
$ rpki-client -vvf rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/82E0EA4AA98F11F0BFFFD266C4F9AE02.roa
File: 82E0EA4AA98F11F0BFFFD266C4F9AE02.roa (raw, json)
Hash identifier: qjD+AvVZTqHSpgLCl130QsUr3ubfqD9niD4t6/RFWng=
Subject key identifier: 75:D4:D4:81:93:DA:2F:57:27:77:51:9E:A5:B5:15:D6:6A:CE:3C:22
Certificate issuer: /CN=A911793C/serialNumber=0B1A29725FBA8A2CDD54F25657E587478EBFBBAF
Certificate serial: 8F
Authority key identifier: 0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/82E0EA4AA98F11F0BFFFD266C4F9AE02.roa
Signing time: Wed 17 Jun 2026 04:04:48 +0000
ROA not before: Wed 17 Jun 2026 04:04:48 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 23664
IP address blocks: 103.208.208.0/22 maxlen: 22
103.208.208.0/24 maxlen: 24
103.208.209.0/24 maxlen: 24
103.208.210.0/24 maxlen: 24
103.208.211.0/24 maxlen: 24
137.59.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.crl
rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 09:11:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911793C, serialNumber=0B1A29725FBA8A2CDD54F25657E587478EBFBBAF
Validity
Not Before: Jun 17 04:04:48 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a321cdf-54a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:53:65:75:41:ca:28:74:d4:ef:98:9e:eb:
7d:90:43:2b:25:3d:44:62:9f:19:26:21:29:b4:df:
0b:f6:58:55:b3:a0:52:14:59:59:8d:3f:d7:81:3a:
3e:ee:f6:91:e9:19:e0:1f:9e:34:29:74:b9:0c:d0:
0c:35:f4:e1:19:35:0a:a9:c4:69:d0:af:c0:8d:0b:
58:28:0a:8f:11:3b:72:c2:a7:d3:c7:61:27:89:a5:
57:ad:62:00:43:fb:f1:98:8a:0c:7b:24:40:93:a8:
ce:8f:cb:1e:a5:51:2e:8c:e6:ff:4f:79:c0:47:be:
8b:de:97:d1:e6:45:5b:8b:b7:8c:bd:3f:e7:d2:d7:
9a:20:54:0d:d1:ec:09:e6:23:f7:01:ae:35:5c:84:
ce:9f:5b:54:20:68:35:ea:6d:82:81:d2:30:c4:9d:
35:79:39:6d:08:ce:e2:29:3c:10:55:2d:4b:70:b0:
f7:29:17:ca:ac:20:a3:14:e2:b6:4c:ca:62:20:23:
c4:bf:02:82:6f:d6:9d:61:76:44:19:0d:41:b5:50:
71:75:b1:38:ea:a1:a7:f8:27:6a:78:fd:25:fe:4f:
8b:58:c3:8a:ad:05:ab:0f:46:a5:70:e0:a1:c7:6c:
f4:69:45:03:56:ff:89:94:f2:8c:38:83:93:5c:3a:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D4:D4:81:93:DA:2F:57:27:77:51:9E:A5:B5:15:D6:6A:CE:3C:22
X509v3 Authority Key Identifier:
keyid:0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/82E0EA4AA98F11F0BFFFD266C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.208.208.0/22
137.59.245.0/24
Signature Algorithm: sha256WithRSAEncryption
00:20:01:3d:0f:43:ea:09:d0:82:ae:fb:6e:47:a8:3b:9e:65:
0c:4a:1b:38:97:e7:06:ba:23:29:79:a5:ac:55:16:c7:ac:a7:
22:87:e2:71:88:e1:a9:b6:99:15:40:fe:cd:52:8a:1c:6c:68:
e7:d1:3d:62:6a:ef:90:42:91:48:eb:e5:37:7e:da:06:a8:c5:
74:3d:2a:bc:5b:37:bd:59:46:03:0f:3e:98:fd:17:cc:1d:f7:
05:cb:03:8f:0d:71:5b:e0:46:9a:0f:67:5e:a7:4b:0d:3c:2f:
1e:ce:48:c0:1a:07:36:2a:81:84:6c:e9:ed:58:a9:81:89:5e:
6d:07:e2:49:3b:2f:79:33:ed:16:3a:06:04:b0:89:c2:18:41:
17:9b:5a:6b:3c:03:0c:4b:29:12:3a:77:73:a1:6f:59:26:b0:
8f:ac:d6:a0:4c:d2:4e:dd:d0:00:23:6a:83:4a:80:8e:1e:3c:
c0:c9:d9:0b:6f:0b:f4:53:ff:4c:77:a9:8e:14:93:35:13:9b:
36:a3:9c:8b:6f:0e:ca:32:cb:7a:4b:f6:aa:dc:fc:f6:52:eb:
cf:cc:05:cd:b0:c8:7f:36:0a:cf:19:42:54:97:ef:ef:44:6b:
93:95:fe:91:c5:d6:71:b9:27:94:0f:74:92:13:87:14:c9:20:
43:8e:3b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:12:49 2026 by rpki-client