
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/66EDABB6815411EF98D05E1EC4F9AE02.roa
File: 66EDABB6815411EF98D05E1EC4F9AE02.roa (raw, json)
Hash identifier: 3u67oMwzGOz5a39ev00s5EB6ZROVZTn6ToX//42/CIo=
Subject key identifier: 27:32:90:61:44:C8:DC:1B:E2:CC:A5:0F:57:AC:12:8B:2E:63:D3:E3
Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Certificate serial: 04BF
Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/66EDABB6815411EF98D05E1EC4F9AE02.roa
Signing time: Fri 27 Mar 2026 00:32:40 +0000
ROA not before: Fri 27 Mar 2026 00:32:40 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 58688
IP address blocks: 103.20.180.0/22 maxlen: 24
103.217.112.0/22 maxlen: 24
103.247.44.0/22 maxlen: 24
2405:6900:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215 (0x4bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Validity
Not Before: Mar 27 00:32:40 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=69c5d028-495d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:5d:13:8f:23:42:89:96:0a:a8:6e:94:9f:
27:c8:e4:db:f7:bc:71:8f:c3:cd:9a:8d:71:46:9d:
31:76:a1:74:ef:9c:e0:a8:b5:34:cf:32:91:61:13:
61:b7:e5:bd:90:ec:5d:c3:f6:b7:23:09:f0:8f:eb:
b5:a4:8c:44:cd:61:1f:7a:cd:55:a9:31:93:14:3e:
38:d8:e1:d3:48:60:f6:ef:1d:db:06:4a:2d:4d:08:
a3:9a:28:8a:4b:42:19:9e:a7:3c:38:0b:e2:76:56:
a0:2c:47:e5:c1:f4:89:11:18:1d:87:81:9e:d5:e5:
73:31:4c:7c:ef:b5:05:68:ea:d8:71:58:5b:3f:61:
ed:c3:9e:83:a0:44:0f:60:d9:bd:21:23:52:a3:72:
4f:e9:32:7c:9e:52:81:b3:e7:0b:19:e2:30:76:74:
ce:f9:8e:36:65:cb:2f:0c:2e:43:26:7d:92:e0:e3:
2c:3d:5c:aa:18:f0:87:8e:f6:fd:db:6f:df:34:35:
15:a7:89:36:6b:ec:97:57:9d:50:e3:76:8b:17:22:
3c:e0:15:3f:64:da:c7:6d:8b:50:69:04:97:b0:33:
8d:2f:78:7e:6d:16:fb:32:73:0a:b6:14:63:85:2a:
69:8f:86:08:0f:73:4c:f9:3f:8c:93:04:48:ff:88:
4f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:32:90:61:44:C8:DC:1B:E2:CC:A5:0F:57:AC:12:8B:2E:63:D3:E3
X509v3 Authority Key Identifier:
keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/66EDABB6815411EF98D05E1EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.20.180.0/22
103.217.112.0/22
103.247.44.0/22
IPv6:
2405:6900:f000::/36
Signature Algorithm: sha256WithRSAEncryption
1b:c4:52:88:55:a5:5b:ea:4e:84:3e:5f:49:9c:8b:a3:b8:f7:
c3:a3:18:cb:68:62:ae:c8:02:fb:d0:75:5f:10:3a:31:71:d2:
9e:31:a9:81:15:78:bf:f8:c0:90:9c:0b:53:34:99:14:8c:81:
a6:f7:a8:2b:3c:24:b4:82:42:73:f7:5e:59:9a:c9:1a:1e:ec:
5e:06:d3:56:c2:72:b3:2f:c2:ee:a6:96:77:4e:d8:15:95:f7:
7e:6f:df:e6:a9:f1:56:c4:7b:5c:2f:ee:bf:2f:15:9d:9d:55:
8e:05:52:c5:98:70:75:b8:b0:36:21:cb:30:1b:83:2a:54:13:
f8:0a:0e:a3:eb:e6:ef:e0:64:0d:f3:64:b5:1f:93:82:23:36:
69:69:57:62:e7:e5:f5:da:af:ae:eb:46:df:63:dd:5c:b0:de:
d1:da:8d:01:d7:a7:70:40:62:b5:e3:56:db:d4:6e:03:8f:b2:
80:f5:1d:ca:28:41:5a:bb:93:ac:8a:80:4e:6b:8d:72:50:59:
29:82:04:72:f3:22:d8:4a:dc:e2:db:7f:bc:6f:b3:70:89:9d:
e8:1a:60:b8:7c:09:3a:3d:4a:a6:67:74:33:ae:cd:22:2b:9f:
2a:f7:ef:2f:4e:80:94:be:65:f9:97:d9:da:e0:ea:6f:d2:ff:
96:0c:59:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:55:04 2026 by rpki-client