
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/CC23ED70990811F08BF0CB55C4F9AE02.roa
File: CC23ED70990811F08BF0CB55C4F9AE02.roa (raw, json)
Hash identifier: WN9Maioe7netKPv1DReweGvC2oabZsx6w065iS44WrA=
Subject key identifier: DA:E7:4D:34:A1:38:B4:AB:E2:D3:A9:95:71:4A:9B:BB:0E:54:0A:83
Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial: 364E
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/CC23ED70990811F08BF0CB55C4F9AE02.roa
Signing time: Tue 09 Jun 2026 16:40:20 +0000
ROA not before: Tue 09 Jun 2026 16:40:20 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 45845
IP address blocks: 103.250.135.0/24 maxlen: 24
202.51.66.0/24 maxlen: 24
202.51.70.0/24 maxlen: 24
202.51.72.0/24 maxlen: 24
202.51.73.0/24 maxlen: 24
202.51.77.0/24 maxlen: 24
202.51.79.0/24 maxlen: 24
202.51.94.0/24 maxlen: 24
2405:6600::/32 maxlen: 32
2405:6600:201::/48 maxlen: 48
2405:6600:600::/48 maxlen: 48
2405:6600:701::/48 maxlen: 48
2405:6600:702::/48 maxlen: 48
2405:6600:703::/48 maxlen: 48
2405:6600:709::/48 maxlen: 48
2405:6600:c00::/48 maxlen: 48
2405:6600:c43::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:25:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13902 (0x364e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Validity
Not Before: Jun 9 16:40:20 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6a2841f4-98a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:73:d0:7d:f5:d7:e7:d0:8d:54:db:d0:bd:54:
3a:71:4f:85:e6:c4:ed:49:ac:fa:96:81:ca:67:26:
5d:0f:a2:d0:04:94:44:32:80:19:28:fa:49:e7:9d:
37:f6:6a:ae:d7:8e:95:c6:df:26:9c:09:4b:65:62:
5c:0e:e2:ba:6d:f0:7f:63:db:76:a1:86:ee:b0:a3:
e7:2b:49:25:c5:10:ef:ba:27:fd:d5:29:e4:95:fc:
de:a9:2a:4f:57:f1:07:72:3f:c6:e4:5f:81:70:e0:
31:c7:00:40:de:01:3a:94:2e:76:02:83:25:bb:73:
7a:7b:40:40:d9:6e:03:a8:1c:04:44:d4:00:4e:4a:
95:02:2d:19:bc:9c:b2:93:05:28:e7:58:ff:5a:93:
fa:3d:18:00:75:3d:02:73:88:cc:9f:cd:6b:cd:bf:
87:4b:95:a0:3b:51:d4:df:6e:28:ec:18:02:53:b8:
d7:5f:0d:8f:c9:5c:37:5e:08:2a:a7:1e:cc:df:de:
86:57:72:53:4f:55:6c:10:3a:f9:7d:39:b9:0c:e2:
61:d4:ad:e9:30:da:d0:1a:e7:4a:50:f6:fc:2c:60:
24:68:1b:f7:cb:54:fd:03:05:a3:fe:28:33:6c:61:
fb:9e:d2:6d:b9:15:40:a9:dc:05:0f:6e:bf:4d:fa:
61:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E7:4D:34:A1:38:B4:AB:E2:D3:A9:95:71:4A:9B:BB:0E:54:0A:83
X509v3 Authority Key Identifier:
keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/CC23ED70990811F08BF0CB55C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.250.135.0/24
202.51.66.0/24
202.51.70.0/24
202.51.72.0/23
202.51.77.0/24
202.51.79.0/24
202.51.94.0/24
IPv6:
2405:6600::/32
Signature Algorithm: sha256WithRSAEncryption
c0:31:a2:5f:b1:a1:6a:37:c3:55:15:3e:8a:13:8b:9f:54:b9:
d0:6b:a6:75:3b:12:53:55:b5:23:fc:21:76:97:36:cb:83:01:
1e:4d:8e:ae:a0:df:52:a8:1a:bf:2a:8f:6c:72:6f:de:b4:a3:
af:e6:0d:94:06:01:2a:98:1c:3f:15:bd:2a:f8:33:2e:87:5e:
cc:0e:c4:ae:59:0f:44:21:83:f0:a1:f9:f0:1e:d3:70:c9:3f:
40:fa:fe:f4:0a:ca:c3:2a:0d:85:e4:ef:a3:c6:84:d8:f9:f0:
17:53:b1:66:60:9d:73:a1:58:62:72:3d:50:6d:2f:4b:e4:f1:
f2:78:12:b4:af:2f:01:34:fe:9d:93:00:10:44:b1:a8:16:15:
43:19:a9:9c:67:bc:b4:4b:3b:bc:9a:b9:4b:e4:87:2b:64:13:
63:80:84:42:6a:43:6e:37:bd:a9:9d:98:0f:23:57:c9:dc:e6:
22:59:56:9f:4c:ce:84:cc:07:ef:e6:c1:2c:2f:71:05:1c:a0:
0c:7d:63:77:c0:95:eb:d7:a0:a5:f0:81:28:61:77:cd:26:45:
ae:fe:01:9f:ad:b4:d1:92:36:43:d0:c0:34:24:7f:b9:5f:47:
57:5f:5e:e1:0a:6f:f7:bb:60:6c:1f:ab:4a:27:00:85:b0:53:
19:4e:f5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:13 2026 by rpki-client