
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/BAA31B82334C11F1B39593F0C5833773.roa
File: BAA31B82334C11F1B39593F0C5833773.roa (raw, json)
Hash identifier: b6cDSBTCgzSKIGv+eOKoPPpsaR3v5MlvIB5CVO/xPAE=
Subject key identifier: 05:11:3B:1F:03:12:AA:E7:49:58:B6:EC:FD:A0:AA:2B:45:DB:C4:7F
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3B60
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/BAA31B82334C11F1B39593F0C5833773.roa
Signing time: Wed 08 Apr 2026 13:13:27 +0000
ROA not before: Wed 08 Apr 2026 13:13:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132165
IP address blocks: 103.246.108.0/22 maxlen: 22
103.246.108.0/24 maxlen: 24
103.246.109.0/24 maxlen: 24
103.246.110.0/24 maxlen: 24
103.246.111.0/24 maxlen: 24
111.88.0.0/22 maxlen: 24
111.88.4.0/24 maxlen: 30
111.88.5.0/24 maxlen: 24
111.88.6.0/23 maxlen: 24
111.88.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15200 (0x3b60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Apr 8 13:13:27 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69d65477-3676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:99:85:6a:e4:d4:4f:af:78:c5:12:52:b6:
7a:f6:26:00:eb:1b:d4:1b:69:5a:10:9c:7b:7c:d5:
88:cd:2e:50:6a:e8:3a:59:b6:4a:cd:98:84:d7:86:
97:ff:82:3f:a3:78:0d:07:47:65:95:67:97:51:41:
a0:35:8c:4e:02:3c:0a:61:8a:54:6b:af:f2:3d:29:
6c:fc:c3:b7:68:c3:6b:95:c2:30:bf:63:18:3a:d0:
3c:61:c8:fc:db:d9:52:f3:68:2d:70:89:7a:fd:d7:
cc:39:b4:71:a8:90:a3:16:68:93:22:68:1b:90:ff:
4c:fb:bb:88:86:f0:61:a1:13:b7:61:31:78:0a:c0:
7d:85:2a:ff:99:ca:2f:f4:47:32:39:a9:9c:57:ce:
7c:fa:ba:89:65:15:3d:65:bf:c1:ac:af:b9:c5:c2:
5e:d5:6d:44:26:2b:f5:d9:b5:57:65:ff:8a:d5:c6:
00:5a:3d:a9:8b:7e:6d:f9:54:dc:06:a8:fc:0f:2a:
33:60:76:32:2c:cc:f5:a3:04:7b:af:42:0a:0d:7a:
5f:77:db:15:d6:c2:14:8d:d1:7a:49:37:00:aa:a0:
c6:5f:01:fc:49:e3:b1:20:a8:99:21:3d:44:6d:52:
71:6d:d9:4a:dc:d3:ff:61:f8:ea:22:9a:1c:bb:55:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:11:3B:1F:03:12:AA:E7:49:58:B6:EC:FD:A0:AA:2B:45:DB:C4:7F
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/BAA31B82334C11F1B39593F0C5833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.246.108.0/22
111.88.0.0/21
111.88.136.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:a7:a9:1b:87:2f:b4:98:11:6e:66:c0:81:6a:37:22:69:ae:
33:7c:3c:6d:28:43:13:49:8c:54:e7:ba:1e:9b:45:66:40:14:
a0:9d:8f:3e:c8:58:8d:c9:b8:81:c0:c0:53:5f:f2:8d:49:26:
68:29:19:b4:f6:20:5d:ea:44:56:01:09:44:76:1a:2a:3b:d6:
29:3c:aa:4f:b7:c7:bb:dc:18:9a:db:c0:c9:55:2e:d6:7e:35:
ce:3d:c8:17:e7:bf:f0:62:81:ba:2a:e7:e8:b7:72:3f:4d:3d:
a5:a1:52:74:5e:0e:21:08:27:25:cc:38:b4:23:bc:f4:84:de:
de:f1:cb:ec:6a:5c:af:e8:7c:3c:c5:9b:4c:f4:13:90:b9:e6:
07:12:2c:24:39:66:ec:1c:c8:e4:f5:c2:63:f4:4b:30:6a:28:
b8:c1:27:b4:a8:d0:70:6d:ce:44:ec:e6:4a:66:2a:7d:a3:d9:
7b:c2:38:82:e6:07:56:55:7c:a1:16:13:32:a3:58:2f:13:59:
b9:91:4a:1b:ca:36:c6:11:c3:84:3f:f3:d2:44:31:1b:4b:19:
71:80:e5:c4:08:6b:75:1f:21:64:ca:1f:bc:8a:59:f4:f5:6b:
32:6e:35:46:af:2c:8a:e3:3c:21:fe:40:7f:1c:73:b2:58:94:
80:dd:fa:f9
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICO2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjYwNDA4MTMxMzI3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ2NTQ3Ny0zNjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtwCZhWrk1E+veMUSUrZ69iYA6xvUG2laEJx7fNWIzS5Qaug6WbZKzZiE14aX
/4I/o3gNB0dllWeXUUGgNYxOAjwKYYpUa6/yPSls/MO3aMNrlcIwv2MYOtA8Ycj8
29lS82gtcIl6/dfMObRxqJCjFmiTImgbkP9M+7uIhvBhoRO3YTF4CsB9hSr/mcov
9EcyOamcV858+rqJZRU9Zb/BrK+5xcJe1W1EJiv12bVXZf+K1cYAWj2pi35t+VTc
Bqj8DyozYHYyLMz1owR7r0IKDXpfd9sV1sIUjdF6STcAqqDGXwH8SeOxIKiZIT1E
bVJxbdlK3NP/YfjqIpocu1UrUwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFAUROx8D
EqrnSVi27P2gqitF28R/MB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvQkFBMzFCODIz
MzRDMTFGMUIzOTU5M0YwQzU4MzM3NzMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQCZ/ZsAwQDb1gAAwQBb1iIMA0GCSqGSIb3DQEBCwUAA4IBAQB7p6kb
hy+0mBFuZsCBajciaa4zfDxtKEMTSYxU57oem0VmQBSgnY8+yFiNybiBwMBTX/KN
SSZoKRm09iBd6kRWAQlEdhoqO9YpPKpPt8e73Bia28DJVS7WfjXOPcgX57/wYoG6
Kufot3I/TT2loVJ0Xg4hCCclzDi0I7z0hN7e8cvsalyv6Hw8xZtM9BOQueYHEiwk
OWbsHMjk9cJj9Eswaii4wSe0qNBwbc5E7OZKZip9o9l7wjiC5gdWVXyhFhMyo1gv
E1m5kUobyjbGEcOEP/PSRDEbSxlxgOXECGt1HyFkyh+8iln09WsybjVGryyK4zwh
/kB/HHOyWJSA3fr5
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:35:30 2026 by rpki-client