
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/6E2937E456EB11EA9025542FC4F9AE02.roa
File: 6E2937E456EB11EA9025542FC4F9AE02.roa (raw, json)
Hash identifier: JhocKoCccMA3vQrzo7LGc9jkYoorBFiSlAta4V1eE2w=
Subject key identifier: 69:56:FC:E0:71:5A:1B:D7:B8:F2:B2:90:34:E4:F3:B0:46:0F:CA:45
Certificate issuer: /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Certificate serial: 0D31
Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/6E2937E456EB11EA9025542FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:28:26 +0000
ROA not before: Sat 28 Jun 2025 18:31:53 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 38566
IP address blocks: 103.66.128.0/22 maxlen: 23
103.66.128.0/23 maxlen: 24
103.233.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl
rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3377 (0xd31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AF08, serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Validity
Not Before: Jun 28 18:31:53 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4692a-eb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:9a:5c:8b:7d:e0:09:33:dc:1a:29:6a:71:
62:40:4e:90:31:74:48:d2:93:3e:c7:a6:59:47:04:
eb:f9:e8:24:8f:55:72:6f:de:82:16:e4:de:bc:d8:
cc:ad:98:fe:84:37:ae:9b:9f:e9:b4:1e:58:07:18:
a8:26:2c:75:68:fb:b2:d4:21:73:03:76:a0:d8:68:
a8:e4:f7:0a:52:37:4f:2b:d3:db:fc:7e:c6:bb:a1:
f9:af:a2:f6:fd:69:1d:61:58:f0:78:0b:d7:7b:6b:
27:05:8f:23:a2:e2:07:51:bf:96:13:f1:b1:15:45:
7c:d6:c8:99:52:07:4d:5f:e6:2f:e1:f2:a0:f1:55:
b3:8d:fc:97:55:5e:4b:b6:e4:f3:eb:b4:02:38:66:
bb:0a:93:a1:9e:4b:99:ce:e8:98:59:26:45:61:98:
64:50:11:cb:10:47:3d:b6:12:ec:60:55:e1:13:38:
2d:34:64:cf:6c:d0:6c:57:eb:e9:cd:43:e4:a5:68:
ad:f5:6d:b9:ca:8b:26:92:8a:f8:be:73:aa:28:47:
68:9f:19:eb:ac:e8:34:59:64:75:53:f7:7f:e3:9f:
ed:e8:da:28:6a:fb:f4:20:12:e2:7e:8e:25:a4:41:
5f:c1:f2:37:43:93:7e:4e:b0:a0:e4:34:7a:28:93:
74:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:56:FC:E0:71:5A:1B:D7:B8:F2:B2:90:34:E4:F3:B0:46:0F:CA:45
X509v3 Authority Key Identifier:
keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/6E2937E456EB11EA9025542FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.66.128.0/22
103.233.200.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:39:ab:97:dc:ac:02:3f:f6:44:b0:4e:ca:a7:88:a4:33:0d:
76:3d:b9:27:b4:d6:c6:9a:12:4f:be:6f:b9:cf:c5:05:c3:0a:
9f:a7:fa:00:b4:99:e8:54:ec:5a:89:7e:22:94:47:1f:18:b6:
3a:03:4b:b2:e4:e0:33:47:30:a5:e2:6f:18:54:c0:cc:c4:4d:
81:66:76:11:ac:c9:15:5d:71:af:80:83:52:4f:9d:8d:e4:36:
19:68:80:ca:5f:06:64:30:be:b0:92:02:25:f1:a9:52:9e:6d:
7f:3a:f0:e8:93:c7:e4:c9:d1:bc:46:25:42:4f:9b:bb:4e:48:
57:e9:17:25:b1:fa:2b:a9:97:9c:f0:80:a6:73:04:49:40:5f:
6e:47:52:73:36:97:81:c1:b3:65:70:0c:83:dd:27:33:2a:87:
4c:2c:1c:c1:b0:60:00:6e:ae:a0:fa:19:c6:b7:8b:33:b7:d1:
e1:82:83:05:33:2b:75:21:32:89:62:db:75:30:13:83:be:15:
19:0b:9c:aa:76:1c:c8:6f:3b:a4:03:62:99:5a:cb:ef:e7:e5:
5e:ec:bb:9e:b6:71:57:73:10:90:86:2f:b0:b1:41:03:4d:d7:
70:51:2a:67:33:31:26:64:52:33:0f:7c:0b:f6:18:5b:73:95:
2a:4e:5a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:07:42 2026 by rpki-client