
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/D11B9044112011EDAC1D3B15C4F9AE02.roa
File: D11B9044112011EDAC1D3B15C4F9AE02.roa (raw, json)
Hash identifier: yCAXtruLzv3brJF4jN6xJEQZ5a9W9tX4ic/VBZ7dzik=
Subject key identifier: E6:E0:AA:54:19:D0:0A:E7:03:FA:11:5D:43:93:95:11:9F:6B:02:A8
Certificate issuer: /CN=A916B19D/serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
Certificate serial: 0372
Authority key identifier: 5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/D11B9044112011EDAC1D3B15C4F9AE02.roa
Signing time: Wed 23 Sep 2026 00:50:13 +0000
ROA not before: Wed 23 Sep 2026 00:50:13 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 132161
IP address blocks: 103.14.216.0/23 maxlen: 23
103.14.218.0/23 maxlen: 23
203.190.208.0/22 maxlen: 22
203.190.212.0/23 maxlen: 23
203.190.212.0/24 maxlen: 24
203.190.213.0/24 maxlen: 24
203.190.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl
rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 882 (0x372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B19D, serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
Validity
Not Before: Sep 23 00:50:13 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ab32245-9181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:aa:9c:8a:07:ed:7c:c2:cf:bb:6b:4e:10:
d0:45:2b:ed:b6:5b:3d:c7:c3:96:16:e9:26:9d:fe:
6f:3a:c8:32:c3:3a:4f:49:0f:68:28:0b:08:cf:21:
ef:ea:9e:50:21:bd:c2:35:c7:76:cf:6a:ba:97:87:
f2:d4:a5:ed:6f:d7:3f:9b:f0:d0:55:ad:77:ce:f9:
f6:71:a8:95:95:b1:e2:ce:f5:c3:37:59:24:48:0f:
c0:a9:82:a5:b6:66:43:04:64:48:36:62:ea:78:5c:
df:41:d3:de:0e:a6:74:bf:d0:d5:6d:13:00:3b:9c:
5e:61:85:56:35:5d:d4:a9:d0:f2:49:a1:ec:a4:e5:
83:44:80:65:f0:94:33:9a:b3:9a:6f:50:d7:eb:e3:
ff:39:44:c9:ef:11:86:c2:c1:32:25:48:b8:96:0c:
e0:57:21:82:3d:ce:76:7b:a5:fd:05:02:3d:2a:d7:
9c:b8:31:3d:de:1c:73:13:7b:68:09:f7:22:f1:fb:
e0:7a:5e:07:2b:98:40:5f:20:b1:b8:ef:69:43:a6:
88:0b:ee:b6:ba:2e:f8:d5:a5:d6:fe:ee:3f:ee:0e:
cf:f7:65:65:72:d3:d9:9e:bb:03:fa:7f:70:c9:b6:
7d:dd:58:3e:28:55:d4:e9:16:d7:14:c0:01:b9:19:
dc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E0:AA:54:19:D0:0A:E7:03:FA:11:5D:43:93:95:11:9F:6B:02:A8
X509v3 Authority Key Identifier:
keyid:5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/D11B9044112011EDAC1D3B15C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.14.216.0/22
203.190.208.0/21
Signature Algorithm: sha256WithRSAEncryption
ea:b0:6f:dc:b5:8d:53:e5:6b:03:a4:e9:2a:52:34:ed:5a:e5:
b5:b7:3f:9c:ff:85:56:87:95:14:ac:8e:47:b2:19:12:6d:0b:
1d:7d:bb:8f:a2:76:82:05:df:98:6e:e0:a6:0e:ab:41:34:b2:
e7:26:0c:75:65:f5:0d:2c:e3:d2:6b:40:84:c8:cc:3c:d9:0e:
da:85:3a:be:16:a8:18:27:e8:5e:42:ca:3b:d7:60:9c:61:32:
85:53:86:a1:f8:c7:4e:76:3e:3f:b1:a4:2f:37:b7:64:77:ff:
47:72:0b:b9:3b:98:70:cf:25:ca:9b:74:df:0f:11:39:de:67:
17:2a:f8:53:6b:c0:41:69:b7:52:b5:c7:2f:72:74:d5:4a:44:
f3:5a:d0:16:57:65:c4:5b:d5:bf:bc:51:3f:66:ef:eb:c6:5f:
51:18:39:1e:01:9a:b0:22:9a:65:a6:2b:7e:35:1a:da:10:49:
dc:55:f8:81:67:72:bb:25:c2:15:68:85:05:45:af:c5:af:e2:
79:38:bd:80:36:fb:4e:46:d3:57:85:bc:40:23:17:5e:97:f5:
da:80:92:58:23:9e:3e:6a:ae:54:b5:fc:3f:d0:4f:59:75:65:
16:63:99:31:b4:41:75:33:ba:53:e9:4a:b7:44:f5:c6:f7:82:
a5:cb:40:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:51:20 2026 by rpki-client