
$ rpki-client -vvf rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/82E0EA4AA98F11F0BFFFD266C4F9AE02.roa
File: 82E0EA4AA98F11F0BFFFD266C4F9AE02.roa (raw, json)
Hash identifier: 98rnzT80vMoXxA/+im8fyAtxpq0fcGuEmw80ulzCDV0=
Subject key identifier: E8:BD:06:44:46:A6:0A:5C:82:1B:C3:7F:D4:53:24:7C:85:50:34:2A
Certificate issuer: /CN=A911793C/serialNumber=0B1A29725FBA8A2CDD54F25657E587478EBFBBAF
Certificate serial: 72
Authority key identifier: 0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/82E0EA4AA98F11F0BFFFD266C4F9AE02.roa
Signing time: Fri 24 Apr 2026 15:52:32 +0000
ROA not before: Fri 24 Apr 2026 15:52:32 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 23664
IP address blocks: 103.208.208.0/22 maxlen: 22
103.208.208.0/24 maxlen: 24
103.208.209.0/24 maxlen: 24
103.208.210.0/24 maxlen: 24
103.208.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.crl
rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 07:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911793C, serialNumber=0B1A29725FBA8A2CDD54F25657E587478EBFBBAF
Validity
Not Before: Apr 24 15:52:32 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69eb91c0-aa1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:34:d9:e3:05:0b:1f:17:88:ea:5b:ba:b9:
81:74:6e:0b:6c:b1:cd:75:f8:92:ec:e9:4d:a7:88:
eb:7d:51:16:fd:cd:0b:87:f0:b0:4d:fa:f0:56:e0:
d0:ce:d9:e6:6d:70:45:c7:84:3d:34:e3:a1:64:c5:
bf:00:c4:2b:48:f3:f9:f3:b6:55:74:96:0d:17:f9:
5c:60:a2:3d:80:01:f1:86:d1:74:bc:1b:4b:cb:7f:
29:8e:f8:c2:b0:20:8e:62:b8:03:81:44:71:6d:48:
bc:b7:83:27:78:97:6a:3f:3a:6f:d6:f2:91:54:0b:
62:c4:fe:df:3e:e8:8f:94:3d:72:80:3c:61:11:29:
a1:64:c6:df:4b:39:09:c6:26:3f:d5:68:93:fc:ac:
58:6e:73:96:50:83:69:b2:7e:c2:0b:9f:5a:7b:d2:
53:82:3a:0b:b8:c5:f2:18:12:1f:45:95:64:ae:be:
ae:50:9f:10:58:bd:0a:e6:cf:4b:08:51:72:31:7c:
3d:b1:2f:85:66:09:98:9f:f5:55:a5:de:2e:bd:f8:
8b:26:3f:72:b3:c2:c7:ae:d5:93:29:b0:5d:b3:84:
2e:68:34:38:df:b4:9b:81:ca:dc:2e:cb:84:d9:51:
8e:5a:61:84:f2:7e:e7:86:8b:53:92:dd:c6:94:1e:
38:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BD:06:44:46:A6:0A:5C:82:1B:C3:7F:D4:53:24:7C:85:50:34:2A
X509v3 Authority Key Identifier:
keyid:0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/82E0EA4AA98F11F0BFFFD266C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.208.208.0/22
Signature Algorithm: sha256WithRSAEncryption
74:42:48:9e:fc:42:47:ca:7f:26:5a:dd:47:5a:34:1e:ed:40:
c0:81:6f:f6:a5:ce:bd:be:00:f6:96:2a:eb:7a:95:2a:6d:f4:
61:f5:04:91:f5:cc:3c:79:06:9a:75:c7:4d:6f:ce:ed:56:6e:
92:73:2b:8f:6f:6c:ba:92:3b:78:7c:9d:d3:ea:f5:ae:56:ce:
88:94:2b:12:ed:d1:ed:78:73:61:a9:38:4a:8f:b4:ce:d8:c1:
e3:80:be:dc:d3:21:bb:4a:60:97:3c:4d:ec:12:ed:16:e0:d4:
30:0c:79:ed:70:b3:d8:93:99:58:29:9e:d1:6a:f9:1a:dd:c0:
8d:29:5d:81:f9:62:18:7b:73:fe:35:0d:62:42:35:89:f1:c9:
c9:82:15:96:e8:65:9e:ca:19:49:ae:6b:37:1d:b1:8e:7f:2f:
e3:8a:df:fb:12:9f:93:ee:09:4b:b2:d7:45:66:66:f6:d7:0f:
e1:4e:41:16:1d:e8:79:4e:5d:04:a9:ab:48:f4:dd:4f:bb:6e:
43:0e:04:2d:9d:ab:7c:6a:ab:8c:e4:e2:2f:ba:6e:a2:c7:92:
11:53:e1:54:07:88:ba:c0:80:f5:d8:3a:a7:f5:21:da:1f:06:
da:56:3e:f5:91:5d:0b:69:9e:cb:d7:56:1b:ac:ac:6c:27:6d:
0d:ed:13:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 12:16:43 2026 by rpki-client