
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/499DE3FC1C1611EB8BD35065C4F9AE02.roa
File: 499DE3FC1C1611EB8BD35065C4F9AE02.roa (raw, json)
Hash identifier: q90sQnxzbRSHPH85xcHWMaHvdjo+QzvVXmS+pu++tZI=
Subject key identifier: E6:79:80:B1:28:2C:40:4D:F1:B3:B8:71:26:A2:1E:08:A5:2B:E5:DA
Certificate issuer: /CN=A916AF8E/serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
Certificate serial: 0819
Authority key identifier: 3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/499DE3FC1C1611EB8BD35065C4F9AE02.roa
Signing time: Fri 10 Apr 2026 21:26:57 +0000
ROA not before: Fri 10 Apr 2026 21:26:57 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 135090
IP address blocks: 103.189.115.0/24 maxlen: 24
103.209.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl
rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073 (0x819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AF8E, serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
Validity
Not Before: Apr 10 21:26:57 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69d96b21-88b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:af:5e:e0:9c:49:84:85:ac:62:a4:d8:1a:
30:f1:e0:43:08:69:f7:03:40:cf:d1:9b:96:ab:ca:
35:b4:7c:5b:26:3f:43:f8:24:85:e4:8f:73:f5:13:
b5:4a:c2:be:c3:86:45:54:71:3e:67:19:c5:cc:35:
a3:33:8e:47:eb:e7:7f:09:16:2a:57:36:47:45:6e:
19:d0:45:24:89:b8:cb:83:45:7a:a9:28:a1:cf:2b:
19:b0:ab:6d:21:1d:a0:74:d6:d7:53:86:59:a1:30:
53:ea:16:5a:f1:3a:91:63:38:92:c2:04:32:1b:b2:
b0:bf:f4:11:4b:f4:14:24:31:d8:d2:27:48:60:d1:
ec:32:fb:f7:4d:7f:12:14:f1:3b:60:b8:de:ae:41:
f9:7c:0b:cc:57:51:16:fc:d6:b6:cc:ac:ab:0b:fc:
9f:3d:a0:02:d5:86:a3:b5:57:de:f5:8c:4f:14:75:
2c:f7:c1:4c:9d:d6:60:ee:34:20:69:a5:67:6b:ed:
8b:af:83:3a:39:bd:81:ea:66:1c:aa:48:73:15:3c:
12:b5:64:f4:13:c6:86:cf:5b:f1:94:39:9b:10:bf:
71:19:09:8a:a0:a5:85:d6:89:f2:2d:f0:b8:99:74:
0e:a2:b3:ed:2e:4c:c9:ef:34:d7:2f:dc:d9:f5:f2:
1c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:79:80:B1:28:2C:40:4D:F1:B3:B8:71:26:A2:1E:08:A5:2B:E5:DA
X509v3 Authority Key Identifier:
keyid:3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/499DE3FC1C1611EB8BD35065C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.189.115.0/24
103.209.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:59:8e:82:b8:e9:62:56:83:f4:56:1c:a9:35:fa:cb:d9:57:
f6:3e:2a:8e:7a:8a:10:67:e9:1b:52:90:91:aa:db:6b:d5:4a:
4c:ea:0e:07:cc:22:cf:05:fb:e9:c0:74:49:eb:40:b8:19:46:
a4:fa:3c:43:1b:a1:4d:25:f0:97:f3:13:7c:5c:4c:12:d2:94:
0b:1e:37:1e:9d:92:a9:27:72:f3:7d:af:c9:54:80:d5:bc:94:
21:94:4f:9c:4f:77:45:e5:6c:f6:76:c2:b5:c0:e2:f0:50:b3:
4a:fe:3e:3b:38:70:a4:25:a3:e9:d0:4a:12:78:0e:61:aa:88:
0d:44:6c:73:e0:6d:8f:6d:49:a4:f1:c2:7e:1a:14:32:38:64:
50:39:c2:91:90:b0:31:59:c7:ce:d6:10:90:84:4e:c3:9c:08:
05:e6:4e:67:62:cf:66:ef:9d:d3:5a:c7:06:56:09:13:5f:c3:
31:ea:d1:0c:d5:b0:3c:53:68:1a:a5:03:a3:11:33:46:56:fa:
d8:f1:d0:97:49:02:0c:23:a0:cc:d2:a0:c0:a7:74:ff:72:56:
27:31:32:aa:d3:f0:8a:6c:c4:b2:ec:2c:b3:14:47:f9:4b:07:
e1:73:5a:f5:64:87:dd:06:b6:b3:03:de:e1:2a:f5:db:9d:6f:
26:a2:6f:8f
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkFGOEUxMTAvBgNVBAUTKDNEQzVEMjk0M0VENEFDRkE5MjZCNzc2NzZBOThCRUM4
QjNDOTc5QUUwHhcNMjYwNDEwMjEyNjU3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ5NmIyMS04OGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAodOvXuCcSYSFrGKk2Bow8eBDCGn3A0DP0ZuWq8o1tHxbJj9D+CSF5I9z9RO1
SsK+w4ZFVHE+ZxnFzDWjM45H6+d/CRYqVzZHRW4Z0EUkibjLg0V6qSihzysZsKtt
IR2gdNbXU4ZZoTBT6hZa8TqRYziSwgQyG7Kwv/QRS/QUJDHY0idIYNHsMvv3TX8S
FPE7YLjerkH5fAvMV1EW/Na2zKyrC/yfPaAC1YajtVfe9YxPFHUs98FMndZg7jQg
aaVna+2Lr4M6Ob2B6mYcqkhzFTwStWT0E8aGz1vxlDmbEL9xGQmKoKWF1onyLfC4
mXQOorPtLkzJ7zTXL9zZ9fIcBwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOZ5gLEo
LEBN8bO4cSaiHgilK+XaMB8GA1UdIwQYMBaAFD3F0pQ+1Kz6kmt3Z2qYvsizyXmu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUY4RS9EOTRBNzU5NDFD
MTQxMUVCQjAzNkRDNjNDNEY5QUUwMi9QY1hTbEQ3VXJQcVNhM2RuYXBpLXlMUEpl
YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BjWFNsRDdVclBxU2EzZG5hcGkteUxQSmVhNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkFGOEUvRDk0QTc1OTQxQzE0MTFFQkIwMzZEQzYzQzRGOUFFMDIvNDk5REUzRkMx
QzE2MTFFQjhCRDM1MDY1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ71zAwQAZ9ELMA0GCSqGSIb3DQEBCwUAA4IBAQA9WY6CuOliVoP0
VhypNfrL2Vf2PiqOeooQZ+kbUpCRqttr1UpM6g4HzCLPBfvpwHRJ60C4GUak+jxD
G6FNJfCX8xN8XEwS0pQLHjcenZKpJ3Lzfa/JVIDVvJQhlE+cT3dF5Wz2dsK1wOLw
ULNK/j47OHCkJaPp0EoSeA5hqogNRGxz4G2PbUmk8cJ+GhQyOGRQOcKRkLAxWcfO
1hCQhE7DnAgF5k5nYs9m753TWscGVgkTX8Mx6tEM1bA8U2gapQOjETNGVvrY8dCX
SQIMI6DM0qDAp3T/clYnMTKq0/CKbMSy7CyzFEf5Swfhc1r1ZIfdBrazA97hKvXb
nW8mom+P
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:22:46 2026 by rpki-client