
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6AF5AEC0CFEB11F0A1299838C4F9AE02.roa
File: 6AF5AEC0CFEB11F0A1299838C4F9AE02.roa (raw, json)
Hash identifier: gklPJqEDEE/TnsZweBq/+PdytfZEyIP/TCZJDtolpx8=
Subject key identifier: 8D:B9:DF:40:7D:F4:6F:68:12:E1:3A:1B:C3:7D:CD:81:31:AB:5F:58
Certificate issuer: /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial: 19B7
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6AF5AEC0CFEB11F0A1299838C4F9AE02.roa
Signing time: Thu 11 Jun 2026 20:41:43 +0000
ROA not before: Thu 11 Jun 2026 20:41:43 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 26337
IP address blocks: 110.173.128.0/19 maxlen: 24
111.118.160.0/20 maxlen: 24
116.90.0.0/18 maxlen: 24
182.160.128.0/18 maxlen: 24
203.19.59.0/24 maxlen: 24
203.98.73.0/24 maxlen: 24
203.98.75.0/24 maxlen: 24
203.98.80.0/24 maxlen: 24
203.98.84.0/24 maxlen: 24
203.98.91.0/24 maxlen: 24
203.123.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6583 (0x19b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Validity
Not Before: Jun 11 20:41:43 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6a2b1d87-3d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ce:ce:4f:8d:5f:9f:84:79:e4:36:55:b0:02:
a0:0b:f0:d1:31:12:5e:b4:f1:e1:89:2f:76:3c:f4:
93:b2:53:85:09:0b:de:bd:54:61:2c:ea:5b:9b:f6:
d3:13:07:1c:7e:19:dc:41:2a:14:79:d3:af:eb:68:
82:66:9e:0d:70:d5:88:dd:e8:ca:c7:3d:bc:61:5f:
05:a5:84:b9:34:4f:79:4f:ac:7c:a6:09:0e:42:78:
ad:12:1b:66:88:17:9b:14:eb:c1:e1:af:f5:96:55:
e9:ac:05:57:a4:18:af:ea:e3:dc:d0:06:e8:ee:92:
56:66:91:fb:df:25:0c:fe:fa:e3:04:6b:63:cf:9c:
c9:85:31:8b:d6:ad:b4:83:de:33:e4:c9:bb:8f:f2:
b0:f5:4c:8e:d4:ae:f7:9b:fb:e7:9b:86:23:ba:0c:
dd:6a:3c:e5:8c:3b:05:9f:5b:b2:d2:d7:4e:f3:a7:
e3:bd:c5:66:f0:52:e4:a5:b9:f4:66:2e:3d:01:09:
60:67:fe:4e:94:36:05:42:db:b0:69:5a:ac:46:c7:
71:cf:c0:21:6b:f9:9c:86:a0:25:c4:9e:79:18:7c:
bd:bd:00:71:73:dc:00:0c:d1:23:8b:5c:5f:17:59:
83:e8:ac:e5:0a:fa:42:95:72:6e:eb:ff:f1:50:04:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B9:DF:40:7D:F4:6F:68:12:E1:3A:1B:C3:7D:CD:81:31:AB:5F:58
X509v3 Authority Key Identifier:
keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6AF5AEC0CFEB11F0A1299838C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
110.173.128.0/19
111.118.160.0/20
116.90.0.0/18
182.160.128.0/18
203.19.59.0/24
203.98.73.0/24
203.98.75.0/24
203.98.80.0/24
203.98.84.0/24
203.98.91.0/24
203.123.59.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:37:ac:4b:06:24:a1:99:a6:77:a1:e5:f6:d6:e1:3e:5e:1c:
37:8c:69:7a:11:88:3a:6f:f5:a5:bc:cf:12:f6:fe:fc:93:41:
f9:e7:3f:3e:52:5a:58:9e:00:4a:a7:c8:11:50:49:b9:b4:8e:
bc:36:35:3e:af:05:7a:f1:ae:11:4e:01:4b:0f:f7:0b:c6:da:
7f:d5:dc:70:d0:68:05:ce:bb:4d:9e:c8:bc:0c:81:f5:e8:c1:
ce:59:05:ce:35:9b:94:a9:1f:36:8c:48:86:0d:9a:a7:b4:4a:
5d:f3:c3:b3:5f:22:ff:55:0f:a1:d4:be:f4:bd:24:ef:c9:36:
26:2e:35:78:12:c3:e2:f1:8f:df:9b:74:b3:d0:08:a7:13:ed:
bd:ac:2f:8f:88:bf:de:8c:9a:57:cd:e0:83:d7:aa:e4:b0:44:
3d:8a:58:05:f1:2c:ef:2b:8d:be:b1:28:33:84:16:44:ca:c4:
a9:0b:b4:c7:ff:6a:b0:0b:84:e1:1b:1b:4c:73:69:95:15:f7:
c4:bf:26:a6:b7:9a:56:50:39:00:48:2d:56:6f:f1:f8:1b:c6:
62:ba:02:92:95:8e:ab:74:e8:b8:9e:41:bf:23:03:36:05:af:
df:7c:5d:06:01:3c:9c:12:e7:92:fc:5f:2a:3d:5f:6c:44:72:
c0:4d:37:fe
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgICGbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIzM0UxMTAvBgNVBAUTKEQwMDcyRURFQjY3RTE3NTJBQjc1MjI2M0E0RkQ5NDUw
REQzQTMzRUMwHhcNMjYwNjExMjA0MTQzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTJiMWQ4Ny0zZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA587OT41fn4R55DZVsAKgC/DRMRJetPHhiS92PPSTslOFCQvevVRhLOpbm/bT
EwccfhncQSoUedOv62iCZp4NcNWI3ejKxz28YV8FpYS5NE95T6x8pgkOQnitEhtm
iBebFOvB4a/1llXprAVXpBiv6uPc0Abo7pJWZpH73yUM/vrjBGtjz5zJhTGL1q20
g94z5Mm7j/Kw9UyO1K73m/vnm4YjugzdajzljDsFn1uy0tdO86fjvcVm8FLkpbn0
Zi49AQlgZ/5OlDYFQtuwaVqsRsdxz8Aha/mchqAlxJ55GHy9vQBxc9wADNEji1xf
F1mD6KzlCvpClXJu6//xUAQA2wIDAQABo4ICnDCCApgwHQYDVR0OBBYEFI2530B9
9G9oEuE6G8N9zYExq19YMB8GA1UdIwQYMBaAFNAHLt62fhdSq3UiY6T9lFDdOjPs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMzRS8yRjY2QjU3QUI4
M0UxMUU3QTAxRDY2NTBDNEY5QUUwMi8wQWN1M3JaLUYxS3JkU0pqcFAyVVVOMDZN
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBBY3UzclotRjFLcmRTSmpwUDJVVU4wNk0tdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkIzM0UvMkY2NkI1N0FCODNFMTFFN0EwMUQ2NjUwQzRGOUFFMDIvNkFGNUFFQzBD
RkVCMTFGMEExMjk5ODM4QzRGOUFFMDIucm9hMFsGCCsGAQUFBwEHAQH/BEwwSjBI
BAIAATBCAwQFbq2AAwQEb3agAwQGdFoAAwQGtqCAAwQAyxM7AwQAy2JJAwQAy2JL
AwQAy2JQAwQAy2JUAwQAy2JbAwQAy3s7MA0GCSqGSIb3DQEBCwUAA4IBAQCdN6xL
BiShmaZ3oeX21uE+Xhw3jGl6EYg6b/WlvM8S9v78k0H55z8+UlpYngBKp8gRUEm5
tI68NjU+rwV68a4RTgFLD/cLxtp/1dxw0GgFzrtNnsi8DIH16MHOWQXONZuUqR82
jEiGDZqntEpd88OzXyL/VQ+h1L70vSTvyTYmLjV4EsPi8Y/fm3Sz0AinE+29rC+P
iL/ejJpXzeCD16rksEQ9ilgF8SzvK42+sSgzhBZEysSpC7TH/2qwC4ThGxtMc2mV
FffEvyamt5pWUDkASC1Wb/H4G8ZiugKSlY6rdOi4nkG/IwM2Ba/ffF0GATycEueS
/F8qPV9sRHLATTf+
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:27:18 2026 by rpki-client