
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/EB0FEBAA295811EBB519AC70C4F9AE02.roa
File: EB0FEBAA295811EBB519AC70C4F9AE02.roa (raw, json)
Hash identifier: fw5/QJjCTBWxtMG/FipH4dmnUQpkZIfnjR5R3n7X6UI=
Subject key identifier: BB:EB:4B:16:3F:EC:F7:98:B9:D6:25:37:79:F4:A3:7B:B0:E0:47:E6
Certificate issuer: /CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD
Certificate serial: 07E4
Authority key identifier: B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/EB0FEBAA295811EBB519AC70C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:40:53 +0000
ROA not before: Wed 02 Jul 2025 22:02:21 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 58507
IP address blocks: 103.115.188.0/22 maxlen: 24
2402:ecc0::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl
rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2020 (0x7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A033, serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD
Validity
Not Before: Jul 2 22:02:21 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a409a5-66c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:28:b5:bf:b0:21:0a:e5:9a:41:21:4d:f2:
ff:ec:39:ed:41:28:70:c5:17:02:1c:47:f8:85:40:
3c:bb:a6:30:28:d0:37:c4:7d:80:a8:28:c8:ce:a8:
9e:34:08:56:62:08:2b:b2:2f:e5:81:58:e2:32:fd:
34:41:5a:df:3d:e9:72:77:72:b1:7b:e6:2f:8f:f5:
ef:df:41:16:76:09:95:c4:9f:28:b5:83:67:a4:7c:
54:5f:c6:4c:39:e0:63:ff:f4:59:be:fe:de:61:e7:
93:05:bd:65:c9:81:97:80:c8:f6:50:8c:b6:85:f2:
97:fb:02:af:95:71:2b:f8:de:73:28:43:c7:0c:20:
4b:b4:fd:1e:66:b2:ca:5b:ed:a0:da:8c:0c:75:93:
ba:32:31:27:38:c4:79:d2:09:ab:6f:96:a6:a8:a5:
78:05:2c:4c:d2:da:59:ab:24:1c:70:c1:26:a0:f1:
c4:c0:e9:d6:d2:a1:fb:62:3d:6e:b2:58:85:60:3e:
0a:d3:52:47:5e:36:19:79:7f:67:ca:6f:ce:79:e7:
fc:42:47:31:5e:ec:17:3b:7e:30:8e:3d:c7:8a:f0:
d7:88:ee:67:b6:8e:f4:47:2a:0e:ea:ae:f6:62:02:
01:eb:0f:0e:b5:0f:de:d5:e1:e0:7f:e0:3c:d2:3d:
ab:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EB:4B:16:3F:EC:F7:98:B9:D6:25:37:79:F4:A3:7B:B0:E0:47:E6
X509v3 Authority Key Identifier:
keyid:B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/EB0FEBAA295811EBB519AC70C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.115.188.0/22
IPv6:
2402:ecc0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:6d:55:26:cb:57:f6:f0:3d:5e:65:00:49:bf:60:3d:e4:66:
e0:1b:72:e5:bb:c5:76:c4:68:37:0f:ac:42:10:36:ae:2e:04:
37:30:e9:5a:fc:8f:bf:a4:c4:6e:8e:36:3f:43:3f:89:e2:92:
75:fd:23:52:76:af:82:80:50:96:d2:e2:4a:9b:38:75:87:61:
b1:86:d5:21:3d:1b:3e:57:ee:fa:e6:34:5c:d3:1c:cd:fe:53:
51:29:ae:97:5a:bb:5d:a5:15:47:db:7c:1d:69:44:bf:82:c3:
d3:cc:51:e9:50:ab:45:b3:c2:5c:30:dc:73:da:d4:52:8b:0a:
af:2b:4e:c3:02:13:4a:88:72:46:f8:a1:8d:e1:38:e7:3e:cc:
37:eb:cd:e5:a2:f3:37:21:2b:80:87:cb:94:df:a5:60:d4:a5:
fe:f4:98:5a:e2:77:39:78:1d:da:0a:ac:80:f8:09:d2:60:99:
10:5b:0f:5d:27:de:d1:65:93:c7:24:e6:55:fe:be:03:2e:0a:
73:dd:2b:e0:80:b2:6e:45:83:66:ec:c4:75:6b:a6:34:98:ca:
0c:0d:1c:81:7f:a1:61:03:08:53:2b:3b:bc:6a:93:1d:c4:22:
d9:c9:18:36:48:11:3f:88:22:94:77:6f:72:fa:5f:a3:d0:60:
08:b0:58:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:00 2026 by rpki-client