
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/0A3499FA6D4011F18402C72C7347A888.roa
File: 0A3499FA6D4011F18402C72C7347A888.roa (raw, json)
Hash identifier: IcAFoiT1xNzuxGEcSGlqRhiYhlm73dEBd3/qHI8dWW0=
Subject key identifier: 92:90:95:DB:F6:23:14:A6:0F:8C:C4:28:BA:B6:32:D4:57:62:49:4C
Certificate issuer: /CN=A919E4A9/serialNumber=76DC01966269A8648B11C4254028035A369F15EC
Certificate serial: 08
Authority key identifier: 76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/0A3499FA6D4011F18402C72C7347A888.roa
Signing time: Sun 21 Jun 2026 07:08:44 +0000
ROA not before: Sun 21 Jun 2026 07:08:44 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 4755
IP address blocks: 103.219.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl
rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 10:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E4A9, serialNumber=76DC01966269A8648B11C4254028035A369F15EC
Validity
Not Before: Jun 21 07:08:44 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a378dfc-b280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:34:d0:d9:74:ae:3d:88:03:42:6a:41:ef:
be:fe:68:ce:69:bb:2e:8f:8b:de:97:39:af:ea:36:
cc:5f:8d:ce:0f:e6:d8:6b:38:f9:ad:cf:de:b0:b4:
cb:b9:58:b8:fd:5b:93:13:22:4e:f3:d4:01:5f:4a:
80:44:a6:e0:43:cf:76:cd:09:d2:f8:e8:6a:54:8f:
da:5e:0d:d1:c7:4d:ae:28:e7:f0:ff:e4:61:4b:5a:
c2:00:b0:9d:74:fb:a2:ef:00:08:cf:b9:b4:32:40:
20:e9:cf:cf:0a:dc:82:cd:e4:3c:f7:fd:1c:fe:83:
cc:68:95:d1:d9:16:ec:cc:ce:14:96:b3:63:8d:8f:
db:a6:5f:bc:10:86:4b:cf:d1:bc:b8:91:53:6e:fe:
69:87:56:ab:dc:3b:cb:c7:4f:f7:57:78:7a:cd:a0:
cc:53:70:90:3b:14:73:dc:30:8c:4b:16:20:9d:3e:
13:e8:b6:57:a6:57:e5:28:a3:71:ac:34:67:31:be:
f2:94:01:50:83:05:56:45:f6:ff:8d:92:fc:6c:7a:
6b:0f:3c:0e:58:9a:d1:f3:47:2d:15:70:ff:2a:51:
89:84:b8:1e:00:ba:97:86:89:5b:ab:43:ed:fb:29:
88:20:3b:ee:89:cc:ca:b2:8d:7b:bc:c4:0b:5b:e3:
ca:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:90:95:DB:F6:23:14:A6:0F:8C:C4:28:BA:B6:32:D4:57:62:49:4C
X509v3 Authority Key Identifier:
keyid:76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/0A3499FA6D4011F18402C72C7347A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.219.238.0/23
Signature Algorithm: sha256WithRSAEncryption
57:b8:10:2e:d2:98:c0:d8:c4:52:07:7b:1f:1f:dd:f0:57:d0:
f1:e4:fc:9b:a9:10:e0:b9:09:39:7e:9f:d0:4f:0b:0b:fa:5f:
50:ea:c4:1f:2d:a0:2f:87:b9:f9:c6:ca:cc:fb:d0:f4:f8:b0:
52:03:96:bd:16:ae:30:12:2b:29:c6:5e:43:21:39:61:18:d9:
ef:36:1d:21:e5:64:fa:23:8d:39:ef:65:6b:f8:01:46:c6:0d:
b9:75:4f:30:77:56:fc:13:33:43:f7:9b:c1:da:fe:fb:e2:c9:
fc:be:88:82:8a:35:75:3b:9a:bd:b1:12:d5:3c:7c:5d:89:2e:
8a:cf:7f:9d:c9:90:4c:b2:63:21:55:a5:be:df:cb:3e:94:bb:
14:3c:df:72:05:56:f9:d2:77:02:e7:48:ff:7d:f8:e5:0d:79:
56:98:18:cd:8a:73:3d:45:ea:f6:99:2f:c7:57:fe:78:dd:7e:
b4:6e:a5:51:25:58:c3:04:4b:c2:3f:6f:aa:e5:62:61:20:cf:
ab:75:d0:7f:cf:ce:90:d9:22:e1:8a:ff:b3:10:3d:75:ba:34:
5b:aa:ca:50:cc:d1:d9:2b:f5:24:ac:21:aa:ae:b2:c4:ef:7d:
23:05:bf:13:fd:b4:23:a4:c5:fa:48:2b:39:51:07:8c:f3:75:
cc:e5:1a:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:53 2026 by rpki-client