
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A83F714BDCF11EA8755D90DC4F9AE02.roa
File: 6A83F714BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier: B9OBd3bZVj0cSp4f2zrbMpsry/Skp3B6KvrMZtSjnSg=
Subject key identifier: 94:20:FC:A0:58:DB:8A:B3:1A:FB:2F:BB:40:63:7B:9B:D9:3C:E0:CD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D4E1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A83F714BDCF11EA8755D90DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:34:40 +0000
ROA not before: Thu 08 May 2025 16:13:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139520
IP address blocks: 103.142.63.0/24 maxlen: 24
103.154.106.0/24 maxlen: 24
103.164.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54497 (0xd4e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:13:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4beff-de79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1b:fb:9b:b9:e2:cc:8f:cc:f7:ab:9e:ac:6b:
ee:5a:2b:22:de:6b:d4:9d:b8:a5:c5:d3:34:f6:66:
82:72:63:08:8d:30:1f:15:81:91:cc:e6:3e:04:b7:
08:2d:ae:a4:c8:cd:6b:5e:55:19:10:70:6d:25:6c:
8f:c7:4f:0b:29:f6:de:a7:93:b1:bb:9a:70:ee:c6:
5a:08:dd:79:ac:0a:6c:19:99:fd:2c:9c:11:89:f2:
82:ae:3a:00:22:f7:39:b0:04:da:49:d3:51:f1:2e:
f2:b6:a6:2f:95:35:e1:d6:50:38:43:bc:ca:4b:ed:
78:c3:cb:77:c6:10:c9:3c:3e:10:9b:4f:55:49:28:
1d:02:9a:fa:5d:95:66:28:3e:09:d2:30:8b:58:be:
7f:dd:bb:62:b7:a1:af:e8:ed:7d:d2:83:ef:92:ae:
38:c3:80:1d:e9:d1:90:73:b3:ea:94:ab:dd:40:d0:
ed:e9:a4:c0:f1:a8:3b:06:d7:c5:ff:bf:21:bc:f2:
57:de:6f:a7:f6:b2:75:0c:7a:4d:b0:ee:8d:b2:48:
d6:bf:4e:7f:2f:8f:fd:2d:d8:48:b3:d8:45:6b:08:
54:13:56:92:5a:2b:e9:90:cf:e8:a3:6f:76:6b:24:
51:d4:bb:38:0e:c6:8b:e1:af:9d:4a:3a:7f:eb:f0:
1a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:20:FC:A0:58:DB:8A:B3:1A:FB:2F:BB:40:63:7B:9B:D9:3C:E0:CD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A83F714BDCF11EA8755D90DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.142.63.0/24
103.154.106.0/24
103.164.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:4a:e9:86:a5:53:de:54:56:89:45:28:7d:04:46:a6:84:e8:
54:cf:6d:66:be:a6:f4:ac:0f:bd:0f:5f:cd:20:15:4e:48:aa:
f9:b6:42:ee:51:25:c8:6e:8e:30:fd:0d:96:4c:c7:8a:6d:2a:
e4:1e:46:a3:de:d1:c7:80:82:1e:86:7d:0e:c5:64:01:e1:13:
37:6c:d4:66:48:29:04:6c:30:04:d7:4b:fc:c9:e0:2b:11:ff:
f4:20:8d:4b:2f:7b:95:02:02:bf:ae:cb:64:99:7a:cb:17:62:
7e:95:af:68:7e:34:48:fa:eb:de:a1:c0:d0:56:ef:58:86:32:
95:8f:5e:a9:7a:19:97:dc:a7:e7:52:29:bd:c5:8a:f8:fa:e0:
6f:d4:58:42:9c:a7:8b:07:d7:40:6d:49:ad:b1:f8:ef:93:56:
2c:f4:87:40:35:a4:a1:ee:6b:02:ca:02:8f:3f:2e:f7:d8:58:
60:77:5a:54:9e:75:e2:d8:1f:03:7e:48:52:a9:ad:6d:af:fd:
68:f2:bb:0e:52:fe:5c:1c:b4:e1:65:46:48:89:c6:ba:3a:6c:
e9:4f:9e:59:e5:fb:36:7e:dd:8a:81:1c:a2:14:ed:00:ce:26:
ce:a6:0b:e1:10:d8:2b:f8:1c:d7:dc:af:b4:71:9f:7b:6c:31:
13:e9:f4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:11 2026 by rpki-client