
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8DD8B64C67C11EF87BF9436C4F9AE02.roa
File: F8DD8B64C67C11EF87BF9436C4F9AE02.roa (raw, json)
Hash identifier: 20Q9P38VkYM7EWhpjtGW8CLucqV5kfKTyIm7lTRIP5E=
Subject key identifier: 24:5C:A9:2D:55:FE:FF:F2:89:CB:8F:17:2F:61:87:26:1D:8F:FE:A3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EBA3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8DD8B64C67C11EF87BF9436C4F9AE02.roa
Signing time: Sun 31 May 2026 17:53:40 +0000
ROA not before: Sun 31 May 2026 17:53:40 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 59196
IP address blocks: 103.44.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60323 (0xeba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:53:40 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c75a4-980e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:76:fc:1f:87:30:bf:8b:e0:e3:50:d8:43:a5:
3c:1d:59:16:8e:b6:bd:27:d9:9e:70:5d:75:1c:a8:
fb:01:de:6c:14:44:3d:07:9a:f6:a2:e4:d0:e5:16:
44:f5:30:53:8a:2c:03:ed:05:1d:c7:49:5f:e0:fd:
d2:e5:ff:d5:0c:8b:cc:63:45:e8:be:d4:5b:8e:54:
48:32:c4:d8:60:20:e4:8d:4f:83:b5:38:e2:16:23:
b4:d0:5a:79:37:f7:53:5f:9d:36:99:62:2d:03:90:
a1:68:cf:8e:ff:7a:aa:50:d0:ac:85:38:03:77:fe:
b8:3e:d9:1e:5a:9a:1a:f1:bd:19:f7:8a:1f:58:f8:
46:3d:ad:3d:16:29:1f:fb:ad:1a:f8:d5:e2:45:d5:
42:92:f3:3a:d0:f6:6b:de:c7:89:98:c1:6b:48:cc:
05:34:45:c1:8e:54:90:ca:00:7a:7d:14:46:90:b6:
b0:03:3c:4a:4c:c4:c3:e2:86:fe:e8:d8:76:3d:d2:
4f:16:55:8f:cc:7c:09:fa:35:c6:9a:de:06:7d:21:
88:e1:89:8a:47:c3:ff:ca:63:c6:a7:1b:b6:05:74:
3d:83:2b:14:cb:6b:ac:0b:ba:77:8a:d6:ed:a9:36:
93:c0:06:48:b3:40:f0:f2:44:1a:92:49:b1:1f:f3:
8d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5C:A9:2D:55:FE:FF:F2:89:CB:8F:17:2F:61:87:26:1D:8F:FE:A3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8DD8B64C67C11EF87BF9436C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.44.156.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:b1:8a:7f:09:12:a5:df:b3:93:21:94:4b:cb:66:7d:4e:30:
64:95:8f:de:94:a7:7b:70:e5:2c:b5:85:53:b4:9e:93:91:14:
e0:0b:f4:51:c4:be:6c:c4:18:41:de:df:6a:0b:cc:b2:84:ea:
55:b8:2d:ee:58:70:64:70:a7:03:f0:68:55:72:a6:63:4b:17:
34:ac:b8:10:94:65:8a:74:b3:01:8a:60:0b:0d:2b:12:b4:4f:
3b:19:b6:60:c0:00:71:91:11:a2:c3:da:37:ee:d8:a5:c2:03:
97:ca:ff:a5:92:c2:b0:39:22:90:b0:2d:a9:40:64:5d:59:df:
de:ae:18:db:5f:b1:83:cf:25:8f:88:ce:9d:81:6c:b5:04:55:
ce:1d:1c:64:89:64:11:3c:53:e0:15:c5:ca:61:13:f3:d1:5c:
96:42:8a:20:d0:0a:49:83:cb:b7:63:b4:e6:05:64:19:e6:63:
66:47:e2:2d:fa:d2:48:17:71:95:4b:ad:65:ea:45:06:71:75:
e0:96:3b:d0:ab:96:07:5b:df:bf:cd:52:57:30:a9:bb:61:98:
b8:2c:8e:6d:7a:2a:2c:3f:b9:36:80:3e:fc:ff:b4:c4:d9:ad:
11:fe:1b:ff:d0:2d:d1:e2:33:f8:b3:18:ed:4c:64:71:34:47:
38:8b:19:f6
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOujMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3NTM0MFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzc1YTQtOTgwZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANp2/B+HML+L4ONQ2EOlPB1ZFo62vSfZnnBddRyo+wHebBREPQea9qLk0OUW
RPUwU4osA+0FHcdJX+D90uX/1QyLzGNF6L7UW45USDLE2GAg5I1Pg7U44hYjtNBa
eTf3U1+dNpliLQOQoWjPjv96qlDQrIU4A3f+uD7ZHlqaGvG9GfeKH1j4Rj2tPRYp
H/utGvjV4kXVQpLzOtD2a97HiZjBa0jMBTRFwY5UkMoAen0URpC2sAM8SkzEw+KG
/ujYdj3STxZVj8x8Cfo1xpreBn0hiOGJikfD/8pjxqcbtgV0PYMrFMtrrAu6d4rW
7ak2k8AGSLNA8PJEGpJJsR/zjbcCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQkXKkt
Vf7/8onLjxcvYYcmHY/+ozAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y4REQ4QjY0
QzY3QzExRUY4N0JGOTQzNkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmcsnDANBgkqhkiG9w0BAQsFAAOCAQEAL7GKfwkSpd+zkyGUS8tm
fU4wZJWP3pSne3DlLLWFU7Sek5EU4Av0UcS+bMQYQd7fagvMsoTqVbgt7lhwZHCn
A/BoVXKmY0sXNKy4EJRlinSzAYpgCw0rErRPOxm2YMAAcZERosPaN+7YpcIDl8r/
pZLCsDkikLAtqUBkXVnf3q4Y21+xg88lj4jOnYFstQRVzh0cZIlkETxT4BXFymET
89FclkKKINAKSYPLt2O05gVkGeZjZkfiLfrSSBdxlUutZepFBnF14JY70KuWB1vf
v81SVzCpu2GYuCyObXoqLD+5NoA+/P+0xNmtEf4b/9At0eIz+LMY7UxkcTRHOIsZ
9g==
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:17:19 2026 by rpki-client