
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF5E639C47B911F1B621D357AC833773.roa
File: DF5E639C47B911F1B621D357AC833773.roa (raw, json)
Hash identifier: Hs5ytTjlruysqpuohvLjww6TR83RzFf414y6gq84uK8=
Subject key identifier: E2:01:05:59:ED:C5:8E:4B:8B:ED:0F:DF:A4:E5:1C:3C:14:85:D9:4A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DFCC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF5E639C47B911F1B621D357AC833773.roa
Signing time: Mon 04 May 2026 13:05:07 +0000
ROA not before: Mon 04 May 2026 13:05:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136356
IP address blocks: 103.91.62.0/24 maxlen: 24
103.153.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 10:52:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57292 (0xdfcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 4 13:05:07 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69f89983-4d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a2:79:87:21:83:c7:0d:f3:00:42:86:20:9a:
3c:16:eb:0b:c6:d1:a4:c2:e4:fa:89:6c:23:98:80:
4f:79:26:a5:d9:8f:a5:17:a1:e8:2a:8d:2d:ec:5d:
91:dc:2e:7d:44:0f:93:04:64:d4:e0:6b:1c:e0:4d:
a0:40:12:6b:8a:b6:bb:67:84:86:ec:a1:23:21:40:
53:0b:0a:57:29:38:0e:e4:31:52:a0:6a:2e:9b:ee:
8d:16:29:11:33:f5:7c:e6:60:bf:57:bb:1f:08:9a:
bb:b7:b3:29:0b:84:c6:7a:03:17:08:42:01:28:11:
54:c6:e0:4e:e9:3b:0d:b9:f0:8b:3d:49:b5:b2:77:
e0:eb:1e:2b:b4:26:d7:6a:a6:2c:65:13:e8:5e:ee:
06:c4:d7:c9:06:93:71:e4:01:e0:8b:12:b4:c9:0d:
96:ee:d5:7a:d7:74:21:34:77:aa:52:8f:11:c1:a1:
d7:d0:00:84:60:ad:c5:98:09:48:12:12:e1:d1:72:
dc:82:3f:9a:56:fa:5d:df:7b:8d:2b:fc:53:6e:d3:
98:c7:1f:93:a4:5b:97:c2:42:55:6c:2c:b6:24:72:
95:5b:59:1b:26:ad:80:0a:b6:c4:ac:8c:fd:22:f3:
95:81:b6:21:1f:52:7f:23:82:d7:7b:41:0d:76:34:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:01:05:59:ED:C5:8E:4B:8B:ED:0F:DF:A4:E5:1C:3C:14:85:D9:4A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF5E639C47B911F1B621D357AC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.91.62.0/24
103.153.250.0/24
Signature Algorithm: sha256WithRSAEncryption
15:85:79:12:a1:59:c2:40:d1:b8:2d:55:53:70:8f:cf:77:42:
4f:ea:1f:60:af:e5:21:d1:bb:dc:2d:5b:50:47:fa:fa:bb:d1:
59:da:e3:cc:d9:51:97:f0:16:ac:c7:7b:78:5c:d2:96:7b:a9:
8a:65:83:ba:5f:76:f0:86:09:83:9b:98:97:c2:44:1e:4f:c3:
0c:41:76:1a:d7:89:dd:63:b5:a9:91:af:32:6c:93:1d:4c:db:
ec:35:f1:dd:e8:cc:75:e9:83:5d:6b:42:8e:d0:88:82:59:37:
11:6e:41:ea:61:42:c2:ca:9b:94:a2:41:f2:8d:61:5f:76:4b:
4e:17:9e:8c:92:51:ec:8b:6b:48:cf:bd:06:f0:f0:c3:34:31:
30:4c:1d:58:94:85:a2:73:50:e1:47:38:5a:d4:cb:e7:46:cf:
ef:d6:3e:ab:57:35:6c:31:07:ba:c6:8c:a8:bc:a9:e3:c9:c8:
93:33:71:6b:e5:49:a2:89:0f:77:09:72:80:d0:ef:88:a0:e0:
03:5e:d7:ce:c8:0f:be:99:b6:9c:f6:62:48:f4:71:9c:6a:96:
19:da:41:0f:3c:11:13:56:9b:03:fe:27:53:58:8c:08:4b:74:
2e:d7:d1:41:e4:28:94:22:37:72:34:59:4c:c1:92:09:b9:e1:
04:1a:0b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:24:31 2026 by rpki-client