
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/1A8553B831F011EAA18AC76AC4F9AE02.roa
File: 1A8553B831F011EAA18AC76AC4F9AE02.roa (raw, json)
Hash identifier: NnChO+AKLPYxrSb85TL7NkWuNcOh9X5s3cfGb3mVcMM=
Subject key identifier: 01:85:E0:57:F7:D7:37:56:C7:30:50:BE:E1:54:03:27:2D:9E:01:0E
Certificate issuer: /CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8
Certificate serial: 0C09
Authority key identifier: 49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/1A8553B831F011EAA18AC76AC4F9AE02.roa
Signing time: Wed 08 Apr 2026 19:23:38 +0000
ROA not before: Wed 08 Apr 2026 19:23:38 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 137511
IP address blocks: 103.111.68.0/24 maxlen: 29
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl
rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3081 (0xc09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C7B6, serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8
Validity
Not Before: Apr 8 19:23:38 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69d6ab3a-622b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:56:f6:c9:09:98:4f:93:98:59:55:b5:cf:
b5:12:53:04:4e:a1:4e:00:71:e7:56:28:d6:0f:98:
dc:dd:21:4d:8f:27:09:d0:1e:e7:46:13:70:40:d6:
92:13:c8:3c:19:fa:89:0e:2c:e5:22:97:f4:32:35:
c6:6c:05:98:02:99:a6:4d:01:87:14:4e:ba:e2:fb:
7d:bd:69:30:eb:d4:f4:ca:8d:fb:04:32:91:34:4a:
b8:22:ed:b8:b5:b4:9f:58:84:08:5d:22:f8:05:ed:
c3:8b:c4:91:75:a6:9e:68:aa:0d:bb:42:4e:4f:c5:
80:be:08:b0:6b:1b:9f:96:d3:b8:24:f7:51:35:c5:
80:d3:51:da:33:e9:1e:60:60:82:b4:31:eb:30:ab:
eb:cf:f7:c7:c1:bb:45:a9:05:a5:60:12:c6:49:0b:
cf:86:88:1a:ef:c5:44:ba:a9:e1:a9:32:7e:24:5e:
27:03:5e:26:85:30:04:33:21:a7:d6:cb:20:98:ae:
7c:69:a0:dc:16:61:66:c0:4a:1f:d6:4e:a9:a0:8e:
0f:80:8a:6e:0a:f5:fd:bd:5d:58:0e:c2:5c:26:18:
3d:35:f3:a4:0a:4d:89:76:2e:da:44:fe:2e:54:a4:
e9:ef:df:c1:27:ad:cc:be:69:41:fd:eb:92:cf:7e:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:85:E0:57:F7:D7:37:56:C7:30:50:BE:E1:54:03:27:2D:9E:01:0E
X509v3 Authority Key Identifier:
keyid:49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/1A8553B831F011EAA18AC76AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.111.68.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:cc:bd:43:d5:2a:a5:6a:40:4d:cf:c4:8d:a5:14:b8:b9:ef:
b7:8e:bd:8b:d2:29:95:cd:05:bc:b3:4b:d0:2a:3f:57:15:7b:
92:4a:e1:8f:ca:d7:55:51:ed:c5:e8:61:89:c9:5a:c6:f4:c4:
e1:94:18:42:24:56:cc:6a:42:1b:a4:37:c1:14:b6:50:dc:fa:
73:ae:f9:18:a2:c8:ca:1e:7e:29:6d:eb:2a:e9:74:11:fc:3e:
4b:ce:68:8c:e5:04:bb:a1:59:53:0c:90:46:b8:3b:fa:51:9d:
00:08:c1:37:27:52:d9:91:a3:73:df:cb:fa:6b:40:e6:fd:80:
de:b4:ae:ad:17:85:a4:68:c1:d7:af:b8:b9:a4:05:86:eb:7d:
24:84:fe:41:04:38:25:07:45:73:c0:3f:10:68:8c:42:47:4c:
11:21:91:cd:d2:48:70:e9:6d:71:62:b3:ac:9f:e9:75:71:6e:
d2:b0:e9:73:6c:17:ac:64:09:0c:ea:a8:be:81:2c:8c:a1:f8:
2a:df:57:f3:9b:66:05:d5:05:ea:04:87:3c:18:9c:9b:8b:d8:
76:62:5e:9e:96:97:7e:f9:42:1d:25:85:df:f9:02:bb:bc:5c:
36:7c:14:03:74:85:b7:20:54:ed:2d:f7:0a:fd:58:58:70:75:
ac:b9:6a:2c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM3QjYxMTAvBgNVBAUTKDQ5M0QzRUFGRTA0MDU3Mjg0MUU5RkFCMjU2RDBDNjA0
NENCODU4QzgwHhcNMjYwNDA4MTkyMzM4WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ2YWIzYS02MjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuCVW9skJmE+TmFlVtc+1ElMETqFOAHHnVijWD5jc3SFNjycJ0B7nRhNwQNaS
E8g8GfqJDizlIpf0MjXGbAWYApmmTQGHFE664vt9vWkw69T0yo37BDKRNEq4Iu24
tbSfWIQIXSL4Be3Di8SRdaaeaKoNu0JOT8WAvgiwaxufltO4JPdRNcWA01HaM+ke
YGCCtDHrMKvrz/fHwbtFqQWlYBLGSQvPhoga78VEuqnhqTJ+JF4nA14mhTAEMyGn
1ssgmK58aaDcFmFmwEof1k6poI4PgIpuCvX9vV1YDsJcJhg9NfOkCk2Jdi7aRP4u
VKTp79/BJ63MvmlB/euSz35KvQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAGF4Ff3
1zdWxzBQvuFUAyctngEOMB8GA1UdIwQYMBaAFEk9Pq/gQFcoQen6slbQxgRMuFjI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzdCNi80M0Y2QTU3ODMx
RUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5aEI2ZnF5VnRER0JFeTRX
TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NUMC1yLUJBVnloQjZmcXlWdERHQkV5NFdNZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM3QjYvNDNGNkE1NzgzMUVFMTFFQUFCMDFFNzY3QzRGOUFFMDIvMUE4NTUzQjgz
MUYwMTFFQUExOEFDNzZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ29EMA0GCSqGSIb3DQEBCwUAA4IBAQAOzL1D1SqlakBNz8SNpRS4
ue+3jr2L0imVzQW8s0vQKj9XFXuSSuGPytdVUe3F6GGJyVrG9MThlBhCJFbMakIb
pDfBFLZQ3PpzrvkYosjKHn4pbesq6XQR/D5LzmiM5QS7oVlTDJBGuDv6UZ0ACME3
J1LZkaNz38v6a0Dm/YDetK6tF4WkaMHXr7i5pAWG630khP5BBDglB0VzwD8QaIxC
R0wRIZHN0khw6W1xYrOsn+l1cW7SsOlzbBesZAkM6qi+gSyMofgq31fzm2YF1QXq
BIc8GJybi9h2Yl6elpd++UIdJYXf+QK7vFw2fBQDdIW3IFTtLfcK/VhYcHWsuWos
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:02:17 2026 by rpki-client