
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/2A3161763D9F11EEACFF646FC4F9AE02.roa
File: 2A3161763D9F11EEACFF646FC4F9AE02.roa (raw, json)
Hash identifier: dgLQAd17tzBsK66kQ0H0dwAp53SX6GdmC4ibG9feFVM=
Subject key identifier: 8F:59:DD:24:AF:4E:34:7F:1A:46:2E:A1:B4:43:76:43:45:2D:DF:20
Certificate issuer: /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Certificate serial: 1897
Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/2A3161763D9F11EEACFF646FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:42:05 +0000
ROA not before: Mon 22 Dec 2025 17:13:55 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 133398
IP address blocks: 2401:f9c0:2600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl
rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:25:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6295 (0x1897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A31E, serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Validity
Not Before: Dec 22 17:13:55 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46c5d-fc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:92:05:68:f4:a9:7b:09:74:86:af:a2:88:
fb:50:22:da:ba:2a:75:cd:fd:a3:b2:92:23:ba:ca:
e1:5a:91:e4:82:40:09:30:bd:38:92:e7:ed:6e:2e:
b9:98:87:16:88:15:28:63:dd:be:fe:d4:4e:1f:c2:
98:e6:04:d2:41:94:74:3b:a3:6b:27:b4:95:04:00:
b6:08:41:8f:d5:fe:3e:62:4c:02:cb:80:b5:59:e3:
6b:e7:f6:98:4c:60:0c:75:80:ea:d4:e9:cd:63:93:
77:bf:67:e2:d7:2e:b2:ba:52:41:78:28:c6:73:27:
22:24:16:ad:f3:6b:a4:6b:9c:95:67:e9:62:8c:58:
c3:d4:88:c2:e3:b3:47:b5:fd:52:1b:c7:a5:a7:df:
3f:1d:2d:7a:58:7d:a0:c6:a7:0e:73:dc:13:2d:90:
47:35:45:08:ad:9a:c2:36:38:f0:86:aa:52:aa:3d:
86:b2:75:e7:22:77:22:97:df:92:7d:f7:91:19:39:
f2:cd:0d:67:e5:dc:4e:21:b6:01:1e:d9:c1:40:89:
07:0c:46:ee:4e:89:0a:44:fd:b2:af:98:41:61:10:
0d:0f:c8:54:00:47:13:a2:31:ff:38:21:fa:0e:79:
7f:a8:73:fd:50:ab:ec:63:ed:44:56:7f:2e:7a:5c:
10:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:59:DD:24:AF:4E:34:7F:1A:46:2E:A1:B4:43:76:43:45:2D:DF:20
X509v3 Authority Key Identifier:
keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/2A3161763D9F11EEACFF646FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:f9c0:2600::/40
Signature Algorithm: sha256WithRSAEncryption
3c:02:f4:67:0b:55:c1:0a:46:30:2a:89:eb:c8:18:f7:1f:df:
30:ef:c8:8c:9c:e9:95:24:3f:fa:df:cf:5a:c1:6c:cd:2c:79:
8f:0b:6d:f3:5f:6b:d1:c4:b3:55:f3:d1:96:57:ae:51:45:b8:
ac:3b:26:42:ca:9b:77:1a:8e:22:97:97:fd:55:ae:9f:82:eb:
22:78:7a:39:25:f2:5a:1a:32:b5:61:af:81:eb:ec:41:1e:db:
08:a5:2f:7f:88:ac:33:57:c8:31:e8:a2:d7:96:9e:a4:96:cb:
aa:6a:4d:e1:5a:20:90:41:ac:1c:46:43:d4:e9:eb:28:ba:38:
55:2b:83:80:39:36:cb:d1:ff:96:ed:37:c1:64:a5:87:02:b8:
41:55:0a:7d:5c:9a:a5:17:2b:06:97:f4:2b:bc:3a:24:bd:e4:
23:01:53:f6:d3:bb:20:63:58:23:76:cd:7c:cb:ce:bc:b6:36:
9c:8f:0b:09:df:79:6c:e8:cb:69:f0:6a:0c:be:fe:d3:a7:9c:
83:06:14:ce:49:6a:49:5d:ae:af:9d:05:17:24:c0:dc:b3:f9:
27:b2:a3:27:1d:9c:7f:54:cc:3e:6e:a2:67:d4:dd:8b:12:ca:
37:d1:0c:07:56:5b:29:70:ab:35:99:37:af:d9:35:46:1b:34:
ae:e9:dc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:13:57 2026 by rpki-client