698d-7243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:dc:e6:b6:f3:34:16:b4:68:71:e3:67:f1:
53:31:12:db:a2:ea:b4:88:68:54:d7:c3:51:b5:74:
ff:af:73:87:1c:08:75:7b:9f:f6:12:bc:56:c7:ea:
5d:8f:59:ed:24:9d:94:17:3a:80:6b:48:94:4c:00:
66:49:d4:87:48:7a:92:ad:d5:b4:bd:e5:3d:66:e4:
e0:14:ac:11:61:f9:95:77:9a:e4:2a:ed:d8:1f:14:
1e:e3:b2:8f:c0:07:9e:56:bb:2e:b0:58:11:dc:48:
6f:d5:7c:b5:42:33:fc:61:8d:4d:50:1d:4b:5b:96:
ab:5f:7c:0e:5c:cc:4c:09:32:b5:7e:0b:af:21:cb:
ec:bb:8a:4c:ba:f1:22:78:ed:4d:8b:17:9e:90:7e:
9f:53:f5:bf:4c:72:b8:38:df:23:6b:0e:73:59:b3:
23:9b:df:12:49:55:fc:a4:94:e6:f3:3c:54:74:dd:
3f:38:98:1c:fb:ba:83:48:0d:e0:c2:61:73:2e:99:
63:33:46:d6:a5:b3:41:6e:3c:a2:de:48:d9:de:3c:
a7:97:83:80:46:74:30:7d:0c:b8:e3:62:cd:8a:94:
a6:11:e6:f5:0a:cc:58:3e:b4:39:d7:db:c6:a4:e6:
df:ae:3f:ae:61:21:a6:e1:03:64:87:bb:d9:58:b5:
f9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2D:25:D8:60:11:95:11:D9:DB:AF:97:F9:C7:B5:C1:71:AF:90:CF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4F7FD7ABDCD11EA8E393E09C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.129.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:fc:cb:3e:41:d1:44:df:c0:49:53:8b:81:2c:bc:59:11:bd:
67:bc:8b:79:03:a9:c4:06:b7:cb:df:86:9f:5e:3a:4e:5d:a5:
8c:aa:7d:c1:fe:cd:b8:a9:24:c2:57:2b:b1:ef:7c:28:c1:b0:
f9:a4:68:af:b0:14:83:c7:c3:87:d9:6c:72:dc:0b:99:f7:7a:
55:1d:40:2f:92:7e:99:60:34:21:45:94:8a:65:8d:4d:d8:e9:
e8:e6:e5:60:cc:76:e5:4e:31:fa:f6:ae:53:83:17:19:1e:61:
75:4b:36:6b:cc:82:fb:02:a3:ac:14:7d:2e:d4:12:d2:a9:37:
f0:0d:4f:f1:31:1f:04:02:1a:ac:16:7f:9a:66:9a:f4:81:37:
bc:14:c2:c6:c7:42:37:51:35:7d:f9:b3:a5:c1:e6:ac:47:1a:
ff:86:81:60:47:29:99:81:1d:dd:85:a2:3b:ae:c4:b1:2d:4f:
09:9c:a3:d7:56:82:26:96:4c:a0:e2:19:09:7b:ec:1e:14:a4:
6c:e4:de:53:70:32:dc:1d:0f:c1:a4:52:87:9c:ed:83:e8:da:
3a:2e:5b:7a:55:45:20:15:bb:86:56:16:01:9c:c1:a5:af:b9:
1c:5d:d0:fc:b7:c3:a0:4e:11:a0:69:19:d1:b4:a9:a5:ed:53:
59:c8:a4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:02:42 2026 by rpki-client