
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B5629336843011EAB4270B83C4F9AE02.roa
File: B5629336843011EAB4270B83C4F9AE02.roa (raw, json)
Hash identifier: 0kNnzdVeh0Sh6Uho6EuziJV6g8jYacMqFFcOgtfoNRU=
Subject key identifier: 54:D8:10:EF:49:C4:6C:81:F5:85:9C:CB:14:0D:90:B1:F6:64:32:75
Certificate issuer: /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial: 1944
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B5629336843011EAB4270B83C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:32:42 +0000
ROA not before: Wed 30 Jul 2025 16:55:22 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 10145
IP address blocks: 203.98.69.0/24 maxlen: 24
203.98.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 16:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6468 (0x1944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Validity
Not Before: Jul 30 16:55:22 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a5917a-48a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:1e:58:96:39:29:34:9d:eb:68:ed:b0:fd:
f9:76:81:bc:79:01:f4:6e:19:12:dc:dc:d7:5b:63:
3c:cd:2b:1f:26:dd:5d:ef:bf:d5:f3:26:7d:cc:65:
de:60:d5:26:9f:8e:d0:db:5e:c2:b8:96:d4:89:70:
7f:ff:95:5e:e9:4f:18:b2:a0:8c:ca:cb:7d:19:68:
2c:42:df:c3:d8:d9:8c:ef:63:15:f9:54:d5:99:9b:
fd:4b:dd:af:e2:30:76:38:40:a6:9b:48:50:e4:28:
15:a5:02:8c:ea:4b:72:90:f2:5e:ec:f0:4c:95:d2:
6c:e1:75:f5:75:85:52:99:d1:8b:05:4a:11:ad:b6:
2f:ef:f9:c2:78:83:1c:d5:39:6c:03:8f:94:a8:e9:
ff:c5:ad:45:73:44:54:eb:43:3c:cd:b8:e6:1c:80:
09:0b:92:54:38:16:bd:48:0b:7b:00:d1:1e:04:b5:
25:8c:ec:76:03:1a:20:53:cc:6d:6c:dd:87:78:b8:
11:06:dd:0e:c7:0f:12:b6:f0:9e:00:6e:61:21:ea:
9d:44:df:b0:29:5e:f4:c2:fa:6a:d1:22:4e:27:6b:
9b:48:0e:b6:ef:9b:a5:1a:66:5e:97:17:35:08:74:
b6:fe:7c:6e:c1:8b:52:32:5a:89:21:4c:b3:24:e4:
cc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D8:10:EF:49:C4:6C:81:F5:85:9C:CB:14:0D:90:B1:F6:64:32:75
X509v3 Authority Key Identifier:
keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B5629336843011EAB4270B83C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.98.69.0/24
203.98.85.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:04:e5:57:91:00:bd:91:d3:88:ed:6c:63:d8:4c:36:69:8b:
32:6f:67:f3:3e:47:fb:2c:95:76:0c:b5:ee:a5:7f:9d:ae:33:
d4:ce:4a:c7:be:9d:19:31:16:6b:d5:1e:7e:92:92:70:90:17:
b8:26:8c:35:0a:b6:61:4b:66:c3:07:ae:67:6d:d0:0b:c3:ef:
d8:77:58:ed:bd:63:46:48:c3:ff:c2:83:dc:ac:70:43:26:5b:
81:ff:ff:1e:fa:13:f5:cc:2a:4f:14:71:72:5c:db:97:8e:4d:
68:00:7d:41:c3:94:71:8c:49:9b:4f:4a:70:e0:e9:62:00:dc:
23:04:fc:06:0d:9f:c8:ae:e9:1d:ac:f0:fb:13:25:95:ae:b0:
9c:0d:44:13:5e:8a:29:2d:31:16:97:1e:cf:5e:d0:c4:ef:fa:
62:92:e5:7a:59:08:9c:db:59:5b:99:f9:42:e4:74:02:b4:19:
be:ce:6d:5d:c5:73:cb:c6:9c:a4:55:71:3e:7e:42:d8:17:b8:
d3:50:87:cd:95:e6:26:fa:52:ff:0e:17:7f:b2:1d:b5:96:fa:
7b:d1:45:38:ec:bc:cf:cf:17:9f:27:29:8e:e5:82:9f:0a:a8:
47:1d:33:00:af:d8:0f:88:7d:37:50:b4:dd:9a:7c:d6:32:ef:
21:29:2d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 14:57:35 2026 by rpki-client