
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC929F26F59611EFBE15FE54C4F9AE02.roa
File: FC929F26F59611EFBE15FE54C4F9AE02.roa (raw, json)
Hash identifier: J6LY3d+8NZ8QT587HCTg0eb8DBiTdyrpxBBb83ni3Cs=
Subject key identifier: E6:95:96:D7:D3:2E:61:E4:19:C4:CF:59:67:BC:A1:19:DD:6A:95:B4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E413
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC929F26F59611EFBE15FE54C4F9AE02.roa
Signing time: Sun 31 May 2026 16:50:52 +0000
ROA not before: Sun 31 May 2026 16:50:51 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 135760
IP address blocks: 103.67.96.0/23 maxlen: 24
103.75.160.0/22 maxlen: 24
103.85.210.0/23 maxlen: 24
103.155.194.0/24 maxlen: 24
103.189.130.0/23 maxlen: 24
2001:df0:d040::/48 maxlen: 48
2404:9740::/32 maxlen: 40
2404:9740::/41 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58387 (0xe413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:50:51 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c66eb-77c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:7d:76:61:ea:bd:ea:6e:b3:54:ce:d6:78:
c0:8b:c9:cd:9f:8c:52:3e:ca:e2:ec:8e:3c:81:6e:
e2:08:bf:81:6e:45:85:0f:e3:40:b8:a7:52:e0:48:
3d:21:ff:90:4a:c5:5a:55:b7:7d:ce:47:59:8d:07:
d4:b7:9f:b3:d8:6b:06:50:24:4d:e6:fb:a4:d6:95:
9c:3b:af:22:07:fb:8a:3b:f8:e6:ec:23:33:1c:43:
3b:cd:47:32:46:aa:40:a3:dd:a4:60:06:c7:59:ae:
ed:4e:59:bf:fc:9b:ff:91:9c:6f:5e:02:7e:8d:42:
18:35:b6:58:23:b3:52:bc:a4:46:19:c5:6c:98:6d:
7a:5a:22:88:fc:f3:f5:18:58:72:9f:34:c9:56:c6:
3e:9e:8c:96:b1:e2:5b:64:63:c5:c5:5e:98:2e:67:
f5:63:93:05:4c:53:28:9c:ec:f3:2a:32:bb:b5:fd:
ec:02:fc:3b:38:65:3b:19:02:3f:b3:b6:d7:96:ab:
3e:3c:1d:11:ad:bf:a3:a4:88:3d:50:c9:34:d6:75:
84:b1:0f:cd:11:09:0f:e6:87:8c:dd:2b:9f:fc:40:
fa:d5:12:b2:4a:5f:a3:d1:47:18:91:06:8b:82:56:
45:20:c0:e7:7c:a8:d9:d7:d1:5b:ac:89:fb:0a:95:
b7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:95:96:D7:D3:2E:61:E4:19:C4:CF:59:67:BC:A1:19:DD:6A:95:B4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC929F26F59611EFBE15FE54C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.67.96.0/23
103.75.160.0/22
103.85.210.0/23
103.155.194.0/24
103.189.130.0/23
IPv6:
2001:df0:d040::/48
2404:9740::/32
Signature Algorithm: sha256WithRSAEncryption
ba:65:ca:2c:6a:06:4c:ba:cd:18:e9:09:bc:93:45:07:3c:17:
4e:f7:02:11:46:a5:2f:51:f9:bc:16:9b:4e:20:3e:3b:96:4f:
94:24:55:5d:af:60:04:e2:13:4b:c3:c4:24:2b:65:4f:ed:72:
9c:40:67:61:56:a6:6f:6c:8d:08:86:c5:9d:c9:d8:89:93:e9:
8b:a5:77:a3:2a:e5:0d:d8:91:6c:79:70:c7:1a:bf:d7:52:67:
79:3b:58:49:70:06:14:c4:44:b2:c9:06:bf:f3:6d:a7:85:d8:
4a:b3:06:84:7b:6d:ba:5f:2a:94:8d:f2:91:d2:1b:70:30:dd:
91:56:3d:95:ea:aa:fd:bd:0a:ec:3b:6e:9a:b9:24:fc:6a:77:
fb:43:79:24:28:e1:20:e4:e6:c2:80:51:48:ab:a9:60:f4:02:
8b:5b:42:59:33:b3:8a:59:b2:45:6c:a3:ee:96:04:8d:8b:9c:
9a:20:76:6e:fe:51:5c:48:55:51:bc:9b:7e:34:de:1e:77:ca:
7b:7b:a7:00:4f:86:90:a1:33:74:4e:62:1d:55:68:47:ca:76:
3f:a8:a8:e2:97:63:e7:fa:0f:be:b2:ee:45:e5:23:e2:c6:29:
65:56:48:ff:b3:65:3f:2e:61:37:25:99:d2:34:0c:6c:2f:ef:
96:14:78:ea
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIDAOQTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2NTA1MVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzY2ZWItNzdjMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKxKfXZh6r3qbrNUztZ4wIvJzZ+MUj7K4uyOPIFu4gi/gW5FhQ/jQLinUuBI
PSH/kErFWlW3fc5HWY0H1Lefs9hrBlAkTeb7pNaVnDuvIgf7ijv45uwjMxxDO81H
MkaqQKPdpGAGx1mu7U5Zv/yb/5Gcb14Cfo1CGDW2WCOzUrykRhnFbJhteloiiPzz
9RhYcp80yVbGPp6MlrHiW2RjxcVemC5n9WOTBUxTKJzs8yoyu7X97AL8OzhlOxkC
P7O215arPjwdEa2/o6SIPVDJNNZ1hLEPzREJD+aHjN0rn/xA+tUSskpfo9FHGJEG
i4JWRSDA53yo2dfRW6yJ+wqVt1ECAwEAAaOCApAwggKMMB0GA1UdDgQWBBTmlZbX
0y5h5BnEz1lnvKEZ3WqVtDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZDOTI5RjI2
RjU5NjExRUZCRTE1RkU1NEM0RjlBRTAyLnJvYTBPBggrBgEFBQcBBwEB/wRAMD4w
JAQCAAEwHgMEAWdDYAMEAmdLoAMEAWdV0gMEAGebwgMEAWe9gjAWBAIAAjAQAwcA
IAEN8NBAAwUAJASXQDANBgkqhkiG9w0BAQsFAAOCAQEAumXKLGoGTLrNGOkJvJNF
BzwXTvcCEUalL1H5vBabTiA+O5ZPlCRVXa9gBOITS8PEJCtlT+1ynEBnYVamb2yN
CIbFncnYiZPpi6V3oyrlDdiRbHlwxxq/11JneTtYSXAGFMREsskGv/Ntp4XYSrMG
hHttul8qlI3ykdIbcDDdkVY9leqq/b0K7Dtumrkk/Gp3+0N5JCjhIOTmwoBRSKup
YPQCi1tCWTOzilmyRWyj7pYEjYucmiB2bv5RXEhVUbybfjTeHnfKe3unAE+GkKEz
dE5iHVVoR8p2P6io4pdj5/oPvrLuReUj4sYpZVZI/7NlPy5hNyWZ0jQMbC/vlhR4
6g==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:26 2026 by rpki-client