
$ rpki-client -vvf rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/216EE802F87A11EDAAE56C0DC4F9AE02.roa
File: 216EE802F87A11EDAAE56C0DC4F9AE02.roa (raw, json)
Hash identifier: irQw+aFcmVSPBIfolj9woj/L2mmaCgcdWKwM8y5LFZY=
Subject key identifier: E3:86:24:75:48:C3:5A:C7:76:75:71:F8:CC:BE:EA:F4:8D:CA:63:BD
Certificate issuer: /CN=A91472E2/serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Certificate serial: 0379
Authority key identifier: C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/216EE802F87A11EDAAE56C0DC4F9AE02.roa
Signing time: Sat 15 Aug 2026 01:49:23 +0000
ROA not before: Sat 15 Aug 2026 01:49:23 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 150137
IP address blocks: 103.90.12.0/24 maxlen: 24
103.90.13.0/24 maxlen: 24
103.191.181.0/24 maxlen: 24
2001:df1:940::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl
rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889 (0x379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91472E2, serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Validity
Not Before: Aug 15 01:49:23 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7fc5a3-34f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:be:02:4b:a9:cf:bb:c6:18:f5:7d:70:45:
ef:75:71:e0:92:a7:76:1e:20:ff:95:14:d2:9a:07:
4a:1f:26:91:af:91:8a:7e:da:aa:60:b2:5e:2f:98:
12:92:3d:23:e6:16:d9:5a:a3:29:83:bb:8d:a7:53:
68:0b:e0:5d:be:81:07:3c:c9:5f:76:9d:1e:8f:53:
f7:c3:f9:f1:28:51:46:91:08:58:fe:bb:78:60:fe:
03:79:e1:ab:c9:5a:e3:24:05:87:1e:a3:c3:c2:ed:
ef:4c:4f:98:7b:5b:56:6d:70:50:9a:2d:e9:b6:6f:
7b:d6:df:ad:2b:ea:1f:b5:be:89:32:a4:49:dd:e0:
4f:85:c5:e5:a5:ce:b5:70:52:22:71:ee:f9:db:cc:
d5:56:31:3b:4c:91:bb:9a:80:66:ec:47:2e:d1:db:
f8:45:4a:d6:c9:67:8a:4b:06:57:fb:fa:92:8e:65:
29:ec:ab:59:49:c5:fa:5c:5a:85:b4:ba:c4:e1:23:
49:b0:3e:db:da:b0:b2:62:9f:39:e8:e6:1d:16:93:
ba:1d:60:8b:48:3e:aa:9d:99:e8:23:f8:e7:5a:1e:
ee:8e:9a:0e:9e:48:45:9c:a1:70:86:7c:0b:97:ce:
15:6a:66:a6:de:7e:e7:bf:c2:31:60:30:2d:43:ca:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:86:24:75:48:C3:5A:C7:76:75:71:F8:CC:BE:EA:F4:8D:CA:63:BD
X509v3 Authority Key Identifier:
keyid:C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/216EE802F87A11EDAAE56C0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.90.12.0/23
103.191.181.0/24
IPv6:
2001:df1:940::/48
Signature Algorithm: sha256WithRSAEncryption
4a:21:1f:ec:72:77:06:b0:98:5d:23:52:80:b6:f4:52:d0:86:
cf:d8:05:38:7d:7d:04:dc:69:d4:b8:08:f2:77:54:06:56:82:
8f:96:62:cb:24:b1:0d:67:25:0a:fa:c9:34:e5:4f:e9:ff:21:
66:be:fc:ff:0a:4a:09:4e:c1:67:b9:c3:19:d7:61:bb:b6:59:
05:2a:f2:5f:6a:8e:f5:20:10:61:de:58:12:63:ca:af:5f:47:
6c:11:79:22:ee:bc:5f:c1:63:db:45:a1:44:97:2f:8e:fe:96:
05:e2:00:96:5d:42:6c:7d:89:6e:32:ca:4d:f4:3d:da:66:eb:
34:4e:2c:f4:6d:b7:90:11:ee:11:a7:83:18:7a:71:da:b7:79:
38:55:67:3b:ff:61:d9:f9:ce:14:8a:f3:ea:a9:23:0b:e7:92:
ae:92:ef:d2:01:97:f1:62:9b:7c:78:be:e1:4e:cc:62:9f:6f:
47:24:60:f4:12:28:ca:96:ca:ac:85:75:2e:de:09:d7:9b:97:
e6:0d:f5:48:45:bd:73:84:87:13:0c:8c:24:f1:2b:b4:49:4b:
02:0f:42:82:b8:eb:00:dd:ec:7d:5c:a4:88:f5:b6:30:3b:4b:
4c:fe:be:68:ed:71:ce:09:d7:21:ed:91:27:14:2f:3c:08:66:
43:eb:2e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:35:14 2026 by rpki-client