
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/F21C48F48AF811ED89B22845C4F9AE02.roa
File: F21C48F48AF811ED89B22845C4F9AE02.roa (raw, json)
Hash identifier: oF+Dq3N/+bi7W4nj8TxULIA3ppMwtQImckC+5W7062Q=
Subject key identifier: 9A:F0:74:FE:67:F9:66:C8:18:30:30:4C:E9:35:A2:A7:C9:D8:E3:86
Certificate issuer: /CN=A911BFB0/serialNumber=5BACA76A1D3A00E358FFE5318B902498800D826C
Certificate serial: 0263
Authority key identifier: 5B:AC:A7:6A:1D:3A:00:E3:58:FF:E5:31:8B:90:24:98:80:0D:82:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6ynah06AONY_-Uxi5AkmIANgmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/F21C48F48AF811ED89B22845C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:59:25 +0000
ROA not before: Thu 24 Jul 2025 17:57:17 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 132100
IP address blocks: 103.70.216.0/22 maxlen: 22
103.70.216.0/24 maxlen: 24
103.70.217.0/24 maxlen: 24
103.70.218.0/24 maxlen: 24
103.70.219.0/24 maxlen: 24
182.255.52.0/22 maxlen: 22
182.255.52.0/24 maxlen: 24
182.255.53.0/24 maxlen: 24
182.255.54.0/24 maxlen: 24
182.255.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.crl
rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6ynah06AONY_-Uxi5AkmIANgmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:22:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 611 (0x263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BFB0, serialNumber=5BACA76A1D3A00E358FFE5318B902498800D826C
Validity
Not Before: Jul 24 17:57:17 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a48c8d-684c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:a9:76:bf:dc:65:23:b8:0c:82:20:ad:a7:
a9:a5:61:80:40:b8:1b:ab:81:38:0c:64:0a:19:29:
dc:80:5d:8f:b4:6c:7f:b5:6e:27:f6:35:7a:aa:c5:
4a:5b:e8:49:74:61:c8:f4:b7:fe:ca:c0:f3:ee:a9:
f2:c9:7c:04:38:be:61:8f:7b:da:8a:61:16:ff:93:
4b:4c:56:ed:9b:d3:5f:d6:0e:cc:c9:61:f9:75:e0:
8e:11:a0:c1:32:7e:d2:f2:f4:d2:fb:3a:1b:bc:a7:
c6:9a:9e:5d:3a:1c:81:58:87:d4:c4:f2:7d:9e:96:
48:3f:e1:39:6b:06:c9:2f:4a:9c:a2:91:4c:e9:74:
ad:25:b8:cb:46:89:df:e6:dc:48:45:bc:7b:1c:d2:
15:ee:81:ed:8e:f6:c8:1d:49:7e:d8:be:60:34:4c:
a4:75:f6:2c:ff:82:36:db:86:25:0a:e8:66:26:aa:
0d:37:b5:7c:f9:ff:b2:71:01:4a:64:bf:62:e4:84:
f8:93:c6:d0:a8:44:13:e4:11:a7:56:92:d2:f5:4c:
8f:ea:72:98:80:c2:4c:f1:06:61:78:9e:f5:64:71:
ef:25:6a:38:1a:d2:55:1c:64:fb:c5:b0:31:6f:74:
23:0f:08:18:cd:f4:70:53:13:8f:32:9b:02:0e:fa:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F0:74:FE:67:F9:66:C8:18:30:30:4C:E9:35:A2:A7:C9:D8:E3:86
X509v3 Authority Key Identifier:
keyid:5B:AC:A7:6A:1D:3A:00:E3:58:FF:E5:31:8B:90:24:98:80:0D:82:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6ynah06AONY_-Uxi5AkmIANgmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/F21C48F48AF811ED89B22845C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.70.216.0/22
182.255.52.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:58:8c:d7:26:c6:be:5d:fb:24:e0:90:36:f6:6d:4c:e1:b0:
96:c6:1c:6e:03:43:f8:fc:17:0a:ee:61:4d:b2:3b:cd:96:e1:
7a:dd:e2:47:86:e7:28:8d:33:f0:15:72:c7:a1:0f:c0:47:9d:
b0:de:ae:f7:c3:b0:8f:ae:9b:e2:bb:0c:3a:97:1c:9c:4f:59:
1e:58:48:0e:bd:3d:50:7b:d5:3f:39:06:df:a1:c4:68:e1:13:
1a:d4:e2:44:86:79:48:e9:68:34:e8:a2:bb:a7:4e:3d:e6:7a:
03:08:8e:30:98:c3:09:7d:33:89:73:c2:62:d4:67:3e:b5:27:
1b:6f:8d:3a:24:a2:f6:dc:9a:c9:5e:98:ef:55:53:cf:1f:65:
fe:ee:50:ed:e8:95:39:9b:dd:91:c2:3a:73:70:30:a7:e4:0f:
ad:e8:2e:7b:74:0e:69:b3:1f:c5:84:18:d9:63:dd:f0:51:d6:
42:90:99:26:e0:bb:cd:f9:0c:8b:4e:c7:a5:37:8a:35:8b:12:
8b:14:a7:73:17:5b:7c:0a:71:64:2e:4d:ca:26:15:0f:b4:37:
fb:7b:b0:c3:98:bf:90:37:d4:72:2d:cf:eb:f5:f3:9b:44:a7:
7e:0b:55:53:7f:42:f2:9c:af:a6:6f:95:16:57:b8:5a:55:0c:
9a:a7:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:30:23 2026 by rpki-client