
$ rpki-client -vvf rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/B2356D1A180911EB962CB216C4F9AE02.roa
File: B2356D1A180911EB962CB216C4F9AE02.roa (raw, json)
Hash identifier: KF6rAoNA867sjLbZLipqG/MdNU965rwU4PevzNA/flw=
Subject key identifier: B6:DA:75:1D:5A:BD:AC:CF:48:42:90:0D:63:98:DF:4F:4D:AE:07:EC
Certificate issuer: /CN=A915617D/serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221
Certificate serial: 083D
Authority key identifier: 19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/B2356D1A180911EB962CB216C4F9AE02.roa
Signing time: Thu 04 Jun 2026 21:26:44 +0000
ROA not before: Thu 04 Jun 2026 21:26:44 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 135423
IP address blocks: 45.250.156.0/22 maxlen: 22
45.250.156.0/24 maxlen: 24
45.250.157.0/24 maxlen: 24
45.250.158.0/24 maxlen: 24
45.250.159.0/24 maxlen: 24
103.219.68.0/22 maxlen: 22
103.219.68.0/24 maxlen: 24
103.219.69.0/24 maxlen: 24
103.219.70.0/24 maxlen: 24
103.219.71.0/24 maxlen: 24
2405:4d80::/32 maxlen: 37
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl
rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2109 (0x83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915617D, serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221
Validity
Not Before: Jun 4 21:26:44 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a21ed94-0e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:e1:8b:b6:4c:d2:38:35:7c:fb:53:19:31:
4f:6b:c9:5e:cf:6c:4a:30:f3:22:84:9a:72:18:66:
b0:34:d9:4b:7e:6e:65:d8:7e:6c:3a:d8:87:89:0f:
75:db:3f:27:38:2e:7a:a2:60:e0:2b:9d:ee:7a:59:
63:85:16:11:00:b9:1a:52:b6:e5:ec:01:b0:56:ed:
aa:cc:8a:de:65:5c:d8:4a:b8:22:98:f0:9a:42:31:
c5:73:14:82:81:96:fd:f5:ee:2e:d5:4e:bb:ba:66:
65:ed:08:de:d6:80:99:67:b4:24:29:0c:c8:de:d2:
19:da:fc:0a:02:49:d8:cb:6e:5b:7c:22:75:72:b7:
c3:86:02:3f:64:32:29:09:f4:3f:e8:0b:52:60:e3:
8d:d8:ea:96:b2:1b:a7:1c:0b:d6:b4:fb:8c:e2:d4:
f4:c9:32:71:2b:9c:5e:39:31:5b:85:55:16:d5:b4:
36:60:5d:c2:c2:3d:4f:4a:22:25:38:9c:61:7c:fc:
27:b2:8d:d1:98:2c:fd:17:53:c5:9a:6a:d9:6c:cf:
39:12:a3:e5:a3:0c:8c:a2:82:08:0f:d2:d0:bc:f2:
77:ce:ec:08:a2:62:74:29:19:00:da:5d:ba:6d:07:
18:12:fd:05:db:af:ef:07:34:84:9f:cc:6e:db:94:
c3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DA:75:1D:5A:BD:AC:CF:48:42:90:0D:63:98:DF:4F:4D:AE:07:EC
X509v3 Authority Key Identifier:
keyid:19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/B2356D1A180911EB962CB216C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.250.156.0/22
103.219.68.0/22
IPv6:
2405:4d80::/32
Signature Algorithm: sha256WithRSAEncryption
87:72:7c:08:ac:fc:b9:85:d8:d0:73:92:f5:07:37:16:e9:1a:
1f:fa:47:fd:ce:6d:ba:ff:a1:dc:f2:58:e1:6c:55:ee:5b:a5:
b1:df:47:9c:b7:01:70:d4:38:4d:de:c2:02:78:8a:e2:12:44:
85:35:f5:7d:2e:65:19:82:d6:53:cb:07:5d:85:82:4b:2e:ca:
b3:da:ae:5b:21:e3:93:0d:07:55:6c:4d:df:b3:cf:13:03:fe:
c3:7b:6b:7d:03:75:cf:cb:de:99:73:31:31:4d:e6:b4:98:0a:
9f:14:01:ed:c8:82:31:74:67:1e:86:92:04:6a:d1:f5:60:be:
0f:3c:2e:dd:cf:30:31:9a:5e:de:c0:2f:a4:16:c3:70:ad:a0:
29:f4:a2:cb:17:03:1b:b9:40:94:ea:23:89:cf:38:0a:94:e0:
68:09:a7:9c:c7:fb:71:55:6a:9d:84:20:09:19:54:4b:23:28:
7b:d8:92:15:25:a7:81:92:ed:ef:82:20:06:d3:92:a3:99:3e:
ac:53:dc:07:07:3a:15:12:41:bb:89:3e:0d:18:ce:1c:79:c7:
a6:ee:17:2d:04:f9:9d:e7:a2:ba:91:04:e0:13:98:7c:50:8b:
e7:c8:0d:f0:12:f0:38:37:13:78:dc:e5:df:03:62:28:0d:49:
37:94:c7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:09:52 2026 by rpki-client