
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E648A3D6F6D511ECA1D6171EC4F9AE02.roa
File: E648A3D6F6D511ECA1D6171EC4F9AE02.roa (raw, json)
Hash identifier: ee7kaOYuU1kCh8aAjCgSaNDjE+jU7KIL6dIj+suGrP8=
Subject key identifier: 3C:6F:3F:40:DB:E9:60:21:A4:08:DD:BA:2A:DD:7B:5A:4C:2C:DA:00
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EB22
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E648A3D6F6D511ECA1D6171EC4F9AE02.roa
Signing time: Sun 31 May 2026 17:49:44 +0000
ROA not before: Sun 31 May 2026 17:49:44 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 21788
IP address blocks: 103.156.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60194 (0xeb22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:49:44 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c74b8-bb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:3f:e0:1a:86:bf:5f:66:7e:3a:98:7c:b0:
c9:91:20:aa:a5:1e:bf:c6:2b:7d:93:52:60:b6:bd:
ad:85:aa:a6:60:9d:d1:66:79:e6:3f:74:14:8f:20:
59:65:32:55:a8:c5:85:0a:04:2f:66:a6:b4:59:91:
94:85:19:d5:4e:32:80:30:2e:1f:64:6f:29:3b:99:
b2:bf:c9:35:a2:c3:d2:0a:ef:5d:5c:50:1c:ad:7d:
20:77:bc:ab:52:2d:d7:1c:38:7f:6f:8c:1e:c9:6d:
fb:a2:f1:45:51:60:fb:8b:92:e2:6b:53:b2:8d:ec:
bf:0a:5f:aa:c8:02:05:6f:fb:ff:30:22:f5:42:cc:
f3:ac:cb:c1:db:03:4b:3c:e4:e1:4e:bd:61:99:03:
5e:d5:54:39:77:f1:18:95:a4:23:a1:c1:18:5d:26:
c4:89:ee:20:92:59:ce:dc:4a:39:a0:a0:57:41:0c:
4d:71:2c:2b:01:50:9d:1a:bd:01:03:a2:f7:12:b7:
0d:5d:36:4d:13:f7:a7:ef:ee:f3:e9:3c:91:ef:fe:
5c:80:3c:df:8c:68:95:23:3c:61:7c:8a:9d:16:08:
09:7f:2c:07:62:10:87:a3:75:4b:8e:19:f2:a2:82:
5f:a4:38:3b:a2:23:f6:dd:67:3d:fe:19:ae:8e:5b:
ba:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6F:3F:40:DB:E9:60:21:A4:08:DD:BA:2A:DD:7B:5A:4C:2C:DA:00
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E648A3D6F6D511ECA1D6171EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.156.208.0/23
Signature Algorithm: sha256WithRSAEncryption
47:1b:18:bb:58:90:0c:39:7d:d9:e4:8a:97:2f:26:d1:5a:17:
e2:90:fa:5a:87:e3:64:b6:bc:e2:ee:bb:75:ed:8f:5f:9f:9c:
d0:11:73:90:3d:a3:2e:91:9e:5b:04:7c:50:a5:7c:ae:b2:f6:
09:74:f0:b3:ae:95:cd:7f:80:af:ef:6c:ba:41:cd:b1:7d:7f:
97:f7:f2:98:23:f6:a5:6e:1b:13:06:fe:61:37:e0:ce:e2:78:
d7:23:08:2e:d4:d9:48:a7:a9:25:31:97:2d:24:07:cc:18:84:
1a:bb:cd:0d:96:26:81:04:68:3b:e8:da:61:dc:d2:b7:49:06:
4b:04:62:4d:58:4c:85:3c:bd:e7:3e:4f:a4:97:73:04:c2:36:
fa:16:15:e2:5e:84:10:e8:d5:b7:1c:3c:d2:0b:70:ca:c5:69:
8d:63:3e:01:aa:aa:64:5c:19:a9:6b:c2:77:ba:31:7a:32:dc:
a8:f9:fd:23:e0:1d:c0:0a:5f:be:44:ca:d8:5e:bd:f4:1b:c9:
79:70:c8:34:cd:e1:44:85:ed:25:52:5c:ea:34:33:dd:c0:f0:
f7:c1:f9:c5:09:21:fd:e5:60:d7:ad:55:eb:d3:7a:37:bd:34:
65:a0:f3:48:26:1d:3d:9e:ad:dd:3c:46:47:b3:db:93:05:42:
2d:a5:98:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:56:25 2026 by rpki-client