
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/2BA0624C078511ED87041524C4F9AE02.roa
File: 2BA0624C078511ED87041524C4F9AE02.roa (raw, json)
Hash identifier: 0jbGDYo7DDfv4MFk7YXPgz8jJvCIX6bzZUVL+H0jKpo=
Subject key identifier: E5:F7:55:C2:CD:B8:9D:10:38:39:B1:0F:DA:8B:5D:0B:92:0C:F2:D8
Certificate issuer: /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
Certificate serial: 0D26
Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/2BA0624C078511ED87041524C4F9AE02.roa
Signing time: Mon 20 Jul 2026 19:19:32 +0000
ROA not before: Mon 20 Jul 2026 19:19:32 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 140229
IP address blocks: 103.115.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl
rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3366 (0xd26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166E2B, serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
Validity
Not Before: Jul 20 19:19:32 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a5e74c4-9369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:db:7c:b4:d8:b2:ea:6c:d3:03:c8:0f:a7:38:
a6:cc:a9:6b:99:7a:f6:a3:b4:69:a6:20:03:38:e6:
f8:88:f2:6b:a1:fc:c2:1c:ab:5c:06:27:65:20:7d:
8c:39:79:c1:a1:0c:7e:0b:46:f4:73:ba:79:a2:50:
13:1d:2b:aa:f5:a6:87:6d:25:52:68:d3:b8:e8:97:
d0:26:eb:bd:8d:52:8c:b0:dc:09:cc:49:bc:21:f8:
79:e7:6f:87:15:1b:da:b6:9c:8f:49:8a:44:d5:ec:
c4:43:7a:71:3e:c9:77:ab:98:0b:b7:e4:a0:7d:f7:
ab:df:df:d5:78:c6:2a:0c:96:a2:05:c6:ee:cd:ad:
e7:22:51:df:d3:ec:16:63:46:27:cb:d6:6e:e3:f7:
87:51:1e:2e:47:8b:f1:25:fb:b6:0a:95:b4:bf:f4:
8d:45:51:b5:9e:54:d1:82:24:a6:d7:c7:72:a0:76:
d5:7e:7e:18:f4:25:33:f0:45:71:1e:b6:cd:13:35:
e4:3d:1d:92:0a:09:f0:46:51:02:0d:d3:0b:a3:a6:
40:66:b5:32:cd:e0:73:20:66:6b:19:1f:dd:0b:e0:
58:b2:e9:64:64:e0:85:28:1a:39:04:4b:f4:ad:34:
93:9e:99:24:cd:f4:81:06:10:73:82:7f:d7:f9:fe:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F7:55:C2:CD:B8:9D:10:38:39:B1:0F:DA:8B:5D:0B:92:0C:F2:D8
X509v3 Authority Key Identifier:
keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/2BA0624C078511ED87041524C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.115.116.0/24
Signature Algorithm: sha256WithRSAEncryption
15:12:30:fb:d6:de:70:ab:5c:41:4a:6d:ce:b0:6f:fc:12:5c:
91:43:61:39:86:51:96:12:88:50:0e:75:c5:40:e2:93:a9:aa:
3c:cc:ef:d0:57:ee:af:a4:7e:2b:c7:cc:cd:71:50:fd:6a:8e:
e1:ba:f6:c9:49:13:6e:97:2b:d6:a1:a1:e7:0c:08:70:e5:0b:
03:9d:15:bb:09:94:31:8a:60:8d:5b:3d:88:b0:94:2c:87:32:
9d:e8:27:39:1c:35:32:aa:4e:43:59:69:b0:dd:c7:86:3f:5b:
d4:f8:75:b5:2f:ec:f9:47:e5:19:75:00:ba:f8:d8:27:fd:d2:
f8:e2:3f:e3:5c:48:52:89:a4:af:f3:ef:91:00:b7:25:2d:53:
76:41:de:ee:20:8c:4c:2f:0a:33:77:9d:cc:07:e0:6c:d4:c8:
f5:2f:4e:d8:a1:89:4c:45:42:23:20:10:f0:b3:29:21:20:bd:
26:7b:96:f6:9d:26:83:69:81:6a:cf:80:77:cf:91:62:0e:48:
7d:8f:54:28:5b:74:d1:27:30:81:0e:05:3e:04:29:a9:87:42:
cb:4c:97:94:11:e9:94:9a:c8:58:8d:e6:80:78:1d:a8:db:36:
ea:03:cf:67:3e:c2:48:69:1b:4f:21:58:a2:bd:a5:53:f8:3a:
dc:67:25:f7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjZFMkIxMTAvBgNVBAUTKDAxMDMyRDlERkMzNjJBOTU4NzQzRTg2RDNDOEQwNjEx
QTZBREIwNUIwHhcNMjYwNzIwMTkxOTMyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTVlNzRjNC05MzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkdt8tNiy6mzTA8gPpzimzKlrmXr2o7RppiADOOb4iPJrofzCHKtcBidlIH2M
OXnBoQx+C0b0c7p5olATHSuq9aaHbSVSaNO46JfQJuu9jVKMsNwJzEm8Ifh552+H
FRvatpyPSYpE1ezEQ3pxPsl3q5gLt+Sgffer39/VeMYqDJaiBcbuza3nIlHf0+wW
Y0Yny9Zu4/eHUR4uR4vxJfu2CpW0v/SNRVG1nlTRgiSm18dyoHbVfn4Y9CUz8EVx
HrbNEzXkPR2SCgnwRlECDdMLo6ZAZrUyzeBzIGZrGR/dC+BYsulkZOCFKBo5BEv0
rTSTnpkkzfSBBhBzgn/X+f6pSQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOX3VcLN
uJ0QODmxD9qLXQuSDPLYMB8GA1UdIwQYMBaAFAEDLZ38NiqVh0PobTyNBhGmrbBb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkUyQi8yN0U3Q0FBNjBD
MkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3MktwV0hRLWh0UEkwR0VhYXRz
RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FRTXRuZncyS3BXSFEtaHRQSTBHRWFhdHNGcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjZFMkIvMjdFN0NBQTYwQzJEMTFFQUIwMjlEQjUzQzRGOUFFMDIvMkJBMDYyNEMw
Nzg1MTFFRDg3MDQxNTI0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ3N0MA0GCSqGSIb3DQEBCwUAA4IBAQAVEjD71t5wq1xBSm3OsG/8
ElyRQ2E5hlGWEohQDnXFQOKTqao8zO/QV+6vpH4rx8zNcVD9ao7huvbJSRNulyvW
oaHnDAhw5QsDnRW7CZQximCNWz2IsJQshzKd6Cc5HDUyqk5DWWmw3ceGP1vU+HW1
L+z5R+UZdQC6+Ngn/dL44j/jXEhSiaSv8++RALclLVN2Qd7uIIxMLwozd53MB+Bs
1Mj1L07YoYlMRUIjIBDwsykhIL0me5b2nSaDaYFqz4B3z5FiDkh9j1QoW3TRJzCB
DgU+BCmph0LLTJeUEemUmshYjeaAeB2o2zbqA89nPsJIaRtPIViivaVT+DrcZyX3
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:21 2026 by rpki-client