
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B7724DF64AEF11F18C019EA8CC833773.roa
File: B7724DF64AEF11F18C019EA8CC833773.roa (raw, json)
Hash identifier: MyZSs7WFahXHlv4AdJVcPNzCPQT2aCU9pHIBod0Xyik=
Subject key identifier: FA:C8:F8:19:D4:C9:AC:8E:43:58:20:83:13:B5:EF:68:C5:1B:DF:5A
Certificate issuer: /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial: 19B9
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B7724DF64AEF11F18C019EA8CC833773.roa
Signing time: Thu 11 Jun 2026 20:41:46 +0000
ROA not before: Thu 11 Jun 2026 20:41:46 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 46606
IP address blocks: 110.173.128.0/19 maxlen: 24
111.118.160.0/20 maxlen: 24
182.160.128.0/18 maxlen: 24
203.19.59.0/24 maxlen: 24
203.98.73.0/24 maxlen: 24
203.98.75.0/24 maxlen: 24
203.98.80.0/24 maxlen: 24
203.98.84.0/24 maxlen: 24
203.98.91.0/24 maxlen: 24
203.123.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6585 (0x19b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Validity
Not Before: Jun 11 20:41:46 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6a2b1d8a-c952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:ca:44:d3:d5:26:45:33:d3:f2:cf:b1:99:
0a:c9:8d:e3:05:1e:17:a8:e0:0b:19:6d:2c:19:ab:
5f:2f:e1:2d:4f:a0:32:27:f0:cc:d2:a6:d6:f1:d4:
8f:e4:78:5c:dd:df:11:7c:b3:72:2c:bb:71:80:e4:
22:2d:2a:db:ac:29:16:e2:a7:18:32:78:86:5b:55:
df:38:0d:bb:18:bb:b0:89:b2:65:98:6d:4c:dc:25:
c2:fd:46:9a:6b:c0:aa:a9:4d:c7:7f:8e:aa:6d:b9:
f5:b4:76:54:c5:cc:e6:55:fc:b4:90:b3:86:58:dc:
a0:2c:ed:7a:39:05:77:16:39:1a:49:3e:50:f1:3c:
16:cc:81:35:d9:cf:81:50:3e:7d:eb:01:bf:dd:8f:
fd:ba:91:5f:fd:28:ef:bb:6b:3b:ab:56:2d:77:1b:
10:9c:57:ff:c7:25:59:85:0a:4c:07:29:aa:2b:5e:
73:46:3e:8e:18:a1:50:86:3c:c8:17:39:92:99:19:
2c:8f:5c:1e:b9:9e:2b:cd:62:1a:ea:54:48:3d:4f:
4c:10:6e:03:1b:03:d0:f1:b9:a5:bd:53:b7:6e:35:
8b:62:4e:e7:8b:39:0c:bc:72:3a:8a:41:e5:9b:03:
49:7b:05:d3:30:c1:2b:a8:66:2a:5e:c8:63:d7:42:
df:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C8:F8:19:D4:C9:AC:8E:43:58:20:83:13:B5:EF:68:C5:1B:DF:5A
X509v3 Authority Key Identifier:
keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B7724DF64AEF11F18C019EA8CC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
110.173.128.0/19
111.118.160.0/20
182.160.128.0/18
203.19.59.0/24
203.98.73.0/24
203.98.75.0/24
203.98.80.0/24
203.98.84.0/24
203.98.91.0/24
203.123.59.0/24
Signature Algorithm: sha256WithRSAEncryption
35:cf:35:d4:bb:7f:8f:d6:b7:9c:4b:35:d1:59:d4:20:4f:b3:
92:28:1d:5b:08:3f:e0:48:83:18:95:56:b0:1e:9b:2d:d1:80:
b0:41:61:43:16:1c:ca:81:40:78:d1:0a:68:71:54:7d:e3:bd:
6a:29:81:9b:1a:d1:55:33:47:de:5c:36:18:04:28:38:c4:f9:
60:54:a3:b0:0c:83:16:35:b0:95:b9:1f:10:05:11:1d:01:4a:
8d:af:42:ce:67:16:b4:41:45:30:00:58:81:f5:5a:d5:af:5b:
95:ec:83:05:e5:a1:cb:be:a9:9a:9f:4f:09:b8:84:6c:8f:9c:
96:cb:9c:49:d0:67:f4:5a:67:e0:b0:81:4a:07:b7:53:09:44:
0e:be:3e:eb:c6:31:9d:78:75:72:05:3d:d2:fe:ac:6a:3b:67:
d9:71:7b:7f:ae:7f:4e:96:7d:66:2a:27:43:14:dc:dc:72:1c:
41:43:d4:f5:a3:54:6b:2e:83:4e:d8:c0:b8:a2:e9:f4:bc:7e:
a8:79:00:e1:be:61:cc:3d:54:3b:26:08:87:9c:72:90:eb:a5:
fa:e6:5e:f7:d1:a0:c1:31:49:d1:85:75:50:1a:72:72:9f:29:
f4:27:43:7b:4e:d1:17:6b:46:17:e5:fd:99:71:84:7f:42:4e:
57:ea:4d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:57 2026 by rpki-client