
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/0F072D383AAE11EAB5D8270EC4F9AE02.roa
File: 0F072D383AAE11EAB5D8270EC4F9AE02.roa (raw, json)
Hash identifier: EolASXb1KltLVGZYGCtQ/6/WNNv9j4lXlevPtfmwzdg=
Subject key identifier: 9C:D8:28:22:9E:DA:43:34:AF:0E:5D:B9:AE:83:00:4E:E4:3F:37:53
Certificate issuer: /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
Certificate serial: 0C38
Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/0F072D383AAE11EAB5D8270EC4F9AE02.roa
Signing time: Tue 28 Jul 2026 19:39:16 +0000
ROA not before: Tue 28 Jul 2026 19:39:16 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 135527
IP address blocks: 103.222.20.0/22 maxlen: 24
2405:bf40::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl
rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3128 (0xc38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C38F, serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
Validity
Not Before: Jul 28 19:39:16 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a690564-7963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:56:16:ae:49:e4:89:10:a2:af:90:d2:e1:3e:
2f:e1:f7:de:3d:e1:32:28:ef:f5:f8:e8:88:c5:db:
4f:d6:f5:f6:a3:1b:21:44:db:e4:46:74:b8:e5:37:
cd:5c:44:68:33:e6:d6:6a:e6:69:aa:0f:aa:36:ae:
59:15:a5:f1:d0:04:21:68:9c:f1:66:7a:d5:4f:88:
5e:d4:5f:28:21:ba:be:90:5a:47:d4:55:20:f0:52:
f2:6c:a8:51:c3:c1:56:43:16:af:3a:f3:78:1b:4d:
7e:d5:26:e4:84:48:b8:5c:f1:c0:ed:0c:b2:df:2b:
7b:e8:f7:04:d6:06:a2:8c:c5:06:6f:55:28:1c:6e:
e9:3b:6f:ae:64:37:af:f3:41:9c:78:c7:93:3b:ce:
78:be:f4:7c:b8:42:bd:5d:e1:55:62:5f:5e:e2:b9:
a4:2d:a1:48:54:9e:2e:d1:74:bd:6f:e4:2c:1d:a7:
a3:14:18:db:fa:28:87:db:93:74:ee:36:44:14:81:
7d:3f:28:a7:fe:d3:2c:e8:3a:61:19:59:e5:26:05:
48:10:80:eb:8a:74:ae:ed:d0:8a:7d:b9:d2:26:ce:
59:7b:8c:f1:62:8b:e4:43:ee:11:a6:ea:23:9c:9e:
74:43:89:fe:08:ce:bf:3c:c5:b0:cd:b1:ae:ba:5b:
05:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D8:28:22:9E:DA:43:34:AF:0E:5D:B9:AE:83:00:4E:E4:3F:37:53
X509v3 Authority Key Identifier:
keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/0F072D383AAE11EAB5D8270EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.222.20.0/22
IPv6:
2405:bf40::/32
Signature Algorithm: sha256WithRSAEncryption
42:c8:b5:03:aa:3a:c3:71:4b:8f:e2:cf:bf:de:b4:e9:3c:84:
30:63:3d:a7:be:fa:e4:0f:0e:54:a8:8a:95:c2:f0:d5:31:e9:
a9:25:08:33:89:9b:24:75:d3:df:11:21:99:5b:f0:c8:2a:6f:
09:5c:df:a9:b2:cf:23:7d:c5:65:2f:8d:2f:4a:1d:69:4a:14:
dd:2a:2d:02:77:d5:56:14:83:2a:c7:a2:96:b7:42:0a:1c:d1:
88:69:8f:4b:80:1f:b0:22:a4:6c:b5:e1:2f:6d:15:c5:94:0e:
dc:9a:97:d0:d6:5a:16:66:96:e9:72:06:21:fa:37:8e:5e:3a:
99:c3:25:34:46:ec:e5:a8:39:3f:66:64:ce:1a:e0:2b:2a:61:
6c:66:18:52:62:a0:c1:5d:09:32:c8:ed:cf:08:ff:84:76:b3:
2b:f7:a0:79:b8:a6:b4:5a:7c:fb:45:3c:62:9d:f7:c8:db:79:
65:49:9b:0c:89:31:fe:02:42:b4:9f:b3:a3:a5:39:ea:93:e8:
5a:a4:46:5c:75:03:15:2e:73:f6:fe:f5:f0:f1:14:75:65:be:
4f:09:d5:9e:41:40:4c:9b:4f:50:ae:8b:82:25:82:74:06:86:
9f:a1:ab:1f:48:74:0e:10:03:75:76:a9:e3:82:51:bd:67:68:
74:0c:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:43:02 2026 by rpki-client