
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6AF5AEC0CFEB11F0A1299838C4F9AE02.roa
File: 6AF5AEC0CFEB11F0A1299838C4F9AE02.roa (raw, json)
Hash identifier: K305m9uOZTuOTkPiVHWrrTbPAlJ8kkqXBF99r+NCmzY=
Subject key identifier: 83:B3:35:12:43:A8:06:C8:29:4C:1D:CC:73:61:C4:89:C5:CE:11:DE
Certificate issuer: /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial: 19D9
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6AF5AEC0CFEB11F0A1299838C4F9AE02.roa
Signing time: Thu 30 Jul 2026 17:29:25 +0000
ROA not before: Thu 30 Jul 2026 17:29:25 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 26337
IP address blocks: 110.173.128.0/19 maxlen: 24
111.118.160.0/20 maxlen: 24
116.90.0.0/18 maxlen: 24
182.160.128.0/18 maxlen: 24
203.19.59.0/24 maxlen: 24
203.98.73.0/24 maxlen: 24
203.98.75.0/24 maxlen: 24
203.98.80.0/24 maxlen: 24
203.98.84.0/24 maxlen: 24
203.98.91.0/24 maxlen: 24
203.123.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Aug 2026 16:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6617 (0x19d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Validity
Not Before: Jul 30 17:29:25 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6b89f5-6511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:af:e9:e5:9e:36:63:a5:80:12:0f:5d:b5:
fc:35:7d:14:f1:d6:ec:50:2d:29:ef:15:12:17:54:
12:cb:0f:17:8b:98:01:03:8d:12:a8:4a:61:a7:03:
bc:b9:1d:d4:b5:cf:9e:09:81:1d:5a:cf:f2:08:e2:
39:20:a4:06:fd:84:84:db:d7:96:56:ef:e3:3f:e7:
52:a5:ff:9c:9f:c7:06:96:17:ab:01:09:a7:d3:3b:
ba:bf:31:af:ed:cb:d1:57:f8:f2:5f:3a:43:f2:b7:
b8:e5:44:de:f9:e4:ee:b3:96:5c:04:a4:c2:27:b1:
5a:c2:a8:cf:94:9c:70:20:32:3f:ae:d2:32:0b:79:
70:f4:af:9e:87:09:de:4c:ce:59:64:b2:d5:37:9c:
ed:b9:88:93:11:4d:d1:4d:79:24:db:ee:e3:75:70:
87:87:a1:6e:78:bf:d5:dc:82:63:b9:ad:e4:fa:14:
ca:d4:93:25:91:2c:48:a9:72:78:a2:db:d0:eb:06:
c1:cf:2a:63:d4:d0:ff:e0:1e:12:2b:5d:f0:f2:f6:
a2:dc:c7:8e:55:f1:00:5a:2f:f5:90:59:b2:19:d7:
12:7d:13:8f:33:9d:5b:47:36:d2:ea:4e:a5:f4:d2:
97:23:19:87:2a:91:80:6e:00:3a:45:b9:37:af:43:
eb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B3:35:12:43:A8:06:C8:29:4C:1D:CC:73:61:C4:89:C5:CE:11:DE
X509v3 Authority Key Identifier:
keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6AF5AEC0CFEB11F0A1299838C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
110.173.128.0/19
111.118.160.0/20
116.90.0.0/18
182.160.128.0/18
203.19.59.0/24
203.98.73.0/24
203.98.75.0/24
203.98.80.0/24
203.98.84.0/24
203.98.91.0/24
203.123.59.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:fc:28:0c:01:2c:68:79:df:57:4e:65:03:89:84:78:d6:28:
07:ed:01:76:36:ad:63:7c:29:cf:fc:9a:27:09:ad:87:4c:74:
b1:0a:3d:14:2c:bb:a1:94:ea:19:3d:0e:db:47:42:05:2f:96:
f2:95:3b:d8:fa:39:b6:e9:0b:d1:74:d5:8a:d9:b7:9c:d3:be:
10:92:d9:a8:44:49:c0:a8:2d:2d:5a:82:9e:0f:93:db:f9:8e:
95:69:e8:8e:45:9a:e5:4b:64:7b:f8:8e:fd:37:c5:71:40:98:
2d:2d:13:0d:55:f1:03:c2:8d:ff:2b:3b:b3:0e:df:c2:5b:59:
72:db:39:4b:f9:72:f6:a3:4e:52:b6:e9:53:a9:0f:88:88:14:
88:b3:23:85:cb:b0:7c:7d:49:1d:42:fb:63:54:4b:4d:9f:f6:
3a:1b:38:5e:70:92:b8:4e:ac:07:4e:35:a4:9e:8b:ca:99:89:
c0:3f:c7:ee:dc:99:f6:8e:6e:bb:74:f5:ca:5f:89:06:77:c3:
2a:0b:67:50:26:e4:68:cb:f9:93:48:72:f7:cd:e8:06:63:0e:
04:40:3e:a5:f8:da:10:ff:c5:ac:97:99:69:18:ed:d8:80:cd:
e2:19:d2:19:35:06:aa:b5:67:c4:b7:d9:e8:7e:16:28:2b:51:
97:43:31:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:12:35 2026 by rpki-client