
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa
File: EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa (raw, json)
Hash identifier: g2ZNylQcb8etPgpxOKMZxyMxotmSOP4baNAPXmd/M58=
Subject key identifier: 59:FE:A1:5E:B1:1A:BA:8E:63:3C:D8:14:D0:47:62:CE:67:52:D3:83
Certificate issuer: /CN=A916BFAB/serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4
Certificate serial: 0244
Authority key identifier: 05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa
Signing time: Thu 09 Jul 2026 04:31:46 +0000
ROA not before: Thu 09 Jul 2026 04:31:46 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 140594
IP address blocks: 103.251.254.0/24 maxlen: 24
103.251.255.0/24 maxlen: 24
2001:df2:cec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl
rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:57:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580 (0x244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BFAB, serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4
Validity
Not Before: Jul 9 04:31:46 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4f2431-5c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:a0:74:49:c9:53:77:ad:aa:dc:32:8f:25:
fa:32:62:62:b7:54:17:69:b1:cf:30:66:1c:d0:3b:
1f:e2:a9:92:73:bf:54:8a:cf:2a:c0:22:07:13:5c:
1e:18:83:df:28:91:40:8e:63:ff:c4:34:bd:88:ec:
fe:31:70:47:52:24:b8:31:54:5b:08:9c:a6:17:0b:
83:8e:2d:cd:5e:b1:04:79:d1:7a:52:0c:01:79:e3:
95:61:b7:85:76:48:c5:98:c2:2d:b8:b6:85:61:ed:
6f:31:75:9d:7d:5a:f0:6f:a5:a8:cd:6a:c5:9f:19:
d1:1e:5e:22:44:71:1f:a3:e5:6f:0e:09:a7:87:dc:
2f:ba:ed:f9:d1:b6:9d:94:10:aa:7a:7b:4b:b0:5f:
2f:28:dd:0a:91:db:9d:a3:1f:96:64:6e:e8:18:05:
d0:59:7d:95:f0:51:e8:56:d6:ed:99:f1:2b:70:07:
ff:bd:90:19:b7:e4:81:c8:22:73:8e:02:26:02:45:
de:05:a1:42:5a:49:97:55:09:55:65:38:8c:aa:33:
a6:b9:aa:3f:81:6c:7f:08:cc:9b:ad:07:8e:2a:1f:
01:54:ba:00:a1:7e:6c:cf:e3:4b:9f:16:18:af:5a:
1e:d4:20:e6:30:37:a2:8f:25:c1:74:34:9d:0b:2f:
93:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FE:A1:5E:B1:1A:BA:8E:63:3C:D8:14:D0:47:62:CE:67:52:D3:83
X509v3 Authority Key Identifier:
keyid:05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/EDBD93FE9E6F11EE85A6B84EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.251.254.0/23
IPv6:
2001:df2:cec0::/48
Signature Algorithm: sha256WithRSAEncryption
1c:ce:47:04:ea:78:2b:52:4e:7f:04:44:82:d1:c6:40:bf:d1:
02:5a:5a:c3:a4:40:10:84:44:22:39:bc:bf:99:7d:a7:64:05:
f3:6c:5a:fe:92:65:62:d5:12:56:1e:e6:75:6f:3b:6a:66:9c:
59:52:0d:ec:59:36:0b:d3:64:99:5e:b3:1f:d8:8f:35:46:c1:
b8:d8:8f:2c:29:1d:ec:43:21:5a:89:96:ee:69:4f:c6:17:82:
97:38:87:70:24:03:84:cd:7c:70:48:d7:f4:66:1a:cb:8f:07:
71:71:e7:ec:ed:a8:4f:92:1d:f3:c0:08:d3:a4:0b:23:8f:87:
ad:d6:f5:cd:e9:4e:35:76:bd:86:c2:76:b1:6c:65:ab:9a:a2:
c2:27:e2:bd:47:6d:88:07:59:af:4a:47:6a:9d:0b:2f:33:49:
13:9f:16:38:c2:d2:95:c7:f5:d2:bf:97:d3:d1:e6:c7:fd:f5:
6f:07:50:9c:4a:21:51:39:3f:92:a0:2b:59:d7:9c:36:ab:51:
8b:4f:f8:5a:02:7c:c1:90:78:27:76:11:3e:ef:02:6d:90:89:
af:d4:e5:9f:27:e8:2a:ee:d8:61:8b:03:ae:49:47:34:75:46:
98:da:fb:c8:3c:8d:9c:15:4a:77:b7:47:28:9c:6c:e2:d3:96:
04:a5:14:e5
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJGQUIxMTAvBgNVBAUTKDA1ODNBODVGRTMxM0ZDMEQ2MzY2RTIyQzQ0NjZCMjkz
RUFENDVBRTQwHhcNMjYwNzA5MDQzMTQ2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRmMjQzMS01Yzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv6WgdEnJU3etqtwyjyX6MmJit1QXabHPMGYc0Dsf4qmSc79Uis8qwCIHE1we
GIPfKJFAjmP/xDS9iOz+MXBHUiS4MVRbCJymFwuDji3NXrEEedF6UgwBeeOVYbeF
dkjFmMItuLaFYe1vMXWdfVrwb6WozWrFnxnRHl4iRHEfo+VvDgmnh9wvuu350bad
lBCqentLsF8vKN0Kkdudox+WZG7oGAXQWX2V8FHoVtbtmfErcAf/vZAZt+SByCJz
jgImAkXeBaFCWkmXVQlVZTiMqjOmuao/gWx/CMybrQeOKh8BVLoAoX5sz+NLnxYY
r1oe1CDmMDeijyXBdDSdCy+TqQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFn+oV6x
GrqOYzzYFNBHYs5nUtODMB8GA1UdIwQYMBaAFAWDqF/jE/wNY2biLERmspPq1Frk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkZBQi8zM0E5Q0M5QzM2
ODQxMUVFQTkyN0Y5NDhDNEY5QUUwMi9CWU9vWC1NVF9BMWpadUlzUkdheWstclVX
dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JZT29YLU1UX0Exalp1SXNSR2F5ay1yVVd1US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkJGQUIvMzNBOUNDOUMzNjg0MTFFRUE5MjdGOTQ4QzRGOUFFMDIvRURCRDkzRkU5
RTZGMTFFRTg1QTZCODRFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ/v+MA8EAgACMAkDBwAgAQ3yzsAwDQYJKoZIhvcNAQELBQADggEB
ABzORwTqeCtSTn8ERILRxkC/0QJaWsOkQBCERCI5vL+ZfadkBfNsWv6SZWLVElYe
5nVvO2pmnFlSDexZNgvTZJlesx/YjzVGwbjYjywpHexDIVqJlu5pT8YXgpc4h3Ak
A4TNfHBI1/RmGsuPB3Fx5+ztqE+SHfPACNOkCyOPh63W9c3pTjV2vYbCdrFsZaua
osIn4r1HbYgHWa9KR2qdCy8zSROfFjjC0pXH9dK/l9PR5sf99W8HUJxKIVE5P5Kg
K1nXnDarUYtP+FoCfMGQeCd2ET7vAm2Qia/U5Z8n6Cru2GGLA65JRzR1Rpja+8g8
jZwVSne3RyicbOLTlgSlFOU=
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:35:54 2026 by rpki-client