
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/22355CF4DE8411EDBC551D19C4F9AE02.roa
File: 22355CF4DE8411EDBC551D19C4F9AE02.roa (raw, json)
Hash identifier: G/kXHotVNXe/Ru6S94R+9y4XKhDCZ9Ild+4s0h8wWNE=
Subject key identifier: A9:03:48:B4:FC:96:D0:80:5A:71:62:D3:B6:9E:D6:B7:8C:AE:D8:59
Certificate issuer: /CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734
Certificate serial: 354B
Authority key identifier: 2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/22355CF4DE8411EDBC551D19C4F9AE02.roa
Signing time: Sun 31 May 2026 16:13:13 +0000
ROA not before: Sun 31 May 2026 16:13:13 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 58589
IP address blocks: 103.8.229.0/24 maxlen: 24
103.12.3.0/24 maxlen: 24
103.232.168.0/24 maxlen: 24
103.232.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl
rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13643 (0x354b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AE6A, serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734
Validity
Not Before: May 31 16:13:13 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a1c5e18-944a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:0e:4a:71:94:a7:21:41:2f:07:1c:04:f0:
ea:23:a1:8f:8a:10:95:55:18:4d:78:68:38:63:20:
c9:8f:63:96:8b:40:71:10:0d:f4:ee:bb:e0:da:4c:
3c:16:51:4d:fe:00:63:97:74:1a:c1:79:54:29:f0:
c7:9f:ae:71:01:9e:bf:a7:7f:aa:c3:39:bc:6d:6b:
d2:05:b7:5f:8f:ea:86:44:4d:c1:19:46:cf:6a:ac:
b7:63:0e:86:20:d1:af:84:a7:b7:51:b1:73:17:72:
cd:7d:69:62:66:07:52:d2:b8:b4:fb:92:b7:fe:8b:
f6:c1:35:75:bc:2c:84:cf:8d:f7:f5:f7:25:6f:43:
11:3d:c4:a9:80:3c:f2:31:44:86:18:bd:d5:36:5a:
a9:38:2b:a9:0a:cd:eb:0a:05:bb:b0:25:db:0a:48:
26:f6:08:05:3a:f0:39:7e:9b:6f:18:b3:d0:5c:5d:
0a:e5:c6:b2:7a:26:d2:0a:9d:8a:ee:6e:79:70:77:
bd:5a:a4:e7:ba:a0:4f:70:ab:78:04:4c:1b:b8:50:
dc:c2:32:18:1b:d1:87:93:03:7d:35:7f:6c:4d:57:
d4:c6:4e:f0:07:04:1c:ad:a1:a2:a8:d1:5b:76:25:
f8:e9:2d:25:11:31:a1:86:3c:5a:d0:56:16:92:c2:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:03:48:B4:FC:96:D0:80:5A:71:62:D3:B6:9E:D6:B7:8C:AE:D8:59
X509v3 Authority Key Identifier:
keyid:2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/22355CF4DE8411EDBC551D19C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.8.229.0/24
103.12.3.0/24
103.232.168.0/23
Signature Algorithm: sha256WithRSAEncryption
09:22:90:47:ca:e7:3b:e0:5f:31:9b:d8:61:63:0e:84:95:c4:
74:3d:d4:be:07:d6:c4:9e:26:e9:18:ee:b8:ad:fa:4b:97:3f:
09:5a:29:35:8b:1e:9f:ca:1f:54:51:22:da:6b:ad:e0:8c:3f:
21:46:f5:4d:3d:c4:93:aa:0d:d9:4d:58:27:d0:5a:c4:8a:58:
d6:ba:63:4f:1b:1a:84:4f:99:c4:c5:15:3e:03:d7:8d:91:0a:
dd:72:b8:3c:6c:5c:f2:a3:49:e5:c5:dc:66:f6:b4:8e:f5:51:
5a:5a:4e:11:03:e2:4d:4a:39:8f:9d:6c:a4:80:ae:73:e5:fb:
9a:66:4b:a2:51:8f:d1:de:8f:54:38:3d:96:08:d3:bf:1a:63:
ff:06:55:35:ef:90:49:38:68:62:8b:a7:18:ac:80:26:66:fb:
fb:06:db:d9:5f:d3:7c:99:b5:e3:4a:fb:33:da:fb:77:f1:d5:
99:a4:0e:7d:47:bb:65:fe:ee:f2:36:da:53:a3:11:16:56:e6:
9c:1c:28:f0:dd:c9:96:86:26:b7:3c:e5:dc:b9:8d:4a:37:de:
17:82:c2:d5:93:da:13:19:c2:1a:c0:cd:90:c4:87:52:84:4f:
33:c5:8c:b0:db:6a:6d:af:d8:92:dd:82:c8:0b:38:19:4a:92:
41:ff:75:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:51:37 2026 by rpki-client