
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/1A8553B831F011EAA18AC76AC4F9AE02.roa
File: 1A8553B831F011EAA18AC76AC4F9AE02.roa (raw, json)
Hash identifier: tnVPuD19UwWln3/34cxqq1xm4up8rwSwfbjxhWxlsQw=
Subject key identifier: 88:0E:C3:83:DD:CE:88:95:34:31:A0:37:A2:E3:25:57:13:84:BD:BE
Certificate issuer: /CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8
Certificate serial: 0BF1
Authority key identifier: 49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/1A8553B831F011EAA18AC76AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:25:38 +0000
ROA not before: Wed 26 Feb 2025 19:48:05 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 137511
IP address blocks: 103.111.68.0/24 maxlen: 29
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl
rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 18:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3057 (0xbf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C7B6, serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8
Validity
Not Before: Feb 26 19:48:05 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a40612-8475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:66:5e:df:ee:55:9c:f2:f1:a5:c2:da:f5:
2a:c2:56:82:f4:29:95:5b:55:29:17:84:cf:78:51:
39:a0:51:55:0d:e7:72:0e:e7:00:50:6d:19:3a:fc:
62:03:e7:7b:9b:a9:5f:a1:6e:f8:10:67:63:aa:71:
fd:d7:03:c1:23:6d:25:ec:cf:18:26:bc:d7:32:f3:
43:25:e7:69:25:d1:65:1c:8a:9c:fc:80:04:14:86:
03:bf:f7:4d:f4:06:c6:c7:13:a7:2a:8f:02:3f:6b:
b9:ec:03:bd:81:c5:d2:9d:3a:fc:35:e8:d9:27:55:
64:22:d7:d8:40:1d:e6:e8:bc:86:14:65:f2:a1:8e:
c5:51:30:d5:dd:eb:0a:17:83:7c:1a:47:68:b8:16:
cc:88:61:46:64:39:0e:e8:2f:01:98:fa:8b:8e:b6:
cd:75:84:44:64:ef:fe:bb:e9:10:5f:c9:26:d3:5e:
7e:67:7e:21:1c:96:c2:c5:81:6d:56:bd:3f:68:3e:
f8:cb:b2:9e:83:63:2f:f5:8b:24:b2:23:ee:45:a9:
9f:00:37:7a:ba:46:af:a4:78:ed:c2:fd:e2:c9:47:
44:d1:40:76:0c:33:f9:bb:6a:d3:b1:9e:79:99:b3:
1c:49:c6:6b:cb:b8:c2:10:19:31:66:89:ba:4c:b8:
cb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0E:C3:83:DD:CE:88:95:34:31:A0:37:A2:E3:25:57:13:84:BD:BE
X509v3 Authority Key Identifier:
keyid:49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/1A8553B831F011EAA18AC76AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.111.68.0/24
Signature Algorithm: sha256WithRSAEncryption
21:42:18:fd:43:dd:a8:b6:0b:95:97:1a:54:ca:ca:33:a1:39:
05:99:d9:04:4a:83:fc:07:4e:a8:cc:d5:7b:a8:ca:73:de:31:
ed:d6:a0:2e:04:22:df:66:05:57:ae:1a:b0:97:5d:d8:5f:35:
a3:80:f5:9b:cf:48:c2:f8:8d:03:e3:81:6f:6f:68:b0:ea:93:
2d:3d:10:89:31:81:06:e4:41:32:b3:4d:e3:3f:f5:37:9d:47:
ec:86:37:7b:4b:4b:d6:59:db:ce:0b:cd:b7:1e:23:aa:e4:37:
f7:fc:d8:a0:79:f4:a1:df:d5:ce:06:eb:f1:ff:14:00:6c:eb:
54:3e:74:f6:04:14:05:f6:0a:84:9b:32:71:cb:c5:2a:1a:d0:
df:df:3b:b2:37:df:f4:4f:6c:69:32:0d:ce:bb:0f:ec:61:85:
52:81:28:7f:26:55:4e:e2:87:04:06:02:40:d3:e7:78:d3:b2:
b8:99:19:aa:55:57:b5:e4:e0:f0:fd:79:8b:fb:d8:57:9d:f8:
e0:f9:7c:ba:99:4c:47:ae:4d:0d:a0:37:05:c5:83:d7:e2:72:
d3:38:88:4c:18:1f:2b:62:3c:0a:f4:74:32:a6:56:98:a9:31:
72:b4:9b:1e:19:50:80:87:10:87:ec:99:fe:12:2b:18:65:00:
32:ca:7d:72
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICC/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM3QjYxMTAvBgNVBAUTKDQ5M0QzRUFGRTA0MDU3Mjg0MUU5RkFCMjU2RDBDNjA0
NENCODU4QzgwHhcNMjUwMjI2MTk0ODA1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDYxMi04NDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwBtmXt/uVZzy8aXC2vUqwlaC9CmVW1UpF4TPeFE5oFFVDedyDucAUG0ZOvxi
A+d7m6lfoW74EGdjqnH91wPBI20l7M8YJrzXMvNDJedpJdFlHIqc/IAEFIYDv/dN
9AbGxxOnKo8CP2u57AO9gcXSnTr8NejZJ1VkItfYQB3m6LyGFGXyoY7FUTDV3esK
F4N8GkdouBbMiGFGZDkO6C8BmPqLjrbNdYREZO/+u+kQX8km015+Z34hHJbCxYFt
Vr0/aD74y7Keg2Mv9YsksiPuRamfADd6ukavpHjtwv3iyUdE0UB2DDP5u2rTsZ55
mbMcScZry7jCEBkxZom6TLjL+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIgOw4Pd
zoiVNDGgN6LjJVcThL2+MB8GA1UdIwQYMBaAFEk9Pq/gQFcoQen6slbQxgRMuFjI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzdCNi80M0Y2QTU3ODMx
RUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5aEI2ZnF5VnRER0JFeTRX
TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NUMC1yLUJBVnloQjZmcXlWdERHQkV5NFdNZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM3QjYvNDNGNkE1NzgzMUVFMTFFQUFCMDFFNzY3QzRGOUFFMDIvMUE4NTUzQjgz
MUYwMTFFQUExOEFDNzZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ29EMA0GCSqGSIb3DQEBCwUAA4IBAQAhQhj9Q92otguVlxpUysoz
oTkFmdkESoP8B06ozNV7qMpz3jHt1qAuBCLfZgVXrhqwl13YXzWjgPWbz0jC+I0D
44Fvb2iw6pMtPRCJMYEG5EEys03jP/U3nUfshjd7S0vWWdvOC823HiOq5Df3/Nig
efSh39XOBuvx/xQAbOtUPnT2BBQF9gqEmzJxy8UqGtDf3zuyN9/0T2xpMg3Ouw/s
YYVSgSh/JlVO4ocEBgJA0+d407K4mRmqVVe15ODw/XmL+9hXnfjg+Xy6mUxHrk0N
oDcFxYPX4nLTOIhMGB8rYjwK9HQyplaYqTFytJseGVCAhxCH7Jn+EisYZQAyyn1y
-----END CERTIFICATE-----
Generated at Tue Mar 3 04:17:00 2026 by rpki-client