
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/0F206AEA776F11ED8E7B8775C4F9AE02.roa
File: 0F206AEA776F11ED8E7B8775C4F9AE02.roa (raw, json)
Hash identifier: Uh0sBPuZpoy8sTTNiUroNOAmNS0FTfsDSQBW+NkNyHo=
Subject key identifier: E3:2C:54:CD:D8:13:3D:CB:07:EB:5E:A0:A3:28:55:46:28:C4:DB:98
Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
Certificate serial: 0778
Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/0F206AEA776F11ED8E7B8775C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:54:41 +0000
ROA not before: Tue 02 Sep 2025 22:42:42 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 133044
IP address blocks: 103.99.101.0/24 maxlen: 24
103.242.49.0/24 maxlen: 24
2001:df3:d000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl
rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1912 (0x778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
Validity
Not Before: Sep 2 22:42:42 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a45330-3735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d0:0c:63:f3:e5:4a:58:b9:b9:a3:b6:68:d8:
c9:c6:5e:96:f9:26:4b:73:a0:d1:f0:b6:ca:83:78:
fe:13:c0:80:8d:a4:00:10:ae:69:8e:0c:4d:38:1f:
df:45:1d:01:18:66:d7:7b:61:a2:61:c7:d8:74:f8:
00:e7:41:e3:99:e9:f2:06:3f:65:a0:f8:93:c1:49:
7e:49:ee:0c:17:5f:0f:69:e7:36:0c:35:6d:aa:c1:
9e:60:67:63:5f:53:e5:e2:6a:ed:be:02:fd:97:d7:
2d:93:d2:cf:2e:fc:b2:4b:8f:ff:bb:70:b4:07:58:
da:ad:55:52:9a:28:3f:3d:ea:22:f8:b2:ee:66:a0:
aa:5d:c4:c7:c1:58:58:1b:17:e7:df:f0:61:10:b9:
3c:7a:19:46:3e:b0:cd:bb:c0:97:1f:64:fe:a4:32:
2d:74:ee:b6:25:95:e2:1d:dc:28:73:e3:9b:66:bf:
9e:ac:aa:36:a3:c3:6b:72:17:bb:14:90:da:55:d0:
24:04:71:49:41:0f:dd:f6:d6:73:86:b8:64:2f:5e:
9a:55:b4:77:9f:c0:dd:70:e1:a9:82:b7:ff:5d:f1:
57:f0:fe:27:ad:63:6a:59:e4:3d:9e:7c:0a:87:b4:
12:78:4f:f0:89:f6:fa:6a:de:f0:bd:c2:dd:49:12:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2C:54:CD:D8:13:3D:CB:07:EB:5E:A0:A3:28:55:46:28:C4:DB:98
X509v3 Authority Key Identifier:
keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/0F206AEA776F11ED8E7B8775C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.101.0/24
103.242.49.0/24
IPv6:
2001:df3:d000::/48
Signature Algorithm: sha256WithRSAEncryption
a7:d4:45:15:ab:02:9d:4e:9c:ad:b5:09:da:d6:ef:47:7c:1b:
eb:08:4e:0c:68:a0:0b:6f:b4:1f:c8:05:8d:69:54:2e:2c:af:
ac:16:1b:fc:eb:03:b8:71:3a:38:bf:50:03:6f:33:85:e7:23:
d8:98:ad:af:8a:ec:83:d7:59:e5:99:2a:06:9d:d0:63:ec:d0:
d3:7c:5e:36:fd:30:14:d8:fe:a0:9e:f3:55:67:d8:be:04:40:
ea:a9:69:8e:ce:e0:e3:9c:ee:3b:3a:36:20:0f:58:f1:ed:f1:
a9:c4:44:68:67:e6:1a:4d:97:c8:00:59:83:53:19:08:d1:dc:
45:c1:06:86:f0:e3:86:cb:bc:9b:73:83:ab:5c:4e:5c:b1:35:
ed:2f:26:1c:f0:2e:30:f6:89:e2:82:f0:0c:a9:45:6a:3b:db:
94:48:55:f6:8c:35:d0:3a:39:d8:28:fd:d3:c5:25:be:41:b3:
ca:92:2e:20:20:a7:2c:58:9f:68:cc:e4:4f:c0:1d:ea:cf:9e:
60:61:36:79:67:bd:bd:12:90:20:86:d9:19:e3:0d:78:ca:02:
2e:f1:53:c5:9d:c5:35:b6:db:54:74:b7:5a:76:2c:6f:66:58:
bf:aa:44:18:be:6f:d4:85:97:f3:97:5e:39:b1:d8:1d:74:be:
48:04:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:05:24 2026 by rpki-client