
$ rpki-client -vvf rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/70FD3F6A5B1811F0B719DE67C4F9AE02.roa
File: 70FD3F6A5B1811F0B719DE67C4F9AE02.roa (raw, json)
Hash identifier: C09oV5jQIUq6pmxrsM/hlngK2BpYRakMeU6YGhYQJhc=
Subject key identifier: A9:C3:C3:BF:9C:2B:66:2A:98:21:AC:8B:AE:A3:7F:5A:00:1C:38:99
Certificate issuer: /CN=A916216D/serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
Certificate serial: 2D5B
Authority key identifier: AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/70FD3F6A5B1811F0B719DE67C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:38:19 +0000
ROA not before: Mon 07 Jul 2025 09:54:58 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 58717
IP address blocks: 103.26.246.0/23 maxlen: 24
157.119.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl
rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11611 (0x2d5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916216D, serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
Validity
Not Before: Jul 7 09:54:58 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a4414b-4cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c2:f9:63:ed:a7:a0:49:87:ef:b2:90:c7:cc:
a7:57:32:95:40:2b:53:4f:65:9e:59:ed:69:25:e1:
14:10:8b:c0:78:c4:6e:2f:e4:a1:69:8c:f4:b9:d2:
c3:d9:c7:7d:88:62:8d:63:80:3d:e9:29:24:25:2b:
3e:0c:f2:ce:51:01:00:95:8f:88:af:84:0e:f5:d0:
3c:d1:61:11:1d:56:79:b4:68:d0:23:e4:ea:ba:f2:
14:a4:83:5a:3c:62:3c:e9:42:51:16:9d:47:4d:ba:
51:90:f8:b0:f7:78:5d:32:6e:6c:f9:dc:f8:ff:ef:
a3:42:84:92:f1:f0:31:60:b1:5b:38:e0:c3:e4:ff:
37:85:00:ff:28:f3:a8:88:d6:ce:9a:fb:78:c1:de:
f9:f5:ce:65:99:e3:5c:44:9c:95:bb:12:40:e4:8e:
61:34:bf:a3:cd:63:20:23:ad:2a:c3:e2:f4:af:f7:
0e:f9:84:ef:cf:c9:13:27:8d:ca:a5:98:59:10:bc:
0a:d5:73:34:6a:d6:1d:d8:4c:8e:e2:03:00:c1:3a:
a6:00:1d:42:89:3f:8c:45:65:23:7a:5d:d2:1c:6b:
99:cd:07:a3:0c:15:e0:47:36:25:f4:d5:c8:14:51:
e9:25:7e:29:fa:d5:49:f9:81:a9:c8:e2:14:57:98:
4a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C3:C3:BF:9C:2B:66:2A:98:21:AC:8B:AE:A3:7F:5A:00:1C:38:99
X509v3 Authority Key Identifier:
keyid:AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/70FD3F6A5B1811F0B719DE67C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.26.246.0/23
157.119.184.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:7d:83:fb:67:7d:d8:d7:54:0d:cd:ca:27:ff:b3:2d:2a:7c:
00:f0:af:7a:56:f0:ca:a9:ed:57:bb:e9:0e:9f:79:a9:e9:26:
f4:0c:6b:09:f4:6d:16:92:e0:c3:8e:08:ac:d6:2f:12:93:38:
a7:ab:fb:ab:2f:ac:a2:4f:91:6b:09:b4:a1:c3:e9:32:1d:7b:
a3:f6:4c:bd:58:0f:4e:c4:a6:15:8c:bc:0c:46:db:b2:58:35:
d6:7c:bb:b2:21:34:96:5b:2b:97:ce:eb:ab:0e:97:3d:03:b5:
f9:81:40:5d:23:fd:21:9f:5c:49:36:f5:2a:8b:37:14:d9:a0:
cb:14:ef:2d:18:da:9e:72:42:fd:65:24:eb:19:5a:11:03:79:
c7:6a:ca:98:84:9d:a8:ef:62:19:9a:fb:bf:c0:26:05:d0:38:
92:73:3a:70:33:2d:36:c9:ae:14:3f:71:e7:26:e0:d7:06:cd:
97:45:b2:e0:e3:ac:de:96:ed:7d:d0:d3:dc:85:56:71:ec:c8:
83:2c:7c:a5:15:bc:58:51:31:fb:85:49:27:02:4f:ba:11:70:
72:10:ae:bf:e7:f7:72:4d:30:68:07:11:b9:41:a8:68:59:9e:
f1:9e:95:05:ba:95:71:47:d4:51:7a:d3:e8:5e:29:2e:c9:a1:
b6:9a:77:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:03:28 2026 by rpki-client