
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/89317668E87B11E785247983C4F9AE02.roa
File: 89317668E87B11E785247983C4F9AE02.roa (raw, json)
Hash identifier: WoT/UgFr2xPvfCqBZ9PJ+h1sxdlnvxIa74Oqq+fRyVY=
Subject key identifier: B8:F7:37:8C:C4:AE:F7:B9:9B:DC:F6:0F:8C:14:09:57:30:96:8E:FF
Certificate issuer: /CN=A916E64F/serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9
Certificate serial: 17A4
Authority key identifier: 86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/89317668E87B11E785247983C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:44:11 +0000
ROA not before: Fri 24 Oct 2025 17:05:03 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 133738
IP address blocks: 103.103.100.0/22 maxlen: 24
2401:f140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl
rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6052 (0x17a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E64F, serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9
Validity
Not Before: Oct 24 17:05:03 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a442ab-9410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:e8:03:ff:aa:ca:6a:0e:99:27:e8:ba:92:
05:dc:9d:eb:1c:cd:30:d1:2c:d3:cc:c1:a9:44:db:
ff:09:16:91:6c:03:06:fe:c7:74:c7:7f:cc:b8:e9:
cb:49:3d:83:9f:06:0b:19:44:37:4a:49:2e:e8:01:
5e:47:47:f0:da:62:94:00:5e:ce:31:dc:be:12:4f:
8a:98:b7:ec:28:87:b5:18:50:42:68:92:c9:83:1d:
fa:c5:4c:a3:95:e4:3d:36:73:a3:2b:20:b3:9e:32:
e5:9b:11:61:46:03:09:7f:32:1c:19:6f:0b:67:45:
c9:46:be:c2:e5:8f:0f:4f:25:0b:3c:f1:c5:a1:0e:
2f:44:23:67:50:11:dc:5e:73:84:0f:d6:9e:27:c5:
71:be:8d:e8:a3:f7:ce:21:17:43:21:45:b3:b0:1f:
ba:06:19:8c:7c:f8:df:fb:b8:27:1a:95:87:77:b9:
e8:b1:c5:5f:0f:3e:db:26:ce:e2:6e:63:d8:25:db:
f6:5c:c6:b7:77:fa:98:ed:d5:a5:f2:ed:af:b0:38:
07:6b:ee:72:f9:f8:ed:bd:78:d7:1d:12:58:41:9e:
bc:58:b7:d1:8a:95:b5:49:f0:e9:fa:9a:15:f3:07:
eb:4f:74:ca:06:50:a5:5d:ff:12:b1:db:d1:9f:ea:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F7:37:8C:C4:AE:F7:B9:9B:DC:F6:0F:8C:14:09:57:30:96:8E:FF
X509v3 Authority Key Identifier:
keyid:86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/89317668E87B11E785247983C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.103.100.0/22
IPv6:
2401:f140::/32
Signature Algorithm: sha256WithRSAEncryption
57:a3:81:e1:39:2b:a1:49:31:42:69:27:77:e6:e2:e9:bd:5f:
1e:d3:64:85:57:0b:76:9a:73:94:16:d2:27:6e:3d:00:50:2c:
d0:c6:b4:6f:dc:d5:77:bd:39:fc:93:41:be:6b:08:32:cc:11:
57:a0:98:1b:e7:de:de:a2:83:7c:52:27:7d:24:f6:62:cc:72:
8f:64:fb:3f:44:62:29:80:f5:19:eb:02:72:e6:4f:15:05:5e:
a0:94:4b:ec:8b:d6:fa:77:fe:07:76:e0:c8:4c:99:39:95:c6:
af:49:ad:37:93:24:d0:e5:a9:17:96:b9:b4:b2:f9:02:ca:1e:
20:79:d2:04:50:0b:36:2d:85:ae:5e:5c:9e:b1:4d:16:a1:90:
85:7b:30:1b:ec:0d:9b:4e:f1:1e:c7:1b:5a:9a:70:26:ed:8b:
8e:21:6b:e4:e7:dd:82:d2:69:4e:02:88:f4:16:4d:a2:20:5a:
1e:e1:0f:da:fd:47:4e:93:b1:6d:74:72:b2:d4:c3:dc:c4:ea:
23:10:5f:f2:35:d6:b7:c9:32:8e:fb:b4:d6:16:65:73:12:dd:
3c:b6:84:ce:4c:30:c8:87:fd:4b:05:3e:27:dd:24:fb:22:ed:
c9:3c:29:73:0e:ce:33:78:c9:40:19:74:82:eb:ad:be:92:9d:
26:24:ac:c4
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICF6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkU2NEYxMTAvBgNVBAUTKDg2OEZDOEIxODdCREZEMzBBNzBCNTAyRjZEMTQ5RTY3
ODY5MjUzQjkwHhcNMjUxMDI0MTcwNTAzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDJhYi05NDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo/boA/+qymoOmSfoupIF3J3rHM0w0SzTzMGpRNv/CRaRbAMG/sd0x3/MuOnL
ST2DnwYLGUQ3Skku6AFeR0fw2mKUAF7OMdy+Ek+KmLfsKIe1GFBCaJLJgx36xUyj
leQ9NnOjKyCznjLlmxFhRgMJfzIcGW8LZ0XJRr7C5Y8PTyULPPHFoQ4vRCNnUBHc
XnOED9aeJ8Vxvo3oo/fOIRdDIUWzsB+6BhmMfPjf+7gnGpWHd7noscVfDz7bJs7i
bmPYJdv2XMa3d/qY7dWl8u2vsDgHa+5y+fjtvXjXHRJYQZ68WLfRipW1SfDp+poV
8wfrT3TKBlClXf8SsdvRn+p6BwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFLj3N4zE
rve5m9z2D4wUCVcwlo7/MB8GA1UdIwQYMBaAFIaPyLGHvf0wpwtQL20UnmeGklO5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTY0Ri9ERDVDMTU4MkU4
N0ExMUU3OEY1MTcwODNDNEY5QUUwMi9ob19Jc1llOV9UQ25DMUF2YlJTZVo0YVNV
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hvX0lzWWU5X1RDbkMxQXZiUlNlWjRhU1U3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkU2NEYvREQ1QzE1ODJFODdBMTFFNzhGNTE3MDgzQzRGOUFFMDIvODkzMTc2NjhF
ODdCMTFFNzg1MjQ3OTgzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ2dkMA0EAgACMAcDBQAkAfFAMA0GCSqGSIb3DQEBCwUAA4IBAQBX
o4HhOSuhSTFCaSd35uLpvV8e02SFVwt2mnOUFtInbj0AUCzQxrRv3NV3vTn8k0G+
awgyzBFXoJgb597eooN8Uid9JPZizHKPZPs/RGIpgPUZ6wJy5k8VBV6glEvsi9b6
d/4HduDITJk5lcavSa03kyTQ5akXlrm0svkCyh4gedIEUAs2LYWuXlyesU0WoZCF
ezAb7A2bTvEexxtamnAm7YuOIWvk592C0mlOAoj0Fk2iIFoe4Q/a/UdOk7FtdHKy
1MPcxOojEF/yNda3yTKO+7TWFmVzEt08toTOTDDIh/1LBT4n3ST7Iu3JPClzDs4z
eMlAGXSC662+kp0mJKzE
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:35 2026 by rpki-client