
$ rpki-client -vvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/C49CBEFCD27711ECAAC6BD51C4F9AE02.roa
File: C49CBEFCD27711ECAAC6BD51C4F9AE02.roa (raw, json)
Hash identifier: m42CkLhr+GKHo0TtapwYGoLo4QIiXG0fyh2xqAw/LvU=
Subject key identifier: B9:05:25:9B:DE:49:0F:5D:71:68:B4:CE:ED:D7:87:4D:EA:52:AB:C5
Certificate issuer: /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Certificate serial: 2CCD
Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/C49CBEFCD27711ECAAC6BD51C4F9AE02.roa
Signing time: Sat 06 Jun 2026 16:17:23 +0000
ROA not before: Sat 06 Jun 2026 16:17:23 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 133535
IP address blocks: 103.233.240.0/24 maxlen: 24
103.233.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11469 (0x2ccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916559E, serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Validity
Not Before: Jun 6 16:17:23 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a244813-72a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:e7:92:7b:22:be:19:e7:5a:9e:e5:00:a0:
1a:8f:37:98:ab:8d:af:6f:31:fd:ea:fa:4c:ba:1b:
1d:7b:0c:7a:eb:41:fe:55:12:26:66:e3:e0:01:5d:
32:c7:a4:4a:61:51:d1:63:c3:d5:d5:11:9d:c6:3a:
90:75:0d:12:0b:49:3c:4b:4d:f3:90:28:0b:21:ef:
43:cc:32:67:9a:0e:c0:81:41:00:65:1e:e5:89:c0:
30:4a:97:eb:2e:1c:f4:f5:43:68:4f:27:29:70:ef:
ea:56:13:1e:88:5f:79:1e:6a:39:a2:85:30:b6:a0:
d5:ff:4c:aa:d2:25:3f:8e:8a:83:3b:e7:8d:6b:26:
b7:5d:39:15:dd:49:cb:76:d1:14:99:4e:c9:65:2f:
c0:ea:c4:3e:6f:8e:db:87:bc:99:e0:e8:88:c9:62:
10:30:0a:1b:a3:ad:04:d3:60:a4:e4:12:11:3c:53:
34:9b:fd:b0:6b:83:45:f0:27:96:29:92:d0:3c:16:
8c:23:9a:b1:fa:08:a0:6d:2f:96:51:e4:eb:06:e7:
34:36:38:29:2a:ca:da:93:f9:9e:7a:1b:0f:43:69:
43:a4:40:79:3f:7a:38:d0:9d:25:fc:d4:2f:09:4c:
64:f6:de:26:be:64:10:0a:39:55:cf:7a:9d:7f:a3:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:05:25:9B:DE:49:0F:5D:71:68:B4:CE:ED:D7:87:4D:EA:52:AB:C5
X509v3 Authority Key Identifier:
keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/C49CBEFCD27711ECAAC6BD51C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.233.240.0/23
Signature Algorithm: sha256WithRSAEncryption
53:11:18:00:0f:d6:81:ef:af:f3:d5:d3:60:ce:c2:d3:2f:14:
6b:bf:43:95:17:3c:71:64:64:12:2f:b6:b8:4a:b7:05:3c:be:
c5:30:37:8b:08:bc:12:74:75:fe:e9:a6:e8:3b:07:f8:39:c1:
5e:ab:7e:b4:97:40:93:8e:bb:ea:54:67:0a:3c:40:8c:d9:50:
9e:84:f3:7e:13:ef:49:a4:24:e7:53:9c:94:3d:9c:86:b3:2d:
2e:cb:a7:b9:b7:a9:ec:58:93:19:70:28:fa:ca:96:0d:2a:71:
8d:9e:73:91:7d:b1:d3:cf:8b:92:77:94:60:32:c0:39:b9:64:
f6:7d:22:5d:c4:db:a3:87:a7:fd:24:2f:4c:5e:3e:0e:74:7b:
8f:f5:c2:38:5c:34:39:c4:68:30:ab:a7:fa:d2:11:71:42:39:
23:68:1c:e7:ea:36:2e:21:38:61:a6:66:5b:da:a3:81:cf:4d:
b8:7e:ff:a2:4f:38:c7:24:70:1c:f7:12:9f:33:7f:08:f6:c3:
a0:88:a6:61:8d:54:08:11:d4:9e:d2:75:42:98:e6:10:b6:c6:
4c:0e:1f:b3:f9:13:2d:ba:71:b7:de:ac:6e:41:1f:38:a4:66:
ab:02:ea:21:6a:40:99:58:f2:3f:fe:8e:10:95:16:b3:9b:c3:
96:5c:80:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:12:52 2026 by rpki-client