
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/4B65B208288F11EFB3C88742C4F9AE02.roa
File: 4B65B208288F11EFB3C88742C4F9AE02.roa (raw, json)
Hash identifier: 8WQ5jrO/JsQ/EWqFraIhQFAlFnmywxhA6dmghU6aY4Y=
Subject key identifier: 49:8C:78:D0:AC:2D:49:66:90:A6:E3:5C:FA:82:2D:79:E1:9F:2B:6D
Certificate issuer: /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF
Certificate serial: 295D
Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/4B65B208288F11EFB3C88742C4F9AE02.roa
Signing time: Mon 02 Mar 2026 16:17:15 +0000
ROA not before: Mon 02 Mar 2026 16:17:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17770
IP address blocks: 182.161.0.0/19 maxlen: 19
202.124.160.0/21 maxlen: 21
2402:4000:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl
rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10589 (0x295d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A447, serialNumber=1F68258C526C5DBC715434357D380020146440EF
Validity
Not Before: Mar 2 16:17:15 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a5b80b-29b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:2c:33:4f:9a:11:da:33:61:bb:cb:5b:20:
40:d8:60:16:49:77:cd:b9:b1:2c:68:84:c9:64:26:
f0:45:43:05:0f:53:75:06:3e:15:d1:61:19:27:b0:
e0:da:52:82:84:29:64:35:ec:b4:c8:53:55:c5:2f:
55:23:8a:e5:b3:e7:1b:02:a1:08:7c:a7:bf:b0:6b:
e5:38:b7:8a:12:6e:4d:c6:81:0f:4c:f1:33:10:b0:
98:84:b2:46:84:2b:80:6f:86:2e:ba:1b:67:65:70:
8a:a0:42:9e:76:09:5c:b9:ff:93:95:20:eb:62:bc:
6e:c5:ef:a2:15:db:58:b9:33:08:2c:14:e0:fd:cc:
14:b1:17:9c:e9:eb:15:a2:f1:17:68:1d:9f:cc:3c:
a1:3b:0d:d2:f4:f2:d3:0f:29:0e:29:01:89:04:c1:
6c:ea:36:65:77:0c:96:ed:64:90:65:6b:5d:df:69:
0a:94:91:74:d2:c6:ae:55:a0:97:75:3a:16:7f:28:
09:f3:e9:a4:af:77:c6:61:7a:0b:91:1d:94:d7:bd:
c9:0d:49:15:39:11:76:8c:65:8c:ba:5c:8d:dd:ca:
1d:9b:5f:aa:d9:6f:a4:39:d6:2f:5e:f3:38:c5:1c:
85:f9:1b:fe:85:86:8f:0c:99:ba:d5:41:94:c7:50:
3f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8C:78:D0:AC:2D:49:66:90:A6:E3:5C:FA:82:2D:79:E1:9F:2B:6D
X509v3 Authority Key Identifier:
keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/4B65B208288F11EFB3C88742C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
182.161.0.0/19
202.124.160.0/21
IPv6:
2402:4000:f000::/36
Signature Algorithm: sha256WithRSAEncryption
4f:84:ba:54:43:2a:10:95:62:a7:5d:ed:c3:e9:2b:82:e7:9d:
7e:10:b2:75:5b:65:7a:6c:a8:20:5f:64:ac:8e:de:3e:16:cf:
ba:e9:3b:5a:2e:a9:32:61:6a:5b:07:96:a4:fb:8b:e1:ed:e4:
2d:3d:d7:09:d9:6f:96:71:34:31:c0:02:8a:6c:56:51:a9:47:
aa:76:3e:41:f9:a0:ce:5f:42:7f:ae:37:d5:1d:f1:29:d1:87:
de:09:2b:2b:a4:69:61:27:fe:77:c9:ce:2a:31:1c:e6:87:a8:
ae:31:b2:bf:60:7f:a4:db:ee:9f:73:1c:91:b3:8e:a0:ab:4e:
2b:15:e7:91:1a:26:03:d7:0d:d0:7a:de:e7:be:55:6d:d7:0b:
a4:31:16:34:40:f6:b6:43:41:53:b2:8e:24:86:2c:c4:49:a8:
7a:d8:4a:0d:06:fb:6e:cd:08:83:47:43:01:a0:69:f5:71:21:
77:c4:4c:4a:10:b3:23:50:6f:54:48:96:52:57:22:0c:df:44:
0a:a8:04:83:98:6b:b3:5e:cd:ee:a1:af:e5:fd:d7:f6:8b:22:
eb:3c:75:67:30:30:d8:ff:29:7c:6b:67:b4:50:68:35:dd:5a:
ea:a0:83:d3:c8:6b:67:90:a1:bf:f1:79:49:9d:88:bd:7f:12:
60:e0:4b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:25:32 2026 by rpki-client