
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E685B48E438811F1AC66FD97C5833773.roa
File: E685B48E438811F1AC66FD97C5833773.roa (raw, json)
Hash identifier: rYcn2tEPsSzvo3xFR7YQ0aJ5cAOYLE+QRA5ekxGmHns=
Subject key identifier: C9:6E:B3:8A:46:72:81:DA:7E:9D:68:40:E2:DC:2F:2B:F6:4A:6E:9C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DF63
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E685B48E438811F1AC66FD97C5833773.roa
Signing time: Wed 29 Apr 2026 05:04:29 +0000
ROA not before: Wed 29 Apr 2026 05:04:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134858
IP address blocks: 103.39.116.0/22 maxlen: 24
103.80.22.0/23 maxlen: 24
103.105.96.0/23 maxlen: 24
103.127.224.0/22 maxlen: 24
103.148.8.0/23 maxlen: 24
103.157.52.0/23 maxlen: 24
2407:8c0::/32 maxlen: 32
2407:8c0:1900::/48 maxlen: 48
2407:8c0:1900::/51 maxlen: 51
2407:8c0:2000::/48 maxlen: 48
2407:8c0:2000::/51 maxlen: 51
2407:8c0:2100::/48 maxlen: 48
2407:8c0:2200::/48 maxlen: 48
2407:8c0:2300::/48 maxlen: 48
2407:8c0:2400::/48 maxlen: 48
2407:8c0:2500::/48 maxlen: 48
2407:8c0:2600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57187 (0xdf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 29 05:04:29 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69f1915d-37de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:e4:00:3d:29:8f:ff:a1:20:7e:62:80:73:
bd:32:66:53:b5:27:fa:a4:3a:4f:12:a7:b3:00:4c:
f0:87:3d:fe:12:61:23:f1:f7:14:cd:06:10:f8:1a:
7f:07:3c:f4:22:cc:ef:f6:a0:31:b0:c3:b0:a1:d3:
fb:53:65:dd:29:44:82:67:9f:1f:95:33:69:dc:21:
8a:a5:68:44:a0:23:d5:df:6d:97:36:ac:15:5e:6f:
d3:70:22:ad:8c:0f:fc:12:54:c3:84:b9:50:10:2b:
d9:4a:f1:4d:d5:f1:eb:6b:80:0f:c3:6b:22:d0:0c:
49:96:ef:18:cf:da:74:9e:02:f4:08:42:84:e5:86:
49:e6:a9:7c:47:53:99:c5:d1:e1:78:37:2a:c3:eb:
71:87:7c:06:1d:8f:ea:df:46:e2:df:b4:84:17:8c:
d8:ee:c7:9e:8e:12:8b:f0:da:6c:7c:ec:14:53:a2:
94:e0:26:69:c6:85:83:0c:73:a5:89:17:7f:b6:fb:
53:c0:39:11:63:81:f8:3f:0e:ad:1f:45:53:72:26:
74:61:f8:18:4e:57:ff:9e:c3:6d:b6:ab:6e:3b:cb:
24:71:a3:e2:0a:3c:e1:7f:1d:d5:3b:7f:7f:86:07:
a5:60:11:84:d3:0a:bf:aa:6b:e0:56:9e:1b:5b:11:
f8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6E:B3:8A:46:72:81:DA:7E:9D:68:40:E2:DC:2F:2B:F6:4A:6E:9C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E685B48E438811F1AC66FD97C5833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.39.116.0/22
103.80.22.0/23
103.105.96.0/23
103.127.224.0/22
103.148.8.0/23
103.157.52.0/23
IPv6:
2407:8c0::/32
Signature Algorithm: sha256WithRSAEncryption
6a:bf:d0:3d:f2:f5:27:74:98:82:ab:bf:39:7f:ba:72:c9:30:
95:e8:ae:72:0b:7e:cf:14:c9:62:6d:f0:11:c0:b2:5a:69:c8:
7e:02:b2:18:e2:b3:15:a0:d8:9f:9e:a4:3c:32:cc:a8:c2:14:
6f:f8:af:91:b8:5a:19:44:f2:07:57:9a:8b:57:d4:4a:46:65:
81:3f:c2:9c:2a:39:29:0a:46:8c:51:d2:1c:97:20:71:97:b2:
77:35:76:9b:59:ea:2a:14:6f:ed:bc:af:a5:b6:86:b1:32:07:
f2:4d:97:88:d0:f8:29:cc:b3:7b:3a:6f:dc:d7:9f:9a:97:1e:
7b:7b:c7:20:60:d9:d6:1d:52:24:ac:81:5b:5c:43:38:92:fe:
56:07:a9:eb:bc:0b:46:d4:83:ea:1c:7c:b4:d8:62:75:fd:e4:
70:20:71:05:fc:06:b3:eb:7e:b3:94:23:dd:09:5f:44:54:79:
c3:33:d8:9d:32:59:ad:b7:90:32:a8:dd:09:0a:90:d3:eb:08:
d6:00:67:f4:e4:fc:d5:01:ab:d7:55:86:76:c3:cf:9c:e6:78:
72:88:44:48:b9:51:38:08:ed:1f:0d:04:55:e1:59:8b:48:63:
23:9b:c0:7a:23:16:c8:2c:56:4d:87:94:5f:8f:96:d0:61:4f:
d8:d1:ed:d4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:05:40 2026 by rpki-client