
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/BAA31B82334C11F1B39593F0C5833773.roa
File: BAA31B82334C11F1B39593F0C5833773.roa (raw, json)
Hash identifier: lIyTLXPAnH65MfXHS8yI5w9l1qk3vRaUTsOKyUDqbPo=
Subject key identifier: EB:B3:3E:31:9F:E2:1C:A6:52:5E:92:67:B5:AF:62:45:64:6A:41:A5
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3B6C
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/BAA31B82334C11F1B39593F0C5833773.roa
Signing time: Wed 22 Apr 2026 15:10:43 +0000
ROA not before: Wed 22 Apr 2026 15:10:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132165
IP address blocks: 103.246.108.0/22 maxlen: 22
103.246.108.0/24 maxlen: 24
103.246.109.0/24 maxlen: 24
103.246.110.0/24 maxlen: 24
103.246.111.0/24 maxlen: 24
111.88.0.0/22 maxlen: 24
111.88.4.0/24 maxlen: 30
111.88.5.0/24 maxlen: 24
111.88.6.0/23 maxlen: 24
111.88.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 13:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15212 (0x3b6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Apr 22 15:10:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e8e4f3-22a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:11:89:82:e2:50:7b:2b:3f:bf:73:47:ab:
4d:86:0d:ce:fa:c4:42:8d:9a:9a:9f:60:5d:0d:0b:
3c:99:d7:ed:6e:62:5c:90:ac:c6:79:41:86:d5:a5:
1d:a0:7e:59:ee:a0:7f:1d:46:4d:0f:24:95:a3:33:
51:a1:d3:83:74:a1:cc:01:9b:2a:5f:36:41:5d:29:
ba:c4:ad:28:75:5c:b6:09:d1:2f:47:c0:8f:f7:3b:
af:ec:f0:15:64:fa:29:22:15:95:5d:5a:a6:9b:8a:
36:3c:29:c3:4e:55:ee:09:00:0a:4e:9a:40:7d:e4:
44:47:36:39:97:80:4f:fd:8e:8b:58:36:70:88:85:
66:2b:ab:4b:22:0b:5d:cd:de:38:8a:dc:14:cc:d1:
b9:87:42:44:79:36:d0:71:d5:73:cd:67:ac:cf:31:
40:a6:82:bb:33:08:88:f9:ec:95:a1:98:0c:7d:0d:
14:f6:07:bb:f7:b4:e6:c7:4a:63:cf:79:32:e4:2a:
67:8b:c5:8c:de:98:e4:ed:3c:b5:c7:a7:37:8a:e2:
60:98:a2:1c:b2:77:3a:a6:40:01:08:b2:11:1b:14:
ae:e0:9c:e3:48:59:5f:61:70:17:bd:6b:de:a3:43:
6d:37:b6:1c:76:16:91:d9:bc:89:41:cd:d8:d8:aa:
62:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B3:3E:31:9F:E2:1C:A6:52:5E:92:67:B5:AF:62:45:64:6A:41:A5
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/BAA31B82334C11F1B39593F0C5833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.246.108.0/22
111.88.0.0/21
111.88.136.0/23
Signature Algorithm: sha256WithRSAEncryption
49:4a:60:b9:4b:54:1b:ce:54:1e:45:c7:69:0c:f1:24:3c:0f:
87:6e:e0:ba:e9:20:6b:9e:60:8f:be:90:79:4f:24:8b:84:8c:
d7:ee:53:e1:1b:43:57:ab:57:b6:5c:0d:4e:f3:80:1f:c7:dc:
4e:76:31:f8:af:d7:27:f5:41:c7:13:94:47:cd:0d:3f:e6:f7:
99:6e:74:e4:8f:1c:a2:14:de:08:49:71:90:21:84:9b:60:c0:
84:75:db:95:af:34:a7:74:d1:82:65:98:fa:27:84:33:c9:13:
d4:ba:a2:26:b1:0c:ee:39:0b:3f:76:57:45:54:06:0c:ca:2f:
61:c0:55:c4:43:a7:d9:6b:24:5c:f2:7f:14:9b:ea:82:f3:e4:
23:d3:ef:6f:f5:da:ab:48:a9:a8:f3:bd:06:81:4c:7f:f9:64:
e6:4a:4d:c2:04:7d:a2:1d:2e:ba:97:36:99:d4:b2:a9:21:49:
ba:86:15:41:1f:b4:18:9a:93:12:82:80:da:d4:e0:fd:25:a6:
a3:88:e4:cd:ef:01:0d:29:b5:1c:28:ea:c1:8d:38:ea:91:22:
3e:64:b3:99:97:76:2c:67:c9:56:06:a3:23:99:9d:b3:f7:02:
f8:76:80:42:0f:93:22:47:a8:90:35:cd:0c:f5:91:e0:a6:77:
08:30:f8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:41:53 2026 by rpki-client