
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6098FB5E03D511EBA6294E7CC4F9AE02.roa
File: 6098FB5E03D511EBA6294E7CC4F9AE02.roa (raw, json)
Hash identifier: QVr1vEUlvEpF/+FDxglQcrHnPvlj8nR4n4lU2wCcuWs=
Subject key identifier: F1:61:86:54:74:FC:37:FF:5D:2A:12:CA:AE:27:05:15:FB:5C:EF:AB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E047
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6098FB5E03D511EBA6294E7CC4F9AE02.roa
Signing time: Tue 12 May 2026 05:56:31 +0000
ROA not before: Tue 12 May 2026 05:56:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133680
IP address blocks: 103.24.135.0/24 maxlen: 24
103.50.214.0/23 maxlen: 24
103.91.72.0/24 maxlen: 24
103.134.132.0/23 maxlen: 24
103.136.84.0/24 maxlen: 24
103.144.215.0/24 maxlen: 24
103.182.145.0/24 maxlen: 24
103.204.231.0/24 maxlen: 24
203.76.248.0/22 maxlen: 22
203.76.248.0/24 maxlen: 24
203.76.249.0/24 maxlen: 24
203.76.250.0/24 maxlen: 24
203.76.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57415 (0xe047)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 12 05:56:31 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a02c10f-e0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:9b:9d:57:34:3a:ba:9e:46:b2:f9:51:de:
f1:0f:9a:33:ff:7c:d6:46:91:73:d3:f3:8d:d9:ae:
48:8f:db:85:96:52:30:48:ca:a5:97:de:28:2b:8d:
ba:fe:95:a7:b6:84:e9:e5:01:45:19:6c:7a:fd:e3:
54:55:d4:b3:96:fd:01:7a:10:e4:19:6c:09:94:c1:
fd:10:1e:5c:07:04:88:45:39:7d:98:a3:c0:a6:cf:
77:04:77:c9:4f:8c:fe:83:ac:cd:9d:54:b3:80:16:
00:ec:70:df:4c:9b:b0:bc:11:f0:90:cc:30:ee:9f:
83:e1:00:01:0c:7e:42:f4:48:4f:cf:9c:48:23:d2:
9b:f4:65:3a:3a:9e:35:e0:17:b7:30:c2:ca:90:1e:
89:b0:d2:a5:58:f3:3d:22:8a:b1:0b:4f:9f:bb:90:
a8:b9:8d:9e:4b:2b:dc:84:38:c4:fb:6d:6b:03:4e:
3d:af:69:cd:1e:75:fa:e2:70:14:79:dd:0f:77:ce:
e0:4e:c0:29:cd:f2:e4:e8:03:c5:3e:e1:7f:a3:b2:
9e:8b:63:2c:37:50:bb:dc:e9:1e:10:d6:9a:ba:f6:
a6:b0:85:3c:35:ea:a2:1b:3d:d1:16:c8:49:5d:c0:
a0:fa:42:8d:d2:07:16:11:d5:93:f4:8d:8c:d8:fe:
45:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:61:86:54:74:FC:37:FF:5D:2A:12:CA:AE:27:05:15:FB:5C:EF:AB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6098FB5E03D511EBA6294E7CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.24.135.0/24
103.50.214.0/23
103.91.72.0/24
103.134.132.0/23
103.136.84.0/24
103.144.215.0/24
103.182.145.0/24
103.204.231.0/24
203.76.248.0/22
Signature Algorithm: sha256WithRSAEncryption
81:dc:27:39:c1:50:4b:3d:e7:2b:6c:06:78:65:64:fe:49:63:
f1:59:d2:2a:0b:f0:f6:2c:28:11:67:a1:32:55:49:d8:58:f0:
c4:64:0e:04:77:2d:8a:af:21:c1:2b:67:47:1f:a9:d6:8b:fc:
7e:eb:5d:f9:37:a9:fa:0a:3d:61:e2:9d:ae:bc:57:50:45:33:
33:ae:08:80:b2:57:46:7d:35:9e:97:7b:20:1e:3b:d4:7d:40:
28:40:ab:23:11:42:90:67:0e:d7:f5:f7:9f:fe:90:4c:81:1c:
39:71:1a:42:61:6f:ee:91:cf:bc:56:28:04:71:dd:c7:96:b0:
ab:42:7a:93:2e:30:58:16:48:dd:28:99:20:1c:f7:8b:76:2c:
76:0b:00:de:39:79:1d:cd:d1:bf:ce:e3:be:a8:62:27:df:9b:
6b:6c:ad:16:cd:e9:5b:ba:0b:2b:d8:23:33:6d:79:d8:2f:08:
a8:08:23:5c:17:ad:61:01:6a:f8:33:79:a8:f7:69:70:cf:8f:
e1:bc:12:85:d8:5c:b1:5c:dd:2b:2f:d7:bc:7c:1f:6b:ff:3b:
76:42:f6:0c:22:a4:64:f7:73:9a:ce:fa:ec:15:c3:54:07:0a:
d8:4f:38:dc:4a:4a:1d:42:11:dc:40:8e:5a:18:27:fa:8b:67:
95:ca:ea:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:41:28 2026 by rpki-client