
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/8ADFF772924011ED867BE311C4F9AE02.roa
File: 8ADFF772924011ED867BE311C4F9AE02.roa (raw, json)
Hash identifier: M/ubLoXQZAiI+oYKeKkVk90gdgW88i4ytnwosT2YUMI=
Subject key identifier: 75:2A:3B:60:49:D6:F0:7F:14:17:2F:64:92:F6:45:83:AA:F9:3E:9C
Certificate issuer: /CN=A91B9F08/serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
Certificate serial: 0EFF
Authority key identifier: CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/8ADFF772924011ED867BE311C4F9AE02.roa
Signing time: Tue 28 Apr 2026 18:22:52 +0000
ROA not before: Tue 28 Apr 2026 18:22:52 +0000
ROA not after: Fri 28 Aug 2026 00:00:00 +0000
asID: 133076
IP address blocks: 103.18.160.0/24 maxlen: 24
103.18.161.0/24 maxlen: 24
103.18.162.0/24 maxlen: 24
103.18.163.0/24 maxlen: 24
116.204.160.0/24 maxlen: 24
116.204.161.0/24 maxlen: 24
116.204.162.0/24 maxlen: 24
116.204.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl
rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3839 (0xeff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9F08, serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
Validity
Not Before: Apr 28 18:22:52 2026 GMT
Not After : Aug 28 00:00:00 2026 GMT
Subject: CN=69f0fafc-bbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:81:1d:1c:93:82:01:f1:62:da:43:c3:c7:fb:
83:14:0f:b4:0c:b9:86:79:06:58:67:2b:5a:3b:be:
5c:39:4a:2e:21:36:5f:b2:38:5f:41:86:3e:2a:f1:
7a:45:f0:04:04:07:74:fd:8c:27:96:57:f5:a4:62:
61:98:7a:09:74:4e:08:9f:b2:ba:16:06:c8:fe:41:
3f:6b:19:0b:3b:4d:1c:53:e5:c9:33:26:7f:9c:76:
94:71:ec:b9:7d:fa:9c:b7:7a:44:5d:68:99:d5:6c:
e2:77:53:d9:a7:20:2c:e0:4f:52:39:89:8a:d5:7a:
7b:30:0f:4e:11:78:18:b6:73:30:5f:dc:df:8a:d9:
24:65:22:41:3b:80:d6:6a:22:fd:5a:d2:a5:bf:df:
13:b3:38:fc:7d:bb:46:08:c1:13:72:ad:38:d8:00:
a6:fb:a0:91:a9:ab:10:bc:7f:93:8d:ab:da:87:24:
d2:75:81:9d:b4:0f:8e:72:a0:c9:0d:04:ea:d5:bb:
70:f1:9e:f6:49:7b:39:94:76:77:6f:00:da:f4:4b:
da:8d:a4:97:bf:4b:c9:64:13:1a:68:8e:1f:58:e0:
40:1f:57:06:af:ea:73:46:27:28:35:d4:08:68:0d:
2e:8d:71:49:9d:2c:82:94:b3:ab:a9:b6:dc:e4:67:
04:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2A:3B:60:49:D6:F0:7F:14:17:2F:64:92:F6:45:83:AA:F9:3E:9C
X509v3 Authority Key Identifier:
keyid:CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/8ADFF772924011ED867BE311C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.18.160.0/22
116.204.160.0/22
Signature Algorithm: sha256WithRSAEncryption
82:bb:62:3c:2e:fa:ba:d9:2f:ed:7b:a4:68:5f:4f:50:5e:ca:
c4:ae:d5:9f:72:d1:f6:3c:93:fc:17:b1:e0:6a:59:4d:16:04:
39:48:c5:13:84:02:46:68:64:b3:2d:ca:ba:6f:0c:ad:a2:c6:
17:73:04:8d:b7:ca:31:60:de:86:3f:c7:f5:52:3f:25:1d:47:
91:f4:ad:a5:48:6e:47:fd:90:66:73:33:4b:02:7a:db:b8:ed:
76:86:20:f5:98:09:2d:8c:04:bd:01:17:d1:42:b6:38:8c:e1:
c2:81:bd:93:41:21:79:79:2d:78:42:fd:4e:24:fc:bb:3d:5e:
de:20:c2:9c:2d:8d:94:f7:88:18:11:19:32:2c:f3:dd:a5:e5:
5a:7f:ae:01:7b:a9:b1:7a:d6:d6:7a:b5:d9:89:96:4c:82:3d:
f0:b6:4c:50:ac:b8:c2:53:ff:62:a0:90:b9:ca:7a:ac:25:4f:
9f:e8:51:31:55:59:24:85:6f:3e:1e:15:ff:18:0e:05:1c:d6:
03:43:96:57:3e:09:94:f8:0c:5c:88:47:07:1a:88:ba:35:f1:
f6:29:7b:cd:8e:56:bd:39:79:d6:56:e0:45:be:b9:af:76:47:
d9:5f:f8:d9:ec:fe:1c:7f:4b:37:64:a9:1a:41:1a:27:01:da:
63:73:be:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:51:46 2026 by rpki-client