
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A015129EDD8811F092CEDE3F3C6F56BC.roa
File: A015129EDD8811F092CEDE3F3C6F56BC.roa (raw, json)
Hash identifier: jaduztiZkWsEih2v+ZreDFNUxOGBbSBOtbGx9e0k+pw=
Subject key identifier: 41:FA:38:9B:AA:15:45:A9:EF:4A:77:E0:7E:5E:6F:85:1C:B0:98:CD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DF9C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A015129EDD8811F092CEDE3F3C6F56BC.roa
Signing time: Thu 30 Apr 2026 10:44:53 +0000
ROA not before: Thu 30 Apr 2026 10:44:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150630
IP address blocks: 103.66.234.0/24 maxlen: 24
103.79.164.0/22 maxlen: 24
103.86.68.0/24 maxlen: 24
103.86.69.0/24 maxlen: 24
2001:df2:4c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57244 (0xdf9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 30 10:44:53 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69f332a5-1a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:0e:04:7f:99:d1:a3:69:82:51:ad:46:b5:
6f:5c:92:f9:b1:1c:69:63:81:b4:ea:21:5e:b2:c9:
5a:7c:f5:83:22:9f:43:58:1d:33:38:39:18:d2:6a:
5d:57:c9:5e:73:f6:bb:3e:a6:25:79:05:75:e2:6c:
51:d0:b9:74:14:16:62:1f:1e:c6:47:43:42:81:7e:
ab:37:d4:82:71:fe:5f:43:b5:a3:56:c9:7c:6d:76:
1e:ea:4b:44:e0:7f:b9:36:e1:05:3e:7e:ac:a6:b9:
37:9d:10:c1:52:c4:53:a4:b1:cb:fa:25:7b:b0:1e:
be:82:1d:9f:d5:db:14:f8:a1:07:2b:8b:41:ac:b4:
65:29:03:3c:99:06:f6:80:e4:d1:ec:00:08:a8:62:
08:8f:26:86:3d:90:76:ba:a9:33:e2:2e:b7:ad:54:
90:81:13:d1:11:db:83:b6:32:73:f6:b9:75:c6:f4:
79:e8:e1:94:11:b0:a0:56:5d:ed:f2:8b:ce:4c:e9:
62:cc:e4:f3:0d:82:67:36:d9:55:41:90:7a:50:68:
1c:b7:52:f0:85:b8:c6:b7:8e:93:34:f3:c4:41:07:
7b:85:19:66:09:5a:9e:8e:75:71:da:8e:e5:7c:67:
64:85:cc:c8:f5:3b:f9:07:de:2d:f3:e2:c4:d3:ef:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FA:38:9B:AA:15:45:A9:EF:4A:77:E0:7E:5E:6F:85:1C:B0:98:CD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A015129EDD8811F092CEDE3F3C6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.66.234.0/24
103.79.164.0/22
103.86.68.0/23
IPv6:
2001:df2:4c0::/48
Signature Algorithm: sha256WithRSAEncryption
6d:9d:ee:c4:5f:c7:72:2b:89:5f:4e:ca:53:cc:51:ae:46:28:
af:00:56:06:9f:de:32:ff:e2:a0:f8:61:04:04:ae:7f:2d:d8:
d5:ad:36:61:74:23:26:89:e7:af:10:50:df:ea:cc:08:af:4a:
ad:57:9f:d5:ef:56:27:f4:a5:f1:28:5c:96:9b:d1:6b:61:07:
68:c8:9e:25:65:02:be:ab:2d:fb:38:db:29:98:b2:77:00:7b:
92:cd:6f:8b:77:7b:5e:ae:57:0c:78:3a:b5:f0:bd:18:8f:66:
a5:65:9b:71:03:c8:9f:81:35:f9:2a:6f:96:fa:cb:a8:86:22:
51:16:36:53:02:42:4a:b1:d7:a2:b2:d3:f5:ac:8f:08:0f:e1:
66:20:2f:3d:38:90:21:08:91:e9:3a:a1:67:02:7e:a9:74:dd:
ac:ac:05:b2:e7:52:f6:a6:99:74:49:83:95:f1:e0:8c:10:d4:
45:b3:5b:5d:81:62:3d:bd:30:2d:0e:18:b2:a1:0a:f8:3a:92:
89:0e:c0:3e:31:e5:9b:89:6b:8a:e5:80:fa:bb:06:70:2e:fb:
2f:8e:96:88:8a:ee:88:cf:e1:d0:3a:fb:ef:65:c0:3a:7d:ea:
34:fc:01:86:f4:4e:78:c3:73:15:76:8d:f8:93:24:df:bb:2a:
15:47:5c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:06 2026 by rpki-client