
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C084B140FB211EB97408631C4F9AE02.roa
File: 6C084B140FB211EB97408631C4F9AE02.roa (raw, json)
Hash identifier: UcbnD510CWTFKxUKPUP/oI/ZH2E2/yuF6Vp6cYWgi3w=
Subject key identifier: 8C:48:1C:8C:9F:FE:3F:FE:A4:B6:50:0D:7F:2D:31:E7:84:7E:00:FB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D1DD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C084B140FB211EB97408631C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:17:10 +0000
ROA not before: Thu 08 May 2025 15:58:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133240
IP address blocks: 103.47.78.0/24 maxlen: 24
103.87.150.0/24 maxlen: 24
103.87.151.0/24 maxlen: 24
103.230.101.0/24 maxlen: 24
103.230.102.0/24 maxlen: 24
103.230.103.0/24 maxlen: 24
2001:df1:fb40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53725 (0xd1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 15:58:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bae6-057e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:2d:09:9a:e3:d4:d1:ff:b1:16:8f:70:ef:
ba:a8:8d:36:a8:d0:32:0f:4f:66:01:76:37:59:f6:
db:00:20:e6:0f:83:f4:66:d1:ed:09:8e:cc:d0:f0:
bf:52:02:18:6e:87:55:95:08:9f:e7:5f:92:ab:89:
29:67:cc:89:f4:90:53:e9:86:9c:b8:b1:e2:1d:a2:
3b:53:15:a1:e9:8e:fd:63:c7:e3:69:08:d0:cb:f0:
27:4d:93:69:29:d2:eb:c3:86:77:26:86:58:06:85:
30:65:a6:26:5b:27:81:f4:f8:29:db:96:e0:74:b9:
63:ef:bc:b4:75:fc:4a:ab:38:5d:d9:80:c2:c1:3a:
d5:fa:29:64:fe:e5:e0:57:c9:38:ca:1f:4c:f8:8c:
a0:db:76:be:ab:5f:2a:02:29:25:86:a2:88:ff:bb:
af:8d:98:f6:6c:5d:55:38:40:d1:42:34:10:d1:2a:
e9:57:d8:0e:cd:9d:a4:be:4b:62:64:ac:20:c5:2a:
6a:5e:88:5b:d8:2e:25:20:1f:a8:5b:79:41:38:1b:
ba:1b:d5:c8:c7:c1:51:c4:c0:e9:6e:aa:e2:61:8c:
6d:7f:1d:7a:31:f1:4f:e7:c6:6a:6d:f5:05:4c:a6:
78:0e:e6:f8:60:f5:f2:7d:d3:7f:64:49:86:75:b2:
19:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:48:1C:8C:9F:FE:3F:FE:A4:B6:50:0D:7F:2D:31:E7:84:7E:00:FB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6C084B140FB211EB97408631C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.47.78.0/24
103.87.150.0/23
103.230.101.0-103.230.103.255
IPv6:
2001:df1:fb40::/48
Signature Algorithm: sha256WithRSAEncryption
90:8b:23:3c:92:23:14:1a:e0:0e:6e:d9:01:6d:ba:2e:d0:7b:
e2:2b:12:d0:f9:d1:6b:45:65:dc:5e:34:e9:1c:fe:cd:07:f3:
61:e4:a0:43:fd:e6:d3:41:40:13:29:d3:fd:6e:e9:5e:8e:6a:
30:1e:c9:eb:39:d5:90:61:3a:5d:95:97:96:43:1e:f4:aa:b0:
3c:5a:16:3d:b9:ee:78:72:7c:65:fe:c4:aa:18:ca:05:2f:ed:
12:28:c8:b4:17:9d:38:97:ac:0c:62:75:c8:34:1b:4f:02:09:
96:1a:73:60:40:94:28:1f:fa:f5:4b:12:bb:cf:58:c9:f2:78:
82:e5:37:77:38:49:12:a4:20:e0:a6:e5:43:7b:19:d4:20:8b:
26:13:b3:a5:68:0b:22:5f:3c:af:e6:81:91:13:b9:34:2a:34:
b3:37:bb:7d:b5:d6:db:ca:e6:f9:36:11:34:5c:84:3e:f4:a2:
90:f5:65:4e:a9:f2:de:e2:da:a0:5a:a7:25:2b:84:8a:6a:b3:
88:3c:ce:e5:fc:f4:6b:f8:74:54:33:ee:a0:0b:39:ac:1d:66:
f5:68:87:b5:be:1a:2c:50:39:f4:c3:c5:21:f5:c0:0a:4d:25:
08:98:65:54:6c:2d:f2:ee:4b:75:dc:f3:10:08:0e:bf:72:6b:
b0:6f:e6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:56 2026 by rpki-client