
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/0F206AEA776F11ED8E7B8775C4F9AE02.roa
File: 0F206AEA776F11ED8E7B8775C4F9AE02.roa (raw, json)
Hash identifier: zXVV6Fq9+Ev8ZgtdPsPKQEYkkJ0zf+qFsMmrOUVqUuU=
Subject key identifier: 1A:CC:FC:97:AA:17:CC:FF:FC:94:CB:D9:48:13:E5:F4:76:D2:99:EB
Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
Certificate serial: 07E0
Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/0F206AEA776F11ED8E7B8775C4F9AE02.roa
Signing time: Tue 08 Sep 2026 21:42:57 +0000
ROA not before: Tue 08 Sep 2026 21:42:57 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 133044
IP address blocks: 103.99.101.0/24 maxlen: 24
103.242.49.0/24 maxlen: 24
2001:df3:d000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl
rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2016 (0x7e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
Validity
Not Before: Sep 8 21:42:57 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa08161-eb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:91:56:bd:32:3f:9e:a5:f5:75:f6:b4:e2:
03:03:29:fe:f5:54:27:25:fa:27:85:60:aa:b7:06:
fe:0c:50:c9:af:45:14:45:e6:be:c9:6f:fd:d6:02:
4e:e0:b4:15:5e:a0:c4:b7:4a:c7:8f:3f:fa:4e:44:
ae:c0:70:94:3f:ff:ed:11:81:e5:05:6b:ac:b6:68:
c6:50:16:b5:3d:62:9d:7a:7f:18:e4:49:f6:ef:2b:
c1:1e:ab:17:5b:8f:e1:8a:cd:fb:d7:6b:a3:76:9a:
f9:2f:e0:ed:42:85:0a:79:46:28:ff:5d:90:23:5c:
09:08:01:4a:9f:a1:01:ab:34:3b:4c:a0:23:63:74:
b3:d3:9a:0d:ec:9c:07:78:fb:91:e8:3b:82:1e:eb:
fb:be:ed:f7:4f:6d:eb:17:d8:76:58:ae:84:d8:a3:
12:5b:ab:8e:22:3f:9e:ad:a8:7b:de:f3:48:93:84:
ba:48:c0:2f:26:d9:1b:01:f0:94:61:0a:d2:ef:aa:
cd:fb:cf:bf:99:c8:a7:47:4a:f8:fa:f8:b7:2e:c6:
ae:9e:6e:9a:18:8a:17:7f:3b:34:5a:1d:53:34:20:
a7:a1:67:5d:53:cb:02:6d:2b:ea:a0:83:0a:bd:ee:
ad:3f:9d:e8:99:b6:cb:be:af:93:45:d9:5a:45:a9:
9e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CC:FC:97:AA:17:CC:FF:FC:94:CB:D9:48:13:E5:F4:76:D2:99:EB
X509v3 Authority Key Identifier:
keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/0F206AEA776F11ED8E7B8775C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.101.0/24
103.242.49.0/24
IPv6:
2001:df3:d000::/48
Signature Algorithm: sha256WithRSAEncryption
76:2d:08:a7:6e:68:19:17:8c:d1:00:de:08:3a:58:a6:52:ca:
e3:34:3d:2b:4f:ee:b9:f5:0a:9c:99:63:02:c7:63:f4:15:75:
42:f8:52:fe:fa:0d:88:d4:e3:60:2a:53:e2:06:d6:bd:34:ab:
29:a3:b2:21:61:68:f1:e7:e3:74:97:ce:57:e5:6f:45:1c:0c:
f0:a4:9a:d4:f7:26:db:04:b6:e4:7f:7c:e6:78:df:e2:61:d6:
3a:80:7c:a0:84:26:3c:8e:b0:18:e7:d9:30:06:8a:a5:6f:48:
f2:e1:ab:69:7f:dd:b5:5d:17:44:09:c7:ec:44:46:7d:dd:76:
39:d3:5c:a0:c8:cf:9b:a7:95:e7:7c:e5:8c:9a:0b:ae:79:5c:
22:3f:a4:d7:57:de:89:2e:fd:10:1a:cf:fe:a8:85:21:a3:25:
b0:73:9c:24:79:7b:4d:d4:07:d7:73:ec:50:03:18:33:2a:63:
72:2c:de:23:cb:68:de:39:8a:97:b4:93:6b:7c:fe:29:f7:f2:
99:2d:0a:e5:cd:74:f1:47:d7:2f:28:42:0b:c0:28:fb:3e:6c:
a2:d6:2d:7f:ec:bb:5b:87:96:18:9d:35:f1:8e:2d:8b:a3:87:
fb:af:13:c1:c2:8a:fe:ab:ff:ed:ed:af:5f:ed:22:65:e4:b7:
07:0f:fa:be
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgICB+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEzMTQxMTAvBgNVBAUTKDIxNEE1RjIyQUE1MDFCMjE4QjBFNjAxNUQxRTBGQkEx
QzhFNDNGMjQwHhcNMjYwOTA4MjE0MjU3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEwODE2MS1lYjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzFORVr0yP56l9XX2tOIDAyn+9VQnJfonhWCqtwb+DFDJr0UURea+yW/91gJO
4LQVXqDEt0rHjz/6TkSuwHCUP//tEYHlBWustmjGUBa1PWKden8Y5En27yvBHqsX
W4/his3712ujdpr5L+DtQoUKeUYo/12QI1wJCAFKn6EBqzQ7TKAjY3Sz05oN7JwH
ePuR6DuCHuv7vu33T23rF9h2WK6E2KMSW6uOIj+erah73vNIk4S6SMAvJtkbAfCU
YQrS76rN+8+/mcinR0r4+vi3Lsaunm6aGIoXfzs0Wh1TNCCnoWddU8sCbSvqoIMK
ve6tP53ombbLvq+TRdlaRamewwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFBrM/Jeq
F8z//JTL2UgT5fR20pnrMB8GA1UdIwQYMBaAFCFKXyKqUBshiw5gFdHg+6HI5D8k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxNC83MEQzQjM2QTU5
NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5R0xEbUFWMGVEN29jamtQ
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lVcGZJcXBRR3lHTERtQVYwZUQ3b2Nqa1B5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkEzMTQvNzBEM0IzNkE1OTUyMTFFQkE2RDc4MDQ4QzRGOUFFMDIvMEYyMDZBRUE3
NzZGMTFFRDhFN0I4Nzc1QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS
BAIAATAMAwQAZ2NlAwQAZ/IxMA8EAgACMAkDBwAgAQ3z0AAwDQYJKoZIhvcNAQEL
BQADggEBAHYtCKduaBkXjNEA3gg6WKZSyuM0PStP7rn1CpyZYwLHY/QVdUL4Uv76
DYjU42AqU+IG1r00qymjsiFhaPHn43SXzlflb0UcDPCkmtT3JtsEtuR/fOZ43+Jh
1jqAfKCEJjyOsBjn2TAGiqVvSPLhq2l/3bVdF0QJx+xERn3ddjnTXKDIz5unled8
5YyaC655XCI/pNdX3oku/RAaz/6ohSGjJbBznCR5e03UB9dz7FADGDMqY3Is3iPL
aN45ipe0k2t8/in38pktCuXNdPFH1y8oQgvAKPs+bKLWLX/su1uHlhidNfGOLYuj
h/uvE8HCiv6r/+3tr1/tImXktwcP+r4=
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:18:16 2026 by rpki-client