
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/0997DA40251811F19187E6B0C0833773.roa
File: 0997DA40251811F19187E6B0C0833773.roa (raw, json)
Hash identifier: EBehWsJCDzKDmD+oQkR35+7/S/sLkeR1I1PxlnGdMJA=
Subject key identifier: AF:C3:0C:38:D1:63:BA:27:CD:E0:05:FE:5D:51:35:23:8F:D7:6C:5C
Certificate issuer: /CN=A916A78A/serialNumber=A797D7983B8B39C806681646489AD3D1F09E0FDB
Certificate serial: 0D
Authority key identifier: A7:97:D7:98:3B:8B:39:C8:06:68:16:46:48:9A:D3:D1:F0:9E:0F:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5fXmDuLOcgGaBZGSJrT0fCeD9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/0997DA40251811F19187E6B0C0833773.roa
Signing time: Sat 21 Mar 2026 11:24:32 +0000
ROA not before: Sat 21 Mar 2026 11:24:32 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 133139
IP address blocks: 43.246.144.0/24 maxlen: 24
103.240.216.0/24 maxlen: 24
103.240.217.0/24 maxlen: 24
103.240.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.crl
rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5fXmDuLOcgGaBZGSJrT0fCeD9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A78A, serialNumber=A797D7983B8B39C806681646489AD3D1F09E0FDB
Validity
Not Before: Mar 21 11:24:32 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69be7ff0-30f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3e:65:d5:88:0a:83:0d:75:29:ad:2f:4c:ae:
c0:89:a4:8f:05:cb:15:04:51:08:99:b4:67:56:3d:
b4:1e:d2:3f:82:d3:93:c6:4c:13:e6:06:03:ca:8e:
08:35:c3:1b:7a:4c:9b:c4:04:43:b2:19:da:4d:f4:
ea:90:41:8a:0b:a2:f9:c3:f6:a8:21:ea:c6:08:fc:
92:49:a5:28:e9:1f:d8:31:c4:18:76:8f:5c:15:32:
dc:6f:1a:91:62:5a:07:a3:75:8d:26:74:77:35:8a:
d4:73:e2:9d:1b:cb:26:b3:50:cf:c5:55:8c:29:75:
b5:00:62:d5:33:61:08:15:4a:2f:fc:3d:27:89:c8:
8e:a8:9f:2f:2d:a7:e3:a5:f2:d2:bd:8b:89:eb:73:
3d:3f:4b:e5:1d:55:fb:4b:29:61:9a:69:f3:f9:d4:
ef:ac:c1:35:0e:c8:f6:0f:21:c4:5a:86:48:92:f9:
13:c3:5d:c0:33:66:af:ca:9d:1c:39:ed:c3:e7:5f:
bd:58:04:3c:be:90:4e:6d:d8:97:5c:a3:48:69:75:
67:03:5a:99:56:24:c6:93:58:e7:6e:d5:b3:18:e9:
dc:9e:08:88:fe:33:ea:c0:52:9e:ae:66:10:91:ab:
bc:76:61:ac:3f:af:9e:88:3f:25:e4:a1:66:7f:e5:
a2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C3:0C:38:D1:63:BA:27:CD:E0:05:FE:5D:51:35:23:8F:D7:6C:5C
X509v3 Authority Key Identifier:
keyid:A7:97:D7:98:3B:8B:39:C8:06:68:16:46:48:9A:D3:D1:F0:9E:0F:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5fXmDuLOcgGaBZGSJrT0fCeD9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/0997DA40251811F19187E6B0C0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.246.144.0/24
103.240.216.0-103.240.218.255
Signature Algorithm: sha256WithRSAEncryption
92:a2:b4:8b:4f:b9:bc:57:76:ea:fd:e5:6a:33:60:4b:6f:98:
26:a8:88:31:7c:00:99:5d:5d:0d:74:e9:79:c2:e9:d9:1e:f6:
4c:66:ae:cb:ad:45:96:86:b7:25:5e:f7:a2:46:bd:07:72:60:
2a:88:1b:db:3d:3a:4c:fa:40:39:14:79:f9:d3:22:6f:77:5c:
5b:5e:0b:56:2d:a2:b3:a7:c8:2d:d7:04:ed:0a:0d:a8:6f:25:
ed:da:7e:f8:3e:42:4f:ea:fc:74:aa:0d:93:a0:ce:fa:7b:33:
45:20:dd:7a:e7:b2:fe:08:c0:46:c4:8a:ef:d4:5e:da:6e:3e:
ad:f4:05:b5:a5:b9:ba:01:12:72:59:b8:54:d2:70:39:62:21:
d3:43:aa:38:a1:c5:b8:99:59:33:02:61:9b:fc:4a:60:a8:d9:
f6:1b:9f:65:a0:64:97:74:70:16:fd:a6:59:6a:5d:6b:31:06:
20:a2:c6:b6:18:d5:3c:f7:81:54:58:95:c3:46:b8:22:d4:d4:
07:53:f2:a5:15:83:07:bf:ae:9c:f1:6d:88:32:1d:0e:c2:9b:
82:8f:b4:24:e1:7a:e8:72:f4:76:63:4b:26:41:23:20:fa:94:
36:33:99:a3:d9:ff:a4:ca:b2:d0:0e:83:49:fa:6f:3a:58:5d:
39:72:3f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:22:47 2026 by rpki-client