
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/C2ED1EEE617111EBBC678459C4F9AE02.roa
File: C2ED1EEE617111EBBC678459C4F9AE02.roa (raw, json)
Hash identifier: MrF9jFzo1gQmp52DvTXmMON/OH1U7O3zoCb/eA1OYLI=
Subject key identifier: DC:00:E8:8F:FB:3C:AD:0E:46:EE:DD:D8:50:EE:B9:7C:2A:3D:99:DC
Certificate issuer: /CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
Certificate serial: 0E63
Authority key identifier: A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/C2ED1EEE617111EBBC678459C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:37:45 +0000
ROA not before: Sat 26 Jul 2025 18:27:49 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 138172
IP address blocks: 103.116.248.0/24 maxlen: 24
103.116.249.0/24 maxlen: 24
103.116.250.0/24 maxlen: 24
103.116.251.0/24 maxlen: 24
2403:dc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl
rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3683 (0xe63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D1D9, serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
Validity
Not Before: Jul 26 18:27:49 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a42509-8cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:42:61:4b:5b:52:4a:ae:b7:bd:2c:5d:43:07:
07:d0:44:98:6c:a3:c7:6d:68:07:6f:23:0d:50:13:
6e:0d:4f:31:4d:e2:c1:58:02:51:5a:9d:67:47:64:
70:76:7d:7d:05:ea:4f:d5:dc:4e:41:14:a5:19:73:
03:6f:5d:5a:47:40:25:02:39:f0:60:9a:75:e4:e7:
01:c0:4a:f3:2e:d3:a9:07:f6:87:e6:1a:23:83:68:
52:88:1b:07:dd:18:a3:70:00:fe:1a:03:2a:80:69:
4f:57:e5:23:43:d2:dc:8b:45:0f:32:a1:84:4b:0a:
cc:ad:3f:38:c1:24:48:b6:e0:da:29:e7:41:82:37:
d8:1a:17:c8:b3:e4:85:89:69:3c:13:71:57:5c:da:
23:e2:06:14:d1:d1:ec:31:21:65:1f:df:17:1d:88:
dd:a2:96:0c:cf:1b:19:b7:38:4a:9d:d2:2a:05:03:
fc:8f:db:be:0b:38:de:29:5f:04:9a:c3:7f:46:8e:
b3:b0:64:42:8a:c6:8d:e5:f3:d2:7d:14:65:81:0f:
11:c7:7d:3e:ba:d8:f2:d1:bd:5f:5d:bf:1e:78:4c:
ee:a7:b6:34:85:1c:97:74:fa:75:84:97:81:17:64:
42:7d:9b:bf:44:1e:d3:e0:5b:1d:71:b0:60:f0:de:
fd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:00:E8:8F:FB:3C:AD:0E:46:EE:DD:D8:50:EE:B9:7C:2A:3D:99:DC
X509v3 Authority Key Identifier:
keyid:A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/C2ED1EEE617111EBBC678459C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.116.248.0/22
IPv6:
2403:dc0::/32
Signature Algorithm: sha256WithRSAEncryption
82:9f:c6:8e:19:1c:0c:5c:6f:d2:96:68:58:bc:b5:33:68:e4:
3b:34:1a:0b:aa:06:f8:d1:e0:58:56:86:28:f2:0b:1e:b2:4e:
cd:8f:e8:70:cd:e2:f2:3d:35:d6:df:48:ef:af:55:9a:86:98:
5d:fc:94:b6:02:d8:fa:11:90:c0:32:7f:59:b2:e9:7b:cb:a6:
c9:39:5a:b8:82:90:4f:ec:44:c0:72:0b:2c:3a:8f:35:af:4a:
6d:fd:40:00:6e:cc:50:0f:53:c8:16:62:6c:2e:58:5f:53:b4:
13:76:28:4c:7d:b8:64:a2:5a:2d:dd:51:02:09:e3:e6:04:9f:
a4:b0:13:ad:97:6a:14:e0:06:9f:eb:15:8d:a4:aa:5d:e6:a8:
3f:73:47:4d:d3:c3:c9:8b:2f:f1:4b:ab:dd:f5:d4:ae:c4:95:
c6:5c:b3:42:28:f9:56:b2:b7:7f:35:95:68:3f:f4:13:0d:f6:
d2:59:aa:97:38:a6:fa:be:aa:b0:8c:90:bc:20:8c:e6:ab:23:
1a:5c:3e:c2:fd:a8:8e:eb:a1:bf:f4:61:d8:09:20:0e:df:a8:
e2:33:7e:d6:83:15:10:a3:c5:83:73:67:24:b2:d4:22:b4:fe:
6e:d0:f4:2e:61:eb:8c:de:e4:5b:4a:e2:96:86:79:a1:d5:5e:
e6:e1:93:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:35 2026 by rpki-client