
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/316ABBEA854611F0AF075D70C4F9AE02.roa
File: 316ABBEA854611F0AF075D70C4F9AE02.roa (raw, json)
Hash identifier: 5K9Nb9oqanLKhMwsnvMrdGufTZkwndyIvoG3/XPKP8U=
Subject key identifier: B9:DF:8F:6F:7F:06:D6:AD:31:C3:F3:C2:54:8B:7A:5C:B7:08:27:1A
Certificate issuer: /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79
Certificate serial: 065D
Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/316ABBEA854611F0AF075D70C4F9AE02.roa
Signing time: Wed 26 Aug 2026 22:45:04 +0000
ROA not before: Wed 26 Aug 2026 22:45:04 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 138910
IP address blocks: 103.167.254.0/24 maxlen: 24
103.167.255.0/24 maxlen: 24
2401:e420::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl
rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 22:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1629 (0x65d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91216AC, serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79
Validity
Not Before: Aug 26 22:45:04 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a8f6c70-8a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:46:9b:71:96:0c:4b:1b:4b:4f:fc:37:a6:
0d:93:13:a8:56:06:04:83:2d:6f:03:7e:99:98:9c:
82:a3:d4:be:82:5d:e8:ca:38:6e:5d:3d:fe:97:ca:
e4:02:09:2f:31:fb:ad:b1:76:f9:8e:31:e5:85:a3:
41:1d:45:00:53:7a:9d:37:52:5e:e0:54:ca:9e:ce:
d2:a0:83:1c:6c:c9:23:ba:05:c1:b3:3e:c4:03:ee:
ee:9c:8e:6d:39:96:3d:b9:99:86:fe:5b:e5:31:e6:
5f:05:e0:a2:17:5f:50:54:f2:35:8d:dd:df:63:58:
ea:5d:65:56:83:58:79:24:6b:6f:d4:90:e4:42:64:
e8:d8:81:ba:70:a4:e4:07:5d:71:72:49:31:39:62:
7a:fa:4a:cc:f6:ea:28:58:59:8b:b6:2f:df:bd:d3:
a4:4f:5b:e4:93:ca:73:42:ca:46:3d:6c:0c:d9:2a:
81:b3:29:dd:60:49:97:61:74:5e:e9:6a:d1:bc:45:
f8:99:97:ba:ad:94:83:fa:a4:a3:82:57:64:3b:29:
ff:ad:7d:ec:ad:e0:17:3f:14:f7:24:bc:a9:b1:9b:
69:1b:39:d3:76:4f:89:c2:a0:69:84:ed:73:f4:06:
d2:b9:a8:cc:6f:5e:47:23:6c:61:8c:28:04:42:69:
13:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DF:8F:6F:7F:06:D6:AD:31:C3:F3:C2:54:8B:7A:5C:B7:08:27:1A
X509v3 Authority Key Identifier:
keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/316ABBEA854611F0AF075D70C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.254.0/23
IPv6:
2401:e420::/32
Signature Algorithm: sha256WithRSAEncryption
67:35:bd:e5:83:ff:b3:b0:fe:07:5c:64:f9:a8:77:d6:50:58:
e3:8e:71:c0:72:6f:68:1b:09:62:9b:2c:6b:03:59:68:47:e8:
2b:fa:8b:77:d4:4e:8a:62:72:f3:59:0f:32:ec:89:43:1c:43:
64:31:8e:a8:83:c1:97:35:c0:d5:28:3d:8f:38:b9:84:f4:8a:
a0:5e:e6:05:6d:18:35:1f:05:42:ed:58:82:de:50:ac:d7:58:
6e:d9:da:c6:76:d3:f3:5a:15:62:f7:be:fc:64:e4:80:7a:d6:
c8:ef:8b:2b:a6:42:ce:0b:c4:a6:c6:a9:1e:75:31:8e:df:f3:
fd:86:21:69:ac:4f:32:c1:73:16:1d:40:5d:c3:89:79:6d:c6:
ce:47:cf:1d:e3:ef:53:00:b5:a6:6b:6f:01:5f:94:03:f0:e2:
05:23:32:97:dd:da:34:a9:1e:60:6c:1d:bf:b2:f7:88:96:16:
b9:8f:1f:ea:3d:b4:3b:1d:9e:1b:77:f1:c1:c7:b2:ff:57:de:
11:11:3b:dc:59:6e:07:5f:1f:b6:bf:4e:bd:c7:ee:58:6e:e3:
75:13:14:19:8d:03:30:f2:27:d4:e2:4d:0e:ca:53:3c:2f:a8:
b1:eb:1b:38:3d:b9:a3:bd:b6:c8:09:05:20:52:49:ac:23:86:
2c:e7:ad:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:04:41 2026 by rpki-client