
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C8BF7594338511EFBB110D18C4F9AE02.roa
File: C8BF7594338511EFBB110D18C4F9AE02.roa (raw, json)
Hash identifier: +qJQsxD+0y9e9aLnuWMFfqQfXXYtwrgMMDqqaJc3x0I=
Subject key identifier: 5A:D9:C6:B3:C4:93:9D:A9:19:37:30:87:B7:D6:66:D9:71:CA:32:4F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EB3A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C8BF7594338511EFBB110D18C4F9AE02.roa
Signing time: Sun 31 May 2026 17:50:31 +0000
ROA not before: Sun 31 May 2026 17:50:31 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 395839
IP address blocks: 103.168.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60218 (0xeb3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:50:31 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c74e7-1c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:8c:5b:3e:9a:16:2b:a7:fe:9b:9b:6b:7a:
3a:59:e9:a4:b3:4e:63:87:e1:fd:dc:2f:f1:d3:30:
33:60:b5:be:c7:27:4e:ac:dc:99:a8:e6:9a:a0:17:
96:6f:c0:3e:93:de:63:d7:a7:fe:cb:31:cf:b8:d7:
c4:d5:e9:0f:d8:77:74:bc:01:7a:4c:b8:66:2a:fe:
7e:25:f6:c0:58:2f:50:69:cf:64:ad:0e:45:f5:e4:
80:71:3d:c7:96:1b:04:c1:6f:a1:2e:fc:62:e0:47:
1d:a6:30:1b:0a:12:b0:d5:fd:55:da:0b:a5:36:56:
e1:58:9d:45:d4:e1:8b:2a:42:62:1a:87:25:b3:5e:
6b:87:81:60:28:f0:b0:3d:8d:14:a1:6d:06:7b:65:
12:20:90:53:45:a0:f5:0b:92:6c:c3:c7:34:61:39:
69:8a:c2:2d:7a:2c:f4:8d:d5:16:ae:a3:01:e4:e7:
b6:0c:b9:13:3e:d3:2c:c7:f1:6a:32:e5:6e:35:04:
2c:cb:17:d2:7f:dd:96:95:07:a4:a9:39:57:1b:40:
72:c0:21:dd:54:21:03:58:df:32:c8:94:d6:25:8b:
15:e1:9c:5b:c3:04:81:cc:fb:92:f4:25:ed:ec:d8:
f1:79:8e:82:b1:d6:d1:5b:16:30:a2:2e:3f:71:d7:
8a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D9:C6:B3:C4:93:9D:A9:19:37:30:87:B7:D6:66:D9:71:CA:32:4F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C8BF7594338511EFBB110D18C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.217.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c4:16:8f:9f:88:79:65:92:1b:d6:45:70:63:84:5b:69:05:
86:e3:2c:1e:a8:50:be:36:f6:76:4c:fe:65:5e:5d:6a:cc:2e:
08:b3:7b:9d:1e:34:d0:c7:42:22:b4:41:a9:7a:ad:98:f2:6c:
7d:bd:13:35:a4:e5:60:ae:17:3a:0d:d4:38:cc:67:32:9c:b1:
2e:f2:5e:fc:6c:1c:96:1b:c8:a1:ec:d1:76:bb:ae:49:fb:92:
77:e8:33:5e:eb:9e:02:ef:75:4c:2c:7b:27:85:a5:36:08:75:
53:90:5b:8c:6c:45:96:dc:a8:5e:67:59:5d:1e:0b:7b:9c:d5:
74:69:26:7d:20:2c:34:9d:9c:8a:09:70:f2:2b:ba:75:f5:71:
18:92:0c:a7:4b:e6:da:6b:98:c5:6b:f6:3a:2a:0a:5c:b6:80:
45:dd:38:1b:d9:c7:b7:1a:7d:fc:3f:ed:9f:0a:dd:cd:3d:7f:
2c:39:90:11:da:72:05:08:22:a7:24:25:2e:c4:bd:ae:fa:f7:
89:78:7d:b8:7f:6d:87:6e:29:9e:8f:df:66:5a:5c:9b:1e:0e:
18:a3:67:16:ff:e1:d7:25:4b:5a:de:2c:e7:b3:51:c7:67:59:
51:3c:20:51:ab:40:36:b2:d1:62:0f:36:2d:e1:b5:f3:e5:92:
e3:91:96:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:25:44 2026 by rpki-client