
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5EB21F7C2A5511F0A7BEDA1EC4F9AE02.roa
File: 5EB21F7C2A5511F0A7BEDA1EC4F9AE02.roa (raw, json)
Hash identifier: dqEwXYGb5xkT8ssKwFHyUQpn4gFqXVDMo39V3bXmzco=
Subject key identifier: 67:62:38:DA:7B:6B:64:19:21:19:04:8D:B7:22:76:3D:82:D3:4F:A7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DB22
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5EB21F7C2A5511F0A7BEDA1EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 23:06:59 +0000
ROA not before: Mon 16 Feb 2026 07:21:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136642
IP address blocks: 103.85.140.0/24 maxlen: 24
103.97.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56098 (0xdb22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 16 07:21:56 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c692-ba24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:ac:9d:3d:ac:10:1d:94:e8:b6:21:fb:0a:
b7:57:42:31:29:a2:90:17:c6:ee:c9:1d:09:b1:e5:
ff:fd:f3:6e:97:7b:2e:13:e5:e0:c1:de:77:6f:ce:
f5:4e:69:4d:d2:f8:a8:e9:7a:64:5d:c2:10:5b:b9:
ac:85:a3:13:56:17:4c:d3:bd:09:cc:bd:9f:a0:ed:
ee:42:7c:b5:3c:7a:1e:ba:65:bb:a9:31:2a:c2:27:
e6:c3:59:7f:96:f0:6f:d0:f4:00:24:87:10:46:93:
fd:49:6d:07:79:e7:fc:99:be:86:57:0b:2f:0d:41:
c1:bc:41:e2:ca:2a:82:9c:0a:97:f1:5a:2e:02:f8:
53:dd:13:3e:90:39:1d:82:87:8f:51:3c:12:42:1e:
82:31:df:9d:6e:b6:a3:5a:c5:3c:99:bd:0d:1e:48:
3f:17:25:e3:e6:2c:85:2c:bc:85:7a:17:de:19:18:
26:e5:3e:dd:0e:d2:e8:ee:bb:7b:3f:ec:c7:47:ae:
3c:13:3b:27:18:2a:0a:44:fb:d6:13:9d:39:bd:46:
e4:64:ca:c8:8f:94:e6:00:64:04:d1:04:2e:50:95:
de:06:67:a0:bc:5d:df:20:20:90:cb:24:80:c5:10:
2b:ed:b1:37:41:ec:cc:cf:4b:3d:8a:02:b7:26:2f:
e5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:62:38:DA:7B:6B:64:19:21:19:04:8D:B7:22:76:3D:82:D3:4F:A7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5EB21F7C2A5511F0A7BEDA1EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.85.140.0/24
103.97.184.0/22
Signature Algorithm: sha256WithRSAEncryption
61:97:51:a0:20:ec:c0:ab:4e:ed:c2:40:4f:04:d8:0e:0e:34:
22:ad:7b:fd:3e:0f:f8:e7:f2:c3:d9:0c:99:b4:d1:62:fb:d4:
61:38:e4:19:de:06:50:68:ef:58:ba:6e:04:c4:60:c8:f1:b3:
d8:41:6d:0f:87:5a:4e:ac:fe:89:fc:04:69:05:e0:78:40:ff:
df:03:c9:a0:e6:dc:b9:2d:e5:41:36:9c:bd:1a:d8:c3:d9:2b:
e1:8b:8a:5a:ff:db:8f:eb:92:b0:c5:a4:a4:a9:4a:fb:1d:75:
1d:41:49:d4:23:99:a8:fb:24:b7:ff:b6:d7:0b:ba:d7:8d:c9:
9c:46:a3:e8:96:3b:80:7c:c6:b7:3b:06:fb:85:df:b5:be:7a:
5a:11:c9:2d:aa:a3:c3:1f:33:6e:7b:68:16:71:72:22:77:0c:
60:df:41:f2:fe:80:94:26:1d:86:7b:41:6d:a9:21:6c:16:c0:
75:35:29:63:1d:4d:13:d5:4e:2b:29:8a:7d:0c:a0:33:d2:b4:
ff:b6:7e:33:9e:4b:63:24:01:dc:ea:b0:7c:d5:8c:3c:6c:e6:
be:97:b9:0e:d4:71:0b:96:fb:7b:b3:54:eb:b1:3c:37:a4:69:
95:5d:de:b0:d1:30:0d:24:de:ff:db:37:fa:17:91:16:1a:77:
1a:cd:17:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:07 2026 by rpki-client