
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6CFE940EF27211EF97E2ED3AC4F9AE02.roa
File: 6CFE940EF27211EF97E2ED3AC4F9AE02.roa (raw, json)
Hash identifier: Kt16VYxN+HAH/tQmJXAmD7nTOkpY1byYJjgGdwwhw6o=
Subject key identifier: 83:3E:E5:A8:34:24:98:CF:89:99:8A:98:1D:00:87:C7:52:77:B5:8D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D586
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6CFE940EF27211EF97E2ED3AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:38:29 +0000
ROA not before: Thu 08 May 2025 16:16:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141517
IP address blocks: 103.161.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54662 (0xd586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:16:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bfe5-69f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:34:1f:a6:02:2a:58:aa:83:e1:72:b1:45:de:
74:f9:24:b2:ea:08:c0:bc:e1:5f:6c:fd:2e:d1:5c:
5b:a1:80:48:d7:82:ab:fc:b4:46:be:b7:86:b0:27:
dd:2e:b9:f6:80:07:9a:f3:6d:8a:0a:96:54:58:6d:
83:71:59:ce:25:ad:38:0d:07:31:8e:c9:28:a3:84:
f2:9a:32:dc:ea:29:bd:62:c6:8f:69:5c:86:95:2a:
e9:33:f9:de:55:55:ec:11:e7:bc:7e:a8:82:4f:6a:
4f:83:84:52:28:3a:b0:ff:e1:07:09:56:19:44:cf:
85:cb:af:1c:6d:2e:41:fb:8a:06:73:76:56:b1:c0:
e1:14:c8:ad:36:3b:f4:98:df:16:d0:fe:03:90:9a:
0b:0b:cc:a6:52:60:f1:16:21:8c:4c:b4:95:31:eb:
64:3f:a4:89:bb:9a:74:08:61:d5:a8:49:72:42:d7:
60:6b:ee:b9:b3:1a:c7:5c:10:5f:39:ce:d5:8b:71:
74:20:46:ea:c7:75:6b:ac:8a:a6:fd:94:4f:b0:dd:
0d:ae:3a:6d:bd:8c:1c:30:98:3f:8a:63:f0:85:8d:
9a:ee:79:38:06:3d:94:3c:6d:58:98:da:10:ee:ed:
ff:fb:13:4e:c3:ac:e6:a3:10:d0:30:90:35:bd:be:
8b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3E:E5:A8:34:24:98:CF:89:99:8A:98:1D:00:87:C7:52:77:B5:8D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6CFE940EF27211EF97E2ED3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.161.59.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:73:b1:e6:7c:54:8d:b3:2a:42:4b:e9:e2:43:bc:36:a3:4a:
b5:4c:2f:34:10:db:e8:88:9f:40:a9:63:60:e5:f3:6b:c7:9f:
1d:d5:38:1e:06:9d:37:69:03:4f:24:ed:b1:ba:14:ac:22:6e:
47:45:99:22:d3:61:61:81:39:68:27:55:c4:1a:c6:d4:68:97:
d2:73:f7:43:a0:1f:38:9d:18:d6:ab:8d:46:db:87:27:cc:30:
3f:12:e5:20:39:2e:f2:aa:61:13:8c:e8:42:e0:6f:07:d4:56:
fd:6b:a5:cb:36:f2:40:87:28:f6:a0:ce:51:14:73:1d:49:1a:
15:12:1a:0e:37:5a:2f:be:62:a0:a2:ba:3c:a6:c1:4c:e9:46:
a3:5e:18:a7:e5:e6:42:f4:59:e4:09:6a:65:16:6f:db:ee:f5:
f4:61:10:ae:18:cd:d8:a2:e0:a2:32:63:70:88:b0:bc:af:96:
5e:8b:8f:7f:47:d0:15:04:22:ea:12:93:08:28:f4:8c:5d:94:
42:a0:9f:2c:f4:9b:24:40:ac:fa:16:b2:bc:46:41:75:85:83:
cc:2e:93:21:4f:9c:67:5f:c0:f0:4e:a7:31:3e:2d:d6:85:9d:
f7:a6:d8:37:f3:0d:33:38:bb:d3:4e:15:cb:ad:77:3d:39:30:
4f:b2:5f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:02 2026 by rpki-client