
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/385B6DAE577411ECBF021B66C4F9AE02.roa
File: 385B6DAE577411ECBF021B66C4F9AE02.roa (raw, json)
Hash identifier: b2Il84vwzqv/ef+O+Pns3mkcqkG1cdU06P6OcqDISP8=
Subject key identifier: 83:F3:F2:4C:F8:C1:D1:79:2E:89:00:38:78:01:B5:75:89:09:B8:2A
Certificate issuer: /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
Certificate serial: 0537
Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/385B6DAE577411ECBF021B66C4F9AE02.roa
Signing time: Wed 19 Aug 2026 00:47:27 +0000
ROA not before: Wed 19 Aug 2026 00:47:27 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 56311
IP address blocks: 103.168.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl
rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 23:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1335 (0x537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A027, serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
Validity
Not Before: Aug 19 00:47:27 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a84fd1f-cf5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:82:b2:e3:1d:36:0d:89:56:84:29:a8:a3:78:
ac:ed:df:2c:59:82:64:7a:f6:af:78:b9:2b:c0:f4:
ed:3a:fb:07:1c:20:c6:47:be:bd:37:da:03:19:7a:
4b:7c:b4:5f:83:6e:76:25:82:8b:ab:ed:03:3f:2d:
cc:0a:88:34:b8:92:c3:93:ce:34:88:57:92:6f:ce:
e3:61:68:4e:c5:57:ad:58:e7:f9:e0:f7:94:cb:37:
38:23:ab:82:56:ec:e1:9c:6a:6a:51:31:dc:4d:d6:
69:b8:f7:92:9d:ef:a6:d3:42:53:ed:75:56:f6:71:
7d:79:d0:10:ab:d0:3e:29:1a:3e:cb:a0:88:c5:a4:
e4:b0:03:a9:82:ad:bc:7b:e9:86:19:8d:e3:5e:47:
d5:6c:84:ca:77:51:5a:4a:2e:79:ce:a2:68:ab:46:
47:4f:fb:98:4c:c1:01:bf:7c:3e:1c:0b:4e:47:06:
5a:5e:ff:7d:2e:3e:9a:47:0d:e1:c7:f5:81:83:3a:
ba:c6:77:49:4b:6e:21:6a:0e:57:13:0e:c0:0b:0c:
71:65:e9:e7:e0:7d:99:b5:a6:31:0d:c2:c1:01:c3:
fd:8f:2c:8d:7f:b0:32:27:cc:05:52:48:0a:87:43:
bc:37:06:98:71:78:06:e0:9c:29:e2:8c:44:55:44:
91:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F3:F2:4C:F8:C1:D1:79:2E:89:00:38:78:01:B5:75:89:09:B8:2A
X509v3 Authority Key Identifier:
keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/385B6DAE577411ECBF021B66C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.88.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:c3:1c:30:f9:15:1c:4d:02:b8:50:5a:dd:39:fe:de:3e:ff:
55:f7:2e:38:c9:44:ee:2a:fd:c9:33:9b:4d:e1:95:69:fc:31:
81:7f:1c:62:ce:c1:4b:61:84:40:21:5e:8a:fb:15:54:b6:b2:
ff:1c:a9:20:02:d3:bb:61:a1:c4:5c:1a:a9:f2:03:7b:be:a9:
24:4f:f2:25:d2:f0:cc:04:db:f7:ff:2f:64:f3:e7:e5:bc:66:
0c:de:28:a1:79:3f:57:74:4b:e8:51:07:8a:e6:bd:ad:b2:cf:
d1:c0:38:eb:8b:65:96:f8:35:28:dd:e5:66:e0:71:2b:f8:fd:
18:e8:0a:8f:6c:26:82:18:25:51:6f:ea:d1:50:80:8f:fe:a5:
f3:24:36:f0:0e:05:90:92:bb:6d:47:1f:6f:d8:1c:38:75:15:
6e:a1:a4:12:87:d0:18:04:9c:72:7c:ba:95:c7:a2:7d:d3:71:
4b:a2:01:b4:07:ae:dc:38:dd:82:03:af:45:a0:f0:45:7b:a1:
06:91:a6:08:e5:54:76:9b:6f:7c:58:59:0d:01:e1:fa:d1:b2:
33:ea:a8:72:8f:08:64:5c:41:48:2d:09:15:87:09:eb:8e:4f:
08:a1:20:3b:4e:19:38:5a:3f:64:ac:72:c9:63:37:37:dd:79:
6e:f8:92:d3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEwMjcxMTAvBgNVBAUTKDEwMEU3NDkwOTlGQTUzODA1MTc0QkNGODMwQzNFQjIx
QzUzMDMxQTcwHhcNMjYwODE5MDA0NzI3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg0ZmQxZi1jZjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlYKy4x02DYlWhCmoo3is7d8sWYJkevaveLkrwPTtOvsHHCDGR769N9oDGXpL
fLRfg252JYKLq+0DPy3MCog0uJLDk840iFeSb87jYWhOxVetWOf54PeUyzc4I6uC
VuzhnGpqUTHcTdZpuPeSne+m00JT7XVW9nF9edAQq9A+KRo+y6CIxaTksAOpgq28
e+mGGY3jXkfVbITKd1FaSi55zqJoq0ZHT/uYTMEBv3w+HAtORwZaXv99Lj6aRw3h
x/WBgzq6xndJS24hag5XEw7ACwxxZenn4H2ZtaYxDcLBAcP9jyyNf7AyJ8wFUkgK
h0O8NwaYcXgG4Jwp4oxEVUSRZwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIPz8kz4
wdF5LokAOHgBtXWJCbgqMB8GA1UdIwQYMBaAFBAOdJCZ+lOAUXS8+DDD6yHFMDGn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAyNy8wNDIwN0RGODU3
NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0QlJkTHo0TU1QckljVXdN
YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VBNTBrSm42VTRCUmRMejRNTVBySWNVd01hYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkEwMjcvMDQyMDdERjg1NzcwMTFFQ0I5NTc3QTVCQzRGOUFFMDIvMzg1QjZEQUU1
Nzc0MTFFQ0JGMDIxQjY2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6hYMA0GCSqGSIb3DQEBCwUAA4IBAQA+wxww+RUcTQK4UFrdOf7e
Pv9V9y44yUTuKv3JM5tN4ZVp/DGBfxxizsFLYYRAIV6K+xVUtrL/HKkgAtO7YaHE
XBqp8gN7vqkkT/Il0vDMBNv3/y9k8+flvGYM3iiheT9XdEvoUQeK5r2tss/RwDjr
i2WW+DUo3eVm4HEr+P0Y6AqPbCaCGCVRb+rRUICP/qXzJDbwDgWQkrttRx9v2Bw4
dRVuoaQSh9AYBJxyfLqVx6J903FLogG0B67cON2CA69FoPBFe6EGkaYI5VR2m298
WFkNAeH60bIz6qhyjwhkXEFILQkVhwnrjk8IoSA7Thk4Wj9krHLJYzc33Xlu+JLT
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:02:46 2026 by rpki-client