
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/318BC266FEA911E8BF138B59C4F9AE02.roa
File: 318BC266FEA911E8BF138B59C4F9AE02.roa (raw, json)
Hash identifier: S+enzldOi/Tk8VhBxK9J1PD1ALiMccvtC2k5b2Y8TNc=
Subject key identifier: 75:A9:D5:43:45:66:5A:50:38:E4:A4:20:48:C8:EA:D4:36:CE:9B:DA
Certificate issuer: /CN=A911BA4B/serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B
Certificate serial: 1222
Authority key identifier: 96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/318BC266FEA911E8BF138B59C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:46:50 +0000
ROA not before: Thu 06 Nov 2025 16:55:50 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 10222
IP address blocks: 103.77.192.0/23 maxlen: 23
103.77.192.0/24 maxlen: 24
103.77.193.0/24 maxlen: 24
103.77.194.0/23 maxlen: 24
116.206.208.0/23 maxlen: 23
116.206.208.0/24 maxlen: 24
116.206.209.0/24 maxlen: 24
116.206.210.0/23 maxlen: 23
116.206.210.0/24 maxlen: 24
116.206.211.0/24 maxlen: 24
2402:15c0:1::/48 maxlen: 48
2402:15c0:2::/48 maxlen: 48
2402:15c0:3::/48 maxlen: 48
2402:15c0:4::/48 maxlen: 48
2402:15c0:5::/48 maxlen: 48
2402:15c0:6::/48 maxlen: 48
2402:15c0:16::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.crl
rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4642 (0x1222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BA4B, serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B
Validity
Not Before: Nov 6 16:55:50 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a4434a-37e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:44:24:7c:44:df:ee:5c:74:d9:47:f9:21:
ab:34:24:1c:2c:96:ff:7d:55:6e:49:3e:bd:e3:1f:
66:ac:19:7c:9b:75:b3:77:fd:ae:74:7b:2a:8a:78:
97:77:75:da:7e:f7:2d:7a:2f:e1:46:35:6d:d4:96:
a6:cb:64:9c:c4:b1:14:97:c8:b4:93:48:7e:fd:0a:
f6:05:3c:2c:8c:8a:46:2a:58:66:ea:06:16:fb:03:
cc:e1:04:cb:5e:b6:78:38:d5:e1:e5:c3:d9:29:7e:
bc:c7:47:47:a4:ae:15:2d:e9:41:b7:9c:e8:16:0b:
5a:7e:7b:9e:d6:97:74:3d:20:35:3f:4b:6c:bd:58:
65:fe:8c:bb:08:1d:56:6a:b9:60:c2:97:5b:0e:7e:
6b:22:9c:ea:a3:c7:ea:07:d7:af:be:cd:3d:5a:a4:
25:02:04:a1:24:2c:82:ad:3a:0a:4e:d2:fa:62:e8:
cb:df:31:84:7d:75:7f:70:1f:73:6e:db:dd:dc:2a:
bc:9a:f7:03:d8:0d:30:80:d1:fa:ec:1b:22:b6:64:
ce:47:96:80:a7:e6:bc:51:57:74:42:75:86:9e:9b:
fb:0a:da:a8:65:f7:1e:21:49:50:aa:09:31:2c:32:
35:ac:bd:ee:66:4c:4e:01:ba:16:97:24:76:5d:47:
09:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A9:D5:43:45:66:5A:50:38:E4:A4:20:48:C8:EA:D4:36:CE:9B:DA
X509v3 Authority Key Identifier:
keyid:96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/318BC266FEA911E8BF138B59C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.77.192.0/22
116.206.208.0/22
IPv6:
2402:15c0:1::-2402:15c0:6:ffff:ffff:ffff:ffff:ffff
2402:15c0:16::/48
Signature Algorithm: sha256WithRSAEncryption
03:a1:f6:82:e4:3e:6e:fe:46:1a:1f:88:19:4c:68:37:d8:c6:
56:1d:13:eb:dd:0b:2a:3d:33:7a:71:1f:c4:16:9a:9c:18:ff:
19:a1:42:db:a1:3f:3c:65:c2:81:56:78:51:3d:ed:4d:b7:40:
b8:ea:17:88:ac:cd:82:42:3d:aa:0c:6b:cb:9e:00:2d:6b:af:
15:dc:e1:df:52:01:4e:f2:ff:10:dd:c2:ad:10:58:0e:15:31:
7f:85:d2:f7:25:b9:31:5e:66:ae:3e:e2:38:bf:c3:4c:76:97:
0d:bf:7d:77:ca:94:e2:bd:24:32:f3:6a:d9:6a:ff:2b:a5:e2:
c4:7a:4d:22:64:1b:63:f2:85:8c:0f:59:66:37:47:5d:57:f0:
c2:74:17:29:f8:4d:f6:55:98:8b:ee:41:4f:7b:45:6c:e1:e4:
f0:1c:b7:4c:08:29:e8:3d:93:e7:f8:e5:9a:bb:8f:34:cf:f9:
92:d6:d0:87:11:5d:5b:49:6d:04:56:1a:89:7e:bc:97:19:e7:
27:65:05:eb:fe:ce:32:fc:25:84:be:28:38:8d:49:db:39:e0:
e3:96:dd:36:b9:ad:99:49:b7:e6:b3:88:04:7b:e1:ad:73:3c:
fe:2b:71:37:ba:0e:12:ae:31:d3:fa:9a:f9:ef:08:7e:ce:33:
b3:f3:29:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:05 2026 by rpki-client