
$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/97834674B8C511F0A874F663C4F9AE02.roa
File: 97834674B8C511F0A874F663C4F9AE02.roa (raw, json)
Hash identifier: aNFfN+C791BDlxNxMG4WEQJoF+cibvYjBYSLw3RE7q0=
Subject key identifier: C7:34:D6:A3:DA:06:07:B1:00:A5:51:94:1C:D2:94:83:D9:B0:C8:FB
Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD
Certificate serial: 0D4F
Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/97834674B8C511F0A874F663C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:27:52 +0000
ROA not before: Mon 10 Nov 2025 04:24:48 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 149765
IP address blocks: 123.136.28.0/24 maxlen: 24
2404:7e00:501::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl
rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:51:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3407 (0xd4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD
Validity
Not Before: Nov 10 04:24:48 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a47718-6115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:cc:67:2d:89:c5:1a:48:66:6d:59:80:5f:
42:d5:de:4a:0f:f8:15:f0:ed:7e:73:6a:c4:0d:7b:
99:22:63:b5:4f:e6:a3:78:46:a2:34:a8:79:58:eb:
b2:c5:2c:7c:4d:02:06:a1:4b:41:2a:b8:e6:74:c0:
7d:ec:58:18:98:27:3a:d2:54:e9:8b:b9:66:60:23:
3a:cd:d7:78:e2:34:3f:15:31:ae:b4:a8:30:96:47:
f9:af:57:96:e2:da:69:d6:3b:16:5b:5f:0f:7c:fe:
4a:a9:7c:81:32:fa:2c:32:93:a1:cf:a2:05:a1:96:
94:78:05:33:25:c8:6b:09:e0:65:de:61:d6:94:62:
f3:5b:79:a6:02:a6:cd:a3:d5:9a:3a:a1:9e:9a:91:
1d:39:6f:52:fa:d1:62:75:c9:b4:08:99:0e:36:e0:
37:a0:d0:bb:20:ca:b5:06:f9:84:b8:ca:db:b3:1b:
21:0a:d1:ec:12:4b:a7:a0:ad:71:3a:c2:61:a1:2c:
43:ff:cd:65:9d:3f:d8:16:45:ef:98:70:d9:d6:4b:
32:6a:f6:64:75:67:06:5e:30:6b:82:5e:67:2b:44:
ad:61:81:1f:d0:17:16:fb:ce:22:74:74:4d:57:d8:
9c:36:bc:3b:7d:0b:8c:d8:87:dd:a3:3e:18:c9:f8:
76:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:34:D6:A3:DA:06:07:B1:00:A5:51:94:1C:D2:94:83:D9:B0:C8:FB
X509v3 Authority Key Identifier:
keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/97834674B8C511F0A874F663C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
123.136.28.0/24
IPv6:
2404:7e00:501::/48
Signature Algorithm: sha256WithRSAEncryption
0b:8d:62:0a:87:c2:aa:23:6d:e3:eb:8b:29:bc:9e:34:38:bf:
41:a5:eb:ac:80:dd:8f:24:fc:12:97:ba:71:b4:42:5d:c5:7c:
e6:33:3d:71:49:b7:0f:01:fe:1f:1c:4a:39:9f:6c:c2:54:de:
b4:65:12:0c:4d:37:9f:8d:72:81:93:83:f2:54:8d:7f:24:b3:
c2:a7:6f:e3:e3:06:ea:23:53:df:84:49:13:08:27:3e:37:fd:
3b:ed:8a:d3:2d:5f:31:94:ad:59:15:21:be:d6:11:87:d2:b7:
03:e1:3b:cc:63:f7:e7:a6:55:6c:df:06:c6:74:eb:2a:1c:b0:
ae:94:2a:3d:7a:d9:d0:ac:9d:8b:6e:e7:20:0d:c7:10:67:be:
f5:b7:e3:2f:b2:23:0b:9e:e5:ae:22:25:e1:a9:85:5a:f8:b7:
fe:3e:e9:11:3d:61:02:ee:bb:2b:8a:00:aa:fc:66:46:18:ab:
5e:c2:55:0f:98:a1:7e:f3:b8:59:8d:55:91:77:ab:63:30:2c:
bd:29:d0:97:97:33:39:1f:ef:7e:83:95:e6:af:ec:55:40:3f:
a1:b7:a6:2c:05:70:d9:f3:b7:92:8b:03:4b:4d:fc:69:95:51:
ae:b8:b1:c3:80:26:f5:49:fa:ff:a3:47:40:70:0e:89:b3:3a:
71:81:c2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:32:46 2026 by rpki-client