
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15FCF28CF64A11EAAB86A34EC4F9AE02.roa
File: 15FCF28CF64A11EAAB86A34EC4F9AE02.roa (raw, json)
Hash identifier: CujNPRKVNPeBPeXl9zPxf28EhMH9wcejev2IiLfsL7w=
Subject key identifier: BA:C7:A4:13:7A:C7:80:5A:EB:AC:62:0F:E3:F0:D5:9C:CF:41:0F:1E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EB8A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15FCF28CF64A11EAAB86A34EC4F9AE02.roa
Signing time: Sun 31 May 2026 17:52:54 +0000
ROA not before: Sun 31 May 2026 17:52:54 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 58909
IP address blocks: 103.11.245.0/24 maxlen: 24
103.149.10.0/24 maxlen: 24
103.174.226.0/24 maxlen: 24
103.180.51.0/24 maxlen: 24
2001:df7:d880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60298 (0xeb8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:52:54 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7576-8a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:f2:a0:61:97:51:fb:d6:a7:31:84:02:f9:
8c:c7:b8:58:dd:7e:bc:15:77:47:d6:bf:2c:6c:60:
40:bb:50:f2:13:28:33:ed:c2:b6:79:3d:3d:91:fb:
e2:32:36:37:ec:95:d7:66:77:41:7c:60:cb:0b:57:
8a:b5:14:ed:b9:e0:04:80:5b:10:fb:1a:6e:d7:53:
a1:1d:e5:a5:fa:cf:7e:5d:65:87:ed:0a:e7:38:7b:
9d:fb:58:e7:b1:75:54:f9:92:c4:fc:fb:ee:70:79:
c3:2a:0c:66:e0:c5:0f:d7:99:71:e5:51:a2:d9:c9:
1f:41:87:df:a3:d5:d8:71:54:5e:98:c8:eb:d3:0a:
af:c6:4d:bd:18:1e:11:bc:d4:2c:1d:7e:2c:1d:5c:
9e:2e:05:17:90:22:f4:8e:88:24:1d:74:0e:2d:68:
42:91:7c:6d:c8:c9:6b:27:bd:71:3f:7f:ee:a7:31:
3f:9d:f1:95:f8:30:c5:3d:90:a1:0d:75:2a:64:ba:
4a:44:9f:0b:ca:be:57:92:e3:b7:87:a4:30:bc:b4:
70:b2:3b:de:3e:b0:33:58:a9:e1:a6:35:3f:c4:e5:
1d:c8:76:ab:66:c1:40:8e:3c:6e:8c:cd:c2:8f:77:
b0:a6:1e:94:d4:bb:06:57:db:c6:de:30:a1:51:9c:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C7:A4:13:7A:C7:80:5A:EB:AC:62:0F:E3:F0:D5:9C:CF:41:0F:1E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15FCF28CF64A11EAAB86A34EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.11.245.0/24
103.149.10.0/24
103.174.226.0/24
103.180.51.0/24
IPv6:
2001:df7:d880::/48
Signature Algorithm: sha256WithRSAEncryption
ae:27:ba:b4:eb:34:ae:9a:fb:4e:50:a3:bc:05:ab:03:76:65:
f0:e0:bf:b7:6d:98:f7:2d:f7:21:39:e1:7b:d5:47:72:ed:eb:
58:63:64:ee:de:4d:3e:cf:35:ce:7f:85:67:72:9d:4f:5c:0e:
26:31:8a:f8:4b:7f:9e:f1:d1:b0:c6:ea:df:28:91:e8:d7:d0:
80:1e:5b:06:6d:8d:86:a5:e9:96:d2:79:60:9c:45:4b:e2:43:
8c:ed:e7:b4:04:ab:ef:52:f8:8c:90:f4:04:c5:b6:59:3a:85:
cd:cc:4d:4e:ec:60:c5:00:e3:65:60:d3:b2:97:d8:e9:24:52:
a1:9d:94:40:5d:86:b5:a0:e5:71:fe:a1:d5:00:5e:2c:cc:16:
1e:fd:a0:21:a1:08:01:00:6b:09:0a:41:6f:cf:e2:f9:ff:0f:
37:ad:f2:53:8d:46:25:86:43:ab:58:51:23:8e:c6:66:51:ae:
52:5a:2b:39:db:fe:23:d1:04:1e:b4:0f:b6:21:27:2b:96:b3:
63:67:7f:11:1a:77:c6:92:a5:1f:d0:bf:25:1f:23:f8:07:53:
b5:60:09:8a:7f:83:39:0e:ed:9e:42:7b:8e:e3:b9:6c:01:d6:
5d:b6:2e:5c:45:21:ed:8a:ae:54:71:01:ea:5b:87:b1:26:82:
4a:9d:86:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:32:04 2026 by rpki-client