
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E14E952268C11EC9F319460C4F9AE02.roa
File: 6E14E952268C11EC9F319460C4F9AE02.roa (raw, json)
Hash identifier: uDhujG3YJhb4mK8JlAYSbHFNMN4RRkV0UF2W4nG27t8=
Subject key identifier: 2E:60:67:16:E6:7B:01:61:9B:12:6F:5B:A8:88:C4:7E:CA:65:F4:78
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D2BA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E14E952268C11EC9F319460C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:21:46 +0000
ROA not before: Thu 08 May 2025 16:02:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134934
IP address blocks: 103.129.12.0/24 maxlen: 24
2001:df6:6100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 11:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53946 (0xd2ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:02:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bbfa-0e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:61:19:35:8a:af:7f:f8:c0:c2:f5:43:2c:
d4:8a:7b:bd:6c:01:27:e5:06:d2:47:8b:49:bb:18:
9b:08:eb:b5:69:58:c2:63:dc:26:e5:9d:2e:13:cf:
0e:f0:69:4e:ef:8d:63:c2:15:13:d5:da:d1:ea:b6:
64:f1:22:5c:b5:46:3c:c0:4f:62:a3:9f:59:88:c4:
9c:06:0b:e5:94:ae:e9:86:1e:2b:40:12:7a:d3:4d:
f3:b6:a3:2f:ce:01:5d:8a:a4:32:bd:12:b2:41:bd:
5f:30:a1:c7:7e:ad:5a:58:48:6d:07:33:ec:be:2d:
0b:4d:2c:73:54:64:33:47:6e:b3:cb:72:99:4b:a9:
29:67:cd:e1:4d:c9:fc:e5:e0:20:0c:8c:d4:e2:6c:
3f:af:db:84:c0:ac:56:aa:63:2b:f0:40:18:ec:63:
ff:bd:54:b9:25:9b:1d:75:67:31:4a:bf:7b:c9:86:
98:9b:9f:af:b7:a2:f7:d6:a0:86:f2:c9:ac:f1:3e:
31:52:fe:cf:eb:4a:d9:dc:37:e4:42:99:85:9a:05:
d1:e3:7f:fc:42:ed:4d:94:48:68:8e:1b:75:44:c7:
e1:47:67:cf:9b:cb:3b:7a:9d:3d:f5:c6:7b:09:e3:
0a:3a:12:84:fe:b1:58:0b:7f:6e:99:ea:7d:0e:b4:
27:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:60:67:16:E6:7B:01:61:9B:12:6F:5B:A8:88:C4:7E:CA:65:F4:78
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E14E952268C11EC9F319460C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.129.12.0/24
IPv6:
2001:df6:6100::/48
Signature Algorithm: sha256WithRSAEncryption
b4:d3:d5:6b:2a:46:eb:a4:bd:e9:50:b0:c8:4f:f7:ef:6f:2d:
0e:e2:59:86:16:d1:b3:68:84:3c:e9:00:6e:e1:a6:f6:3f:55:
04:c5:60:35:d7:e0:6c:ed:90:f9:f2:31:30:ad:f0:fd:72:e1:
76:83:f2:07:a9:30:a8:f9:8d:f4:84:f1:8b:ff:a8:c2:8c:1f:
6a:54:c6:82:03:bc:74:79:a2:ca:e8:27:e7:7e:60:f8:6a:d9:
aa:d0:e4:c1:64:8f:9c:fa:81:f6:fa:56:b2:0a:98:1c:35:03:
86:12:f8:91:76:25:4c:54:30:7d:80:43:1a:1d:3d:ea:49:cb:
90:1b:8f:18:65:66:00:40:f0:64:ef:4f:00:6d:84:af:60:38:
78:30:26:cd:71:fc:96:86:75:ff:1c:99:e1:38:75:ac:bd:60:
6b:a8:00:c8:15:3b:a1:7d:e6:44:b9:a5:2e:b9:f7:f3:a5:02:
3e:e4:01:9b:73:7f:dd:ee:34:51:f9:1c:11:01:80:c5:95:30:
e5:6c:f9:52:29:52:4c:2b:48:e4:b2:57:c9:f9:fe:fc:a4:b8:
70:33:bd:a2:35:09:a3:6b:fb:bb:1e:89:4c:26:29:d3:b3:d2:
aa:6e:f3:cc:47:f9:2f:2b:0c:62:56:45:a0:8a:27:e2:82:ca:
b2:7c:80:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:52 2026 by rpki-client