
$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/B4450EF68E5311EBB81E6C70C4F9AE02.roa
File: B4450EF68E5311EBB81E6C70C4F9AE02.roa (raw, json)
Hash identifier: Z9RyBMJrxYuZfbZLQ7+nLreuRbVepYn0j7NfRrq4SKU=
Subject key identifier: B3:EE:72:4F:BF:E4:E1:A1:4F:DD:CC:8C:7B:56:F1:B2:72:A2:D8:5B
Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E
Certificate serial: 16CA
Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/B4450EF68E5311EBB81E6C70C4F9AE02.roa
Signing time: Mon 02 Mar 2026 05:10:55 +0000
ROA not before: Wed 26 Nov 2025 16:35:24 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 55446
IP address blocks: 196.1.105.0/24 maxlen: 24
196.1.106.0/24 maxlen: 24
196.1.110.0/23 maxlen: 23
196.1.110.0/24 maxlen: 24
196.1.111.0/24 maxlen: 24
196.1.111.0/25 maxlen: 25
196.1.111.128/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl
rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5834 (0x16ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E
Validity
Not Before: Nov 26 16:35:24 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a51bde-e6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:45:d1:6d:f7:ab:e1:02:07:2e:18:f2:30:
c5:00:1c:c9:85:0f:3c:72:a9:dd:e4:6b:a7:0e:ef:
75:7f:10:95:eb:49:41:1a:2d:c2:e5:1f:93:5d:39:
50:de:68:30:70:18:03:35:33:5d:72:16:15:f3:8c:
63:0b:0f:72:bc:96:7d:26:67:a2:d7:72:52:fe:29:
91:07:32:84:dd:a1:11:4f:bb:1b:da:b7:21:78:90:
1d:1a:11:2b:be:17:c2:64:f1:be:09:2c:5c:6e:6b:
14:c2:ff:23:9a:4b:d1:50:60:bd:60:35:b0:44:11:
bf:8b:b1:fd:13:15:27:93:1e:a1:86:90:22:94:d0:
34:be:a5:82:9e:6c:6b:da:a8:60:02:dc:74:28:ea:
68:d0:54:2f:c5:76:e0:1c:f0:d0:a3:fa:57:16:d6:
4b:69:43:f7:8a:07:af:0b:a3:60:3f:a9:51:75:2e:
b7:06:39:5f:13:7a:18:79:2d:8a:45:b0:d1:35:2b:
11:06:d0:76:00:6b:86:48:94:f1:3a:1d:1f:17:67:
9a:0e:26:0a:9c:5d:cf:03:e0:13:9e:b3:87:06:7f:
da:d2:51:08:c5:75:4c:cd:5c:96:3d:b4:cf:a0:3a:
ec:e7:68:cd:44:a5:92:1c:ec:08:c7:c7:68:b0:e4:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EE:72:4F:BF:E4:E1:A1:4F:DD:CC:8C:7B:56:F1:B2:72:A2:D8:5B
X509v3 Authority Key Identifier:
keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/B4450EF68E5311EBB81E6C70C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
196.1.105.0-196.1.106.255
196.1.110.0/23
Signature Algorithm: sha256WithRSAEncryption
41:a4:a0:fb:6f:f7:5d:aa:27:6f:b1:3d:5b:13:f4:a7:3f:4a:
f5:e4:7d:61:0a:05:8c:45:ec:67:66:23:a6:7b:9c:41:5b:03:
99:1e:50:7b:54:b4:2b:47:2c:58:56:01:68:ac:8a:5a:5a:f1:
8f:c2:94:a8:a8:1f:b4:bf:44:6d:1a:ec:bb:39:de:56:ba:66:
c0:cb:79:51:67:e8:60:8e:1c:27:b0:5d:71:0f:5b:5e:ac:96:
8b:17:93:7e:99:a3:51:29:39:27:c5:05:b3:d3:d1:1c:be:b7:
2d:e6:ff:c0:90:4d:8f:44:6e:83:67:66:6e:c9:29:45:33:82:
09:da:6c:49:bf:c1:a5:b6:cc:4c:48:3d:77:aa:1a:17:b8:25:
8a:6b:df:df:d4:b5:ce:a0:9e:df:4a:c0:b9:42:92:b8:eb:15:
69:5c:9c:e7:2c:73:85:2d:3e:e6:87:ae:06:5b:b3:01:0e:75:
a3:9e:3d:3e:d5:8f:e6:21:b6:aa:95:03:77:af:cb:d6:e9:45:
b5:31:2e:69:82:a8:32:d9:ce:45:0f:d6:b0:1a:92:28:51:26:
70:59:63:8a:30:47:08:9e:50:fa:48:0a:04:75:16:b4:a6:67:
4b:4c:80:44:1f:94:67:a3:ef:cb:d6:91:af:f9:6e:50:48:ad:
9d:b8:6f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:54:45 2026 by rpki-client