
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/D11B9044112011EDAC1D3B15C4F9AE02.roa
File: D11B9044112011EDAC1D3B15C4F9AE02.roa (raw, json)
Hash identifier: kypD0HNpdZMUft2CKjrM9l4+dpJKPDYyDTu1PYOEbrs=
Subject key identifier: 71:88:E2:D0:22:B8:03:A2:50:BD:85:33:89:65:31:9B:AC:B9:DD:F5
Certificate issuer: /CN=A916B19D/serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
Certificate serial: 0305
Authority key identifier: 5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/D11B9044112011EDAC1D3B15C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:06:13 +0000
ROA not before: Sat 27 Sep 2025 02:00:17 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 132161
IP address blocks: 103.14.216.0/23 maxlen: 23
103.14.218.0/23 maxlen: 23
203.190.208.0/22 maxlen: 22
203.190.212.0/23 maxlen: 23
203.190.212.0/24 maxlen: 24
203.190.213.0/24 maxlen: 24
203.190.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl
rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 773 (0x305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B19D, serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
Validity
Not Before: Sep 27 02:00:17 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a42bb5-ad32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b3:92:b9:f2:0b:8f:5b:00:4f:98:3a:93:fb:
eb:4a:c5:c8:30:c3:0d:fe:c3:cb:51:fc:45:b3:09:
24:78:c8:21:5c:ae:af:66:96:bd:71:53:27:b3:06:
11:4d:6f:cf:8a:7b:4b:7a:dd:ae:1d:71:91:23:7d:
2c:54:79:9f:f5:07:83:c6:14:0f:e8:53:17:23:52:
34:77:af:6a:55:cf:1c:a4:2b:67:85:e6:f6:34:ff:
cf:08:d8:c8:b6:7a:ff:76:66:c8:1a:86:f8:6a:32:
48:3b:10:b9:ea:4b:cd:63:fb:f2:21:ef:ed:9b:33:
09:ba:1a:e7:9f:be:15:fc:7d:2b:1e:c0:e3:d2:15:
ab:4c:6e:b6:65:24:2b:1f:5a:ad:1a:22:c7:1e:ac:
af:7e:f5:8b:23:fc:e5:48:d9:61:f8:9c:d3:07:3e:
2f:16:11:d0:e4:3a:cc:a8:59:e7:62:05:0d:bf:e5:
2c:ac:d9:8b:ab:e1:04:d0:7a:02:64:c0:3c:42:65:
b1:c8:18:10:74:de:ad:37:7d:14:19:fe:11:ea:87:
a8:9d:6e:82:18:00:eb:0b:0b:11:18:95:d2:ef:fb:
64:af:aa:55:68:17:b5:fa:81:43:15:05:f5:df:34:
31:06:1e:0f:7e:e4:e6:10:13:ba:f9:34:b8:42:7b:
c1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:88:E2:D0:22:B8:03:A2:50:BD:85:33:89:65:31:9B:AC:B9:DD:F5
X509v3 Authority Key Identifier:
keyid:5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/D11B9044112011EDAC1D3B15C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.14.216.0/22
203.190.208.0/21
Signature Algorithm: sha256WithRSAEncryption
ce:73:b4:05:0b:79:ce:df:e3:d7:06:7a:af:c5:45:3c:bc:f9:
23:56:11:0a:62:cc:29:41:b9:d8:27:9d:d3:3a:c3:cc:33:25:
dc:f1:f7:19:f1:c9:9c:5f:f6:ee:82:24:09:16:bf:a5:68:91:
0f:59:87:ed:84:5b:e2:b1:ea:82:c2:28:9d:9d:50:39:95:5d:
ab:77:8f:82:da:32:0b:2d:70:aa:3d:74:bb:19:4e:84:80:16:
14:cb:76:29:0a:9a:5c:5c:3b:b8:cd:b9:a0:1c:92:00:7c:87:
f1:97:74:75:a4:1a:3a:bd:81:8d:85:f8:ac:1f:e1:e8:fe:cd:
77:a9:c7:37:be:5c:e7:9d:5a:7e:61:38:04:b5:34:54:38:eb:
38:86:40:a0:27:5e:70:91:89:97:1b:94:9b:72:60:61:2e:4e:
45:bf:f9:0e:21:9a:d3:86:65:c8:01:23:5b:8f:53:23:bf:73:
52:3d:1e:1f:a7:64:4c:62:2a:e1:c9:e7:4f:a8:82:07:ab:e7:
57:74:41:ef:14:09:cc:1b:bb:27:dc:f1:77:3b:32:12:42:9b:
45:6d:36:77:c1:9b:c9:9e:61:4f:e8:82:87:cf:76:b9:25:41:
1a:a9:4e:24:a0:1e:66:49:74:d3:aa:79:e2:b8:23:04:c5:06:
3f:a0:82:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:54 2026 by rpki-client