
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916AF56/D38CC962BAD911F1B87B60C15211F970/E72F947EBADC11F1A099C55E5311F970.roa
File: E72F947EBADC11F1A099C55E5311F970.roa (raw, json)
Hash identifier: MZFUmgynH7Qi3nDed0uz5cTNYOmlDVcLBrr9eW+aYzU=
Subject key identifier: C6:F3:9E:B5:82:1A:72:92:E7:34:A3:94:5C:5A:58:77:76:D6:26:30
Certificate issuer: /CN=A916AF56/serialNumber=94612704043FDC4FA1EB13CE6B2611CBD7AFBAEB
Certificate serial: 04
Authority key identifier: 94:61:27:04:04:3F:DC:4F:A1:EB:13:CE:6B:26:11:CB:D7:AF:BA:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGEnBAQ_3E-h6xPOayYRy9evuus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AF56/D38CC962BAD911F1B87B60C15211F970/E72F947EBADC11F1A099C55E5311F970.roa
Signing time: Mon 28 Sep 2026 01:35:36 +0000
ROA not before: Mon 28 Sep 2026 01:35:36 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 16509
IP address blocks: 103.122.120.0/24 maxlen: 24
103.221.84.0/23 maxlen: 24
2001:df4:b600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AF56/D38CC962BAD911F1B87B60C15211F970/lGEnBAQ_3E-h6xPOayYRy9evuus.crl
rsync://rpki.apnic.net/member_repository/A916AF56/D38CC962BAD911F1B87B60C15211F970/lGEnBAQ_3E-h6xPOayYRy9evuus.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGEnBAQ_3E-h6xPOayYRy9evuus.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 09:52:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AF56, serialNumber=94612704043FDC4FA1EB13CE6B2611CBD7AFBAEB
Validity
Not Before: Sep 28 01:35:36 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6ab9c468-b14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:86:28:e6:aa:4e:35:4f:b0:88:e8:67:f6:
b2:d8:28:65:0c:c3:24:3e:f4:9d:f1:59:8d:bc:4e:
30:c0:27:ff:50:1e:59:89:ba:c8:f8:73:16:6a:bb:
cc:00:ff:d7:07:b8:1d:b3:ed:3e:00:62:9d:fb:38:
4f:5b:3d:58:a3:4c:71:72:cd:b0:67:6e:46:e7:35:
3a:54:49:3a:f4:c4:2e:a0:fe:94:d3:b4:9d:d7:47:
7c:1c:99:48:18:dc:fa:db:34:93:39:3d:d3:6a:c5:
e1:12:2e:88:78:d4:45:16:41:87:58:62:01:5e:0f:
10:e3:9d:a4:0b:3b:af:75:88:da:59:d5:0c:fb:fc:
50:06:41:55:dc:67:1e:b5:b2:2d:f7:c1:17:31:8e:
67:52:ca:44:67:78:e9:32:4c:c9:f0:ec:b8:19:6b:
a7:fa:0b:c5:86:04:f3:a8:8a:a2:54:7e:cd:e9:a9:
c0:98:3e:9d:6b:13:9e:0d:47:d7:7a:c9:54:57:ae:
85:2c:50:e3:94:b2:bd:b2:c8:24:8c:a4:fa:50:e0:
a2:fc:57:38:24:97:3e:f9:0b:5c:29:00:c3:ed:3b:
68:da:29:85:fd:1f:eb:26:f3:1d:ce:fe:ea:bd:5c:
3e:da:23:ce:94:d5:a4:76:c8:b7:bd:ad:43:fe:fa:
2b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F3:9E:B5:82:1A:72:92:E7:34:A3:94:5C:5A:58:77:76:D6:26:30
X509v3 Authority Key Identifier:
keyid:94:61:27:04:04:3F:DC:4F:A1:EB:13:CE:6B:26:11:CB:D7:AF:BA:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AF56/D38CC962BAD911F1B87B60C15211F970/lGEnBAQ_3E-h6xPOayYRy9evuus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGEnBAQ_3E-h6xPOayYRy9evuus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AF56/D38CC962BAD911F1B87B60C15211F970/E72F947EBADC11F1A099C55E5311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.122.120.0/24
103.221.84.0/23
IPv6:
2001:df4:b600::/48
Signature Algorithm: sha256WithRSAEncryption
99:5f:f6:6b:71:b1:89:c8:bd:3d:00:4a:6d:5b:54:ae:17:46:
d5:ef:bb:5a:fc:86:65:7e:d3:c2:09:e1:c2:d8:c6:9b:e0:a6:
06:c9:20:6a:4b:4a:6e:2a:f9:f9:12:1a:ca:b6:0e:4a:b8:27:
45:a3:72:a4:0e:a1:2d:93:54:9e:e5:20:15:c4:01:b2:85:44:
d4:3a:51:ac:16:b2:05:98:f1:85:a5:c5:8e:9c:7e:c2:ec:ab:
4c:64:3a:f5:94:6f:b8:21:23:6f:7d:06:65:7e:ff:ba:58:32:
1a:23:b7:f7:f0:22:3c:b6:ca:95:3b:19:1f:3e:96:3f:a9:fb:
c0:b6:11:b9:ad:76:10:7e:9b:91:a0:fa:13:dc:64:71:ab:5d:
67:93:ca:99:4c:e8:57:0b:34:ef:ef:fc:4b:ac:b1:27:cd:70:
2b:e3:56:39:8b:66:a3:87:db:3b:aa:3c:2c:2a:9d:96:3a:59:
fe:a9:1b:ad:43:58:97:11:48:5b:13:54:90:f9:14:49:24:83:
f0:e0:fa:3e:14:2e:a8:4c:2a:5c:7c:76:22:c2:78:95:24:f4:
cd:f2:6f:76:8e:77:2f:bb:0a:ef:74:40:92:f6:24:75:89:cd:
6c:82:7f:86:cd:6b:21:14:61:e4:a3:bf:9e:61:44:16:f7:70:
1b:c5:7e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:24:26 2026 by rpki-client