
$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D2677928DD9811EDB2BBBA09C4F9AE02.roa
File: D2677928DD9811EDB2BBBA09C4F9AE02.roa (raw, json)
Hash identifier: hCwx0DM5AZe2LmvT1nwHBj2xXRoQx2u9h5+OYamek6Q=
Subject key identifier: BB:A5:D8:76:B5:3F:51:9F:99:7C:E8:46:BC:44:8B:E3:3D:12:AB:22
Certificate issuer: /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Certificate serial: 0230
Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D2677928DD9811EDB2BBBA09C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:16:04 +0000
ROA not before: Fri 09 May 2025 02:52:23 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 116.197.148.0/24 maxlen: 24
116.197.150.0/24 maxlen: 24
116.197.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:05:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913664F, serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Validity
Not Before: May 9 02:52:23 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3f5c4-9e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:08:7d:02:bd:fc:8e:7a:f9:da:ac:aa:05:
33:ee:8a:65:6c:ae:aa:71:10:ea:14:3b:04:b3:c8:
55:9b:4e:d2:73:73:95:ea:ff:a9:ee:90:5b:33:b4:
2a:db:f7:f7:6b:1b:11:27:53:1d:b3:6e:1e:a2:3b:
d1:cf:66:b5:7b:df:b7:eb:98:91:0e:86:3e:9d:be:
9a:dd:db:6b:14:f6:fd:0f:e4:b3:c7:66:5c:23:e2:
f7:af:ce:7b:01:b6:af:fd:c5:db:63:56:7f:8b:cb:
bf:9e:21:43:dc:2d:5a:a3:a2:74:40:b4:6b:13:c8:
22:fe:68:60:d3:70:f2:5f:63:6f:cd:e0:0b:eb:bf:
01:a3:25:45:0e:57:40:15:6b:43:63:60:08:36:af:
ef:a8:59:f5:ed:55:2e:6f:70:12:9d:09:e7:22:39:
bd:93:87:ed:08:c1:a0:38:b3:ee:46:3a:df:a2:1e:
d2:45:ee:1a:39:8e:f7:75:5f:b1:d6:1b:3d:11:98:
9e:d4:c1:c2:5f:7f:6d:dc:cf:87:7a:31:5e:44:91:
c4:94:2a:86:64:6b:b5:7e:a9:1f:f6:d4:71:2f:30:
e2:3e:4f:ea:2d:ca:4c:e9:c7:92:1b:3c:d3:52:c3:
02:c6:85:04:1d:46:b0:a4:d2:f6:60:89:ba:55:72:
a1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A5:D8:76:B5:3F:51:9F:99:7C:E8:46:BC:44:8B:E3:3D:12:AB:22
X509v3 Authority Key Identifier:
keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D2677928DD9811EDB2BBBA09C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.197.148.0/24
116.197.150.0/23
Signature Algorithm: sha256WithRSAEncryption
43:ca:66:35:ce:6c:5a:95:42:0c:51:29:59:df:2b:97:2b:79:
a5:fe:12:4e:7d:a1:8e:db:f9:43:05:d7:94:95:e3:4c:59:bd:
f1:e6:ee:48:81:01:11:1f:35:11:b3:90:1a:73:00:5b:2e:8b:
bc:e2:e1:97:53:82:cb:49:09:84:6b:7d:da:48:2c:5f:d9:01:
86:38:ad:7f:70:6b:ce:5d:a7:b4:80:d6:4c:3e:0d:8e:d8:b6:
e5:eb:dc:2b:c6:45:89:97:33:9f:08:b5:4e:21:83:d7:23:1b:
e3:99:3e:40:aa:fe:3a:a9:e0:7d:b8:ae:62:1a:e9:ba:fd:81:
b2:19:93:8d:1d:28:86:14:e1:c3:68:ed:47:d8:38:30:c9:9a:
ff:29:d3:9f:82:6e:df:93:48:d8:cc:58:82:8e:bb:01:be:b2:
62:d6:71:17:50:0e:dd:78:80:27:ac:ac:0e:9b:35:0d:c7:8a:
ba:18:18:b0:dc:bd:73:51:16:17:bc:2d:ca:c1:1f:9b:30:3e:
97:25:b5:31:1c:14:fb:79:05:18:4f:88:92:19:4b:02:55:82:
d4:07:57:24:fe:de:13:58:3d:5e:cc:64:da:41:d2:04:2d:1a:
2b:0e:fa:6f:f0:ba:bd:86:68:e1:50:f0:62:7c:e2:37:69:27:
62:66:b4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:47 2026 by rpki-client