
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/026A84FC4C3211ECB9639932C4F9AE02.roa
File: 026A84FC4C3211ECB9639932C4F9AE02.roa (raw, json)
Hash identifier: jS334U9iP0LsvG7IMQzbvCDhrmoJkxnr7mSzJK0aIOw=
Subject key identifier: F6:C4:E2:DA:97:1A:F6:B6:F2:2D:B3:A6:FB:83:F2:41:61:53:20:F1
Certificate issuer: /CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF
Certificate serial: 076A
Authority key identifier: 9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/026A84FC4C3211ECB9639932C4F9AE02.roa
Signing time: Wed 10 Sep 2025 09:37:23 +0000
ROA not before: Wed 10 Sep 2025 09:37:23 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 141458
IP address blocks: 103.160.16.0/24 maxlen: 24
103.160.17.0/24 maxlen: 24
2001:df2:7c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl
rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1898 (0x76a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DD44, serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF
Validity
Not Before: Sep 10 09:37:23 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=68c146d3-a2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:9e:c3:bb:09:1d:11:f8:c8:9d:34:39:6e:
d0:6a:28:d2:0a:d5:03:ba:70:73:22:69:38:c6:ba:
52:05:ca:3e:44:f0:68:ce:cc:88:33:99:3c:b9:f1:
85:6a:6a:4b:aa:88:ab:ee:dd:ef:61:94:01:07:35:
32:4a:7e:25:13:56:0a:bd:7c:15:c6:06:b8:bd:fa:
9d:ff:81:9b:28:85:b3:ba:78:e7:94:27:a8:f4:ee:
07:90:2c:04:25:fa:3c:20:83:b7:85:ba:ca:97:e2:
83:09:9c:bc:45:4a:de:a8:e2:1f:34:bd:ca:3d:a6:
3a:38:cf:07:2f:d4:8a:07:b3:61:eb:13:22:40:48:
4e:f4:1f:cb:79:8b:48:8f:52:d2:9c:d0:ce:b4:db:
d7:91:de:d7:7b:19:29:0e:fd:8e:ff:a5:d2:d9:27:
36:da:3e:55:b9:83:f1:35:4e:1a:b0:f3:79:19:68:
91:c8:e1:fc:03:c3:6c:60:2e:92:f1:1f:73:93:93:
88:69:1b:c1:df:58:d6:76:bd:f3:b5:7c:43:db:6e:
62:80:8d:ac:72:6c:4d:b6:d7:b4:f8:8c:9f:e6:53:
41:ad:00:8e:46:4f:2e:d4:79:6b:2b:5e:e6:b4:a0:
4e:0f:a1:c5:a5:c0:89:71:3f:ba:09:04:76:e5:71:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C4:E2:DA:97:1A:F6:B6:F2:2D:B3:A6:FB:83:F2:41:61:53:20:F1
X509v3 Authority Key Identifier:
keyid:9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/026A84FC4C3211ECB9639932C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.16.0/23
IPv6:
2001:df2:7c0::/48
Signature Algorithm: sha256WithRSAEncryption
9c:19:3c:b0:fe:71:19:01:0f:af:f7:b1:c6:2a:02:fb:10:c1:
4f:54:0e:49:ae:6e:19:3f:47:43:21:8a:75:61:49:a7:9f:c6:
8f:05:44:aa:f1:72:20:df:62:b0:fd:bd:0a:64:bd:dd:d8:8d:
d0:45:6b:99:9f:8b:a7:80:fb:7d:7e:b6:e2:b3:35:55:f2:96:
d8:80:3e:de:79:df:f9:af:ab:a9:fa:68:2f:42:f9:b1:22:86:
45:f8:b4:70:ca:e2:4f:2d:45:d6:9f:c5:c4:82:1f:56:a1:d0:
72:90:64:1a:cc:c4:4b:93:ea:5c:b6:e8:61:45:de:f8:f7:4e:
59:64:12:93:6b:94:17:29:94:61:68:b9:0e:f8:8d:97:2c:c4:
9e:b1:c7:f7:49:76:c3:e7:66:a3:88:ab:d7:54:1b:18:a1:ff:
0e:e9:9a:94:94:ea:7f:a6:71:58:ec:20:43:12:f1:1c:b8:ac:
7f:51:53:99:ed:0b:b9:2d:45:53:53:4b:ba:fa:01:94:63:a2:
71:ec:e6:07:f0:2b:99:6d:75:3f:8d:7c:bf:5c:cb:00:ed:73:
ea:c7:23:1f:56:4e:69:66:47:9a:ee:01:20:84:e8:36:a0:24:
16:ff:a4:7e:a8:3d:9d:b8:6d:3c:81:b4:d7:6f:90:60:10:27:
65:73:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:35:07 2025 by rpki-client