
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8892F972445A11F18C6F017390833773.roa
File: 8892F972445A11F18C6F017390833773.roa (raw, json)
Hash identifier: I2eODJwPmg8GLeal9VrdP8E3pyN8VLQsH8EMmVjNl+4=
Subject key identifier: 55:B2:00:E1:91:48:C7:C2:40:0A:39:DF:7A:A2:CB:93:39:93:73:DB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DF8C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8892F972445A11F18C6F017390833773.roa
Signing time: Thu 30 Apr 2026 06:05:05 +0000
ROA not before: Thu 30 Apr 2026 06:05:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132420
IP address blocks: 103.59.180.0/23 maxlen: 24
103.65.20.0/23 maxlen: 24
103.171.44.0/24 maxlen: 24
103.171.45.0/24 maxlen: 24
103.175.22.0/24 maxlen: 24
103.175.163.0/24 maxlen: 24
103.178.248.0/24 maxlen: 24
103.185.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57228 (0xdf8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 30 06:05:05 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69f2f111-24a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:c0:8a:a9:4e:4b:c9:a0:7f:bc:7a:40:4c:
82:19:55:81:ee:e0:1d:a2:91:b0:08:6b:cc:bb:b5:
dc:30:59:0b:e8:f7:29:36:bb:fc:af:b5:f8:3b:30:
4f:04:ba:06:77:cd:df:99:d1:72:39:c1:b3:2b:71:
25:12:0f:4a:84:e6:68:47:16:d2:9a:f7:df:2c:33:
f0:a1:53:83:f0:c7:7d:eb:81:19:0d:ea:d4:d4:7c:
e5:4c:e5:7d:21:18:ba:dd:9a:a5:aa:ce:35:96:ed:
63:3d:1d:9d:e9:ce:86:65:c5:82:14:c5:eb:b5:bf:
20:bf:d8:63:2a:7c:46:c4:c9:75:36:bf:b2:9f:fe:
34:4a:44:bd:c6:53:60:0e:9e:b0:a4:38:11:32:1d:
a4:22:91:bd:87:1a:ba:c9:b6:55:e9:ea:f1:82:b3:
6c:6c:39:3f:04:9c:cb:0f:21:06:7a:7d:bf:ba:71:
26:c2:0a:b3:fb:99:e9:d0:35:1e:f6:54:9f:83:61:
00:c5:8c:ba:a1:aa:71:a7:fa:e1:c8:e3:00:86:d7:
36:a4:e4:ef:0b:2c:06:30:4f:d4:44:f6:48:58:58:
ac:8c:19:56:68:ec:28:f1:f1:0d:23:0d:f2:14:eb:
11:57:14:f3:65:fa:b0:73:75:1f:bd:e7:cb:2a:a1:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B2:00:E1:91:48:C7:C2:40:0A:39:DF:7A:A2:CB:93:39:93:73:DB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8892F972445A11F18C6F017390833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.59.180.0/23
103.65.20.0/23
103.171.44.0/23
103.175.22.0/24
103.175.163.0/24
103.178.248.0/24
103.185.212.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c6:8d:d5:fc:62:c4:b1:ac:07:5f:cf:2c:d6:b8:d6:bd:16:
9b:ff:32:d6:b3:03:60:23:b3:c2:90:e4:d1:e5:ec:c9:4e:90:
7d:4c:de:67:f0:e4:60:69:ad:82:0e:54:cc:f7:5f:78:19:1d:
e3:88:59:53:b6:60:e2:84:67:b2:fc:c3:0f:0c:d3:c3:1f:96:
3b:6f:12:9d:b3:0b:cd:a0:08:c7:09:89:b8:c6:9a:32:74:84:
04:75:dc:c3:9d:3f:69:87:2c:94:8c:2f:b4:f0:8a:6a:42:94:
b8:55:63:ce:76:d4:00:a3:70:93:01:a8:a2:39:5e:f7:53:98:
41:78:d0:52:ba:fe:e9:73:49:1c:93:ad:41:f1:a8:b4:42:46:
2b:2a:cf:03:2f:d0:38:f1:83:20:c0:0b:d8:bf:bb:f1:af:cc:
6d:4b:aa:26:6a:0b:c2:a9:2f:e8:c2:8f:9b:bc:6a:9e:42:b0:
33:0c:06:0a:7c:e7:a2:cb:d7:d1:7a:3e:1b:db:d0:e4:2e:63:
de:79:ec:ee:25:ba:8d:8c:5f:db:7e:93:2e:24:44:61:37:e5:
5b:c2:e2:6f:5b:87:65:9b:14:24:95:de:a6:96:9a:a0:ae:89:
fe:21:55:eb:6e:ef:a9:47:51:2e:43:18:1b:74:5f:99:b1:dc:
77:a4:62:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:06:37 2026 by rpki-client