
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/0997DA40251811F19187E6B0C0833773.roa
File: 0997DA40251811F19187E6B0C0833773.roa (raw, json)
Hash identifier: 21nGvUVjYGBILeKSa4tz2Pi25OmDrDa6X97e/MiYr+Q=
Subject key identifier: 10:CD:5E:95:1A:AA:24:43:4E:8C:C1:1A:28:11:BC:69:CF:36:7C:42
Certificate issuer: /CN=A916A78A/serialNumber=A797D7983B8B39C806681646489AD3D1F09E0FDB
Certificate serial: 67
Authority key identifier: A7:97:D7:98:3B:8B:39:C8:06:68:16:46:48:9A:D3:D1:F0:9E:0F:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5fXmDuLOcgGaBZGSJrT0fCeD9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/0997DA40251811F19187E6B0C0833773.roa
Signing time: Wed 09 Sep 2026 08:58:15 +0000
ROA not before: Wed 09 Sep 2026 08:58:15 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 133139
IP address blocks: 43.246.144.0/24 maxlen: 24
103.240.216.0/24 maxlen: 24
103.240.217.0/24 maxlen: 24
103.240.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.crl
rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5fXmDuLOcgGaBZGSJrT0fCeD9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 08:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A78A, serialNumber=A797D7983B8B39C806681646489AD3D1F09E0FDB
Validity
Not Before: Sep 9 08:58:15 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa11fa7-c447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:03:e3:8a:51:e3:88:25:74:b4:bc:ff:ef:04:
3d:68:e8:d6:59:89:07:cf:92:20:40:ab:e9:09:ab:
6b:b0:e7:d7:75:8d:67:04:f2:93:49:ad:69:71:c4:
b9:75:55:ac:b1:2f:a7:e7:80:08:bb:c1:45:2d:3b:
42:7d:fd:13:52:46:47:70:29:98:97:48:71:18:84:
87:df:7a:c4:04:9b:66:24:ae:d2:c1:5c:57:11:21:
76:09:ca:5f:f2:8e:e0:11:2f:62:93:5c:d0:67:cd:
cb:0b:0b:6e:5d:5b:d3:02:fd:fe:0e:82:b3:6e:52:
b6:12:40:99:2b:ad:56:45:e7:94:17:75:4e:5a:57:
f1:11:2c:e3:01:e9:a2:6d:17:f0:25:27:a2:1f:80:
93:ae:65:e6:9d:da:0f:43:73:50:05:1b:3e:a4:8a:
7a:20:fb:9e:04:a6:39:0a:f8:47:92:85:78:7f:99:
e7:56:26:38:0c:ac:ef:f0:cb:bb:c2:88:b5:1a:06:
4f:d9:5e:d3:f3:26:ec:f6:4d:c5:9f:46:5a:a3:e3:
12:bc:ac:22:1d:b9:a4:22:f0:bf:22:51:c3:47:ec:
10:58:8d:61:6d:55:12:21:f9:f0:4d:69:45:c1:bc:
19:99:c4:48:45:a7:80:ff:73:2f:ba:50:7f:ea:2a:
ab:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CD:5E:95:1A:AA:24:43:4E:8C:C1:1A:28:11:BC:69:CF:36:7C:42
X509v3 Authority Key Identifier:
keyid:A7:97:D7:98:3B:8B:39:C8:06:68:16:46:48:9A:D3:D1:F0:9E:0F:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/p5fXmDuLOcgGaBZGSJrT0fCeD9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5fXmDuLOcgGaBZGSJrT0fCeD9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A78A/50CC472824CA11F19D07AC3CA7833773/0997DA40251811F19187E6B0C0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.246.144.0/24
103.240.216.0-103.240.218.255
Signature Algorithm: sha256WithRSAEncryption
7a:f7:31:ad:09:f2:47:80:9b:bc:dd:9c:88:99:df:59:21:a6:
ef:10:7d:b2:f5:f0:e6:e6:8d:65:bc:6f:46:11:e6:8a:78:e6:
1c:6f:cb:f1:95:8a:f9:1d:8a:d5:16:63:ad:28:6e:f3:e4:ef:
8f:99:ba:ba:36:5c:8c:50:55:95:17:8f:92:da:af:87:ab:95:
82:28:ef:72:81:46:8c:2d:6e:11:d5:f4:da:19:bf:8d:3b:17:
4e:6a:fe:60:1c:b1:fb:06:31:6e:03:7d:07:06:69:bb:18:79:
be:bc:60:2d:52:58:40:a3:f3:8e:3a:c1:10:89:fd:3d:86:d0:
4e:6c:0a:31:57:59:c6:21:8b:35:f9:6f:f8:cd:76:23:58:32:
82:7d:b4:20:fa:33:97:22:e3:dd:f4:12:61:f3:51:8d:2c:eb:
fe:7f:da:16:d2:55:68:d2:80:f1:50:f4:2d:c9:83:2e:5d:1e:
3b:69:cb:36:0a:84:12:da:ab:d0:9a:4d:15:19:08:11:c3:c2:
71:df:de:7b:48:0d:8a:f5:b4:c7:d9:dd:aa:b2:f9:ef:f4:dd:
67:e5:75:70:df:a2:73:1d:92:b5:a7:3c:ba:ac:99:d3:3f:11:
4d:b6:28:01:54:52:99:2f:09:90:37:e3:bd:29:41:88:81:08:
ab:9d:e2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:33:14 2026 by rpki-client