
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/22355CF4DE8411EDBC551D19C4F9AE02.roa
File: 22355CF4DE8411EDBC551D19C4F9AE02.roa (raw, json)
Hash identifier: QlL4aNp/wbKMeB52DudZPqTsA1njqKMHmVEPCti0l3U=
Subject key identifier: D6:90:6E:12:65:0C:60:13:E7:2A:59:89:37:CD:DB:09:E0:65:B8:EA
Certificate issuer: /CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734
Certificate serial: 3518
Authority key identifier: 2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/22355CF4DE8411EDBC551D19C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:12:11 +0000
ROA not before: Mon 02 Jun 2025 15:31:09 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 58589
IP address blocks: 103.8.229.0/24 maxlen: 24
103.12.3.0/24 maxlen: 24
103.232.168.0/24 maxlen: 24
103.232.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl
rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13592 (0x3518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AE6A, serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734
Validity
Not Before: Jun 2 15:31:09 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a402eb-ada6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:d1:1f:e9:c4:67:e6:a2:7e:ee:3d:a8:69:
ff:01:f2:a7:21:7b:0d:2e:a9:f0:e8:35:73:71:20:
8d:f4:3d:1e:d0:0a:a9:d9:c9:2a:81:ee:4e:f7:84:
0b:fa:85:c7:e1:7d:58:58:ac:0c:13:82:8f:43:33:
ed:c9:cc:19:3e:25:20:dd:a5:bd:97:91:d9:89:1f:
7e:a1:8d:18:cc:7b:de:91:ca:d6:a4:06:9b:64:c9:
55:f1:53:32:9f:e8:07:a1:c6:e8:d1:d7:eb:cc:43:
25:50:37:15:fa:cb:86:1a:53:be:b4:c5:fe:4e:e3:
b7:98:9a:a8:9f:73:c0:da:d1:2e:73:a2:64:f2:0a:
ad:51:f3:2c:a9:26:4b:95:a8:f8:59:a9:9a:ac:fb:
cf:19:dd:3c:cb:fd:6f:a6:63:dd:ea:d7:96:39:ac:
ad:c1:63:f7:e3:d4:bc:26:40:c8:15:25:48:58:a1:
d7:9f:f6:4d:46:34:6e:e1:49:8a:e8:ba:1b:2e:6f:
72:0e:f3:d4:2c:ed:24:18:5e:8c:fc:2f:fa:b7:fc:
b4:2d:fd:8f:43:0e:ed:c5:65:96:78:10:7d:ef:5b:
b6:a6:92:14:d2:a6:2e:ca:39:65:83:32:45:40:4e:
69:b0:ea:c0:47:51:91:49:46:27:ab:d8:30:5f:70:
b6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:90:6E:12:65:0C:60:13:E7:2A:59:89:37:CD:DB:09:E0:65:B8:EA
X509v3 Authority Key Identifier:
keyid:2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/22355CF4DE8411EDBC551D19C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.8.229.0/24
103.12.3.0/24
103.232.168.0/23
Signature Algorithm: sha256WithRSAEncryption
af:75:47:7a:9e:fb:9e:4a:d4:2c:9b:c5:71:a6:ef:42:14:90:
34:b3:95:ea:91:3e:37:d7:da:04:fa:86:ea:83:55:a3:f5:75:
95:0e:c1:c9:ce:5d:9f:de:58:dc:be:b0:d2:a5:20:eb:9d:05:
87:13:cb:46:91:32:32:a3:0e:ff:b2:35:bd:b0:e9:c6:c2:09:
7a:4f:2f:3d:38:df:c9:80:4a:4f:d9:53:a4:e5:72:49:cf:5a:
f2:10:6b:2a:47:a7:6c:c2:fa:1b:30:b0:a7:33:eb:60:8b:e3:
f1:ac:7c:85:91:86:b3:76:cf:8b:57:dc:5e:1c:fb:76:10:1b:
02:c6:7c:11:4b:32:99:18:e9:67:90:04:80:1c:cb:b8:21:d3:
0c:a9:96:93:74:8e:fc:8a:13:ac:47:0b:2d:18:3d:89:fb:56:
33:01:0b:d7:42:65:b0:26:1a:19:12:88:6f:6e:00:d1:20:34:
ea:8d:15:19:5b:72:8a:c2:4f:f7:c9:cd:a5:d6:ff:c8:3a:59:
64:4b:c7:21:15:ed:0c:01:f3:2a:2a:ed:b0:9e:b8:70:99:54:
31:7b:d8:da:91:8c:30:83:10:d4:5f:f3:ec:81:2a:24:66:13:
57:a6:00:95:c9:62:af:e1:96:23:27:6b:03:0b:e9:8f:b5:c2:
c5:89:b0:8a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICNRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkFFNkExMTAvBgNVBAUTKDJDODhGMzhGNkQ0Rjg0RjJDMTkxQTNGQTJCMTkxNUFF
MDg5ODg3MzQwHhcNMjUwNjAyMTUzMTA5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDJlYi1hZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs7HRH+nEZ+aifu49qGn/AfKnIXsNLqnw6DVzcSCN9D0e0Aqp2ckqge5O94QL
+oXH4X1YWKwME4KPQzPtycwZPiUg3aW9l5HZiR9+oY0YzHvekcrWpAabZMlV8VMy
n+gHocbo0dfrzEMlUDcV+suGGlO+tMX+TuO3mJqon3PA2tEuc6Jk8gqtUfMsqSZL
laj4WamarPvPGd08y/1vpmPd6teWOaytwWP349S8JkDIFSVIWKHXn/ZNRjRu4UmK
6LobLm9yDvPULO0kGF6M/C/6t/y0Lf2PQw7txWWWeBB971u2ppIU0qYuyjllgzJF
QE5psOrAR1GRSUYnq9gwX3C2ewIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFNaQbhJl
DGAT5ypZiTfN2wngZbjqMB8GA1UdIwQYMBaAFCyI849tT4TywZGj+isZFa4ImIc0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUU2QS81ODMyNDVCNjFE
QUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQTEJrYVA2S3hrVnJnaVlo
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xJanpqMjFQaFBMQmthUDZLeGtWcmdpWWh6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkFFNkEvNTgzMjQ1QjYxREFBMTFFMjg3MkFGM0E1MDhCMDJDRDIvMjIzNTVDRjRE
RTg0MTFFREJDNTUxRDE5QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAZwjlAwQAZwwDAwQBZ+ioMA0GCSqGSIb3DQEBCwUAA4IBAQCvdUd6
nvueStQsm8Vxpu9CFJA0s5XqkT4319oE+obqg1Wj9XWVDsHJzl2f3ljcvrDSpSDr
nQWHE8tGkTIyow7/sjW9sOnGwgl6Ty89ON/JgEpP2VOk5XJJz1ryEGsqR6dswvob
MLCnM+tgi+PxrHyFkYazds+LV9xeHPt2EBsCxnwRSzKZGOlnkASAHMu4IdMMqZaT
dI78ihOsRwstGD2J+1YzAQvXQmWwJhoZEohvbgDRIDTqjRUZW3KKwk/3yc2l1v/I
OllkS8chFe0MAfMqKu2wnrhwmVQxe9jakYwwgxDUX/PsgSokZhNXpgCVyWKv4ZYj
J2sDC+mPtcLFibCK
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:12:22 2026 by rpki-client