
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/610EBED6B06911EEA7F1DA31C4F9AE02.roa
File: 610EBED6B06911EEA7F1DA31C4F9AE02.roa (raw, json)
Hash identifier: yDPAA/Ta+7qaRs8iXkp6b7DGV807rjgOri8KlaXa7S8=
Subject key identifier: 90:48:CA:BA:B6:20:92:8D:DC:45:0A:6A:48:A6:49:7F:4A:E1:20:6F
Certificate issuer: /CN=A916B30C/serialNumber=BF08E8E0B2A676DCAEC49D519BFEC76546C2167E
Certificate serial: 01A9
Authority key identifier: BF:08:E8:E0:B2:A6:76:DC:AE:C4:9D:51:9B:FE:C7:65:46:C2:16:7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/610EBED6B06911EEA7F1DA31C4F9AE02.roa
Signing time: Mon 23 Mar 2026 03:38:59 +0000
ROA not before: Mon 23 Mar 2026 03:38:59 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 152323
IP address blocks: 157.10.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.crl
rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B30C, serialNumber=BF08E8E0B2A676DCAEC49D519BFEC76546C2167E
Validity
Not Before: Mar 23 03:38:59 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69c0b5d3-555e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:2c:e8:c8:ec:22:51:2c:0c:0f:e5:28:ad:
af:4e:af:b3:b0:5a:cd:ba:ea:0f:b6:12:51:9e:7b:
a9:94:db:87:e1:43:5b:97:2f:76:fd:b0:c4:1a:92:
f5:7c:e3:a2:0d:3e:22:5b:c5:a0:c7:82:b4:61:ac:
d0:85:63:7e:4f:fe:0b:9c:97:d7:36:67:86:a1:ea:
f5:a8:e2:6d:21:a0:af:77:7e:86:46:86:9f:da:95:
6f:81:21:96:a0:aa:a5:6e:9f:36:d2:30:39:a8:6a:
fd:9e:7b:17:d7:c8:f1:70:95:9d:1a:4f:d2:32:10:
99:1c:cb:02:d1:22:62:27:02:97:90:f4:10:df:c1:
f0:7c:c0:44:ea:69:cc:6f:73:6e:85:23:4a:dc:ac:
52:74:60:6b:6f:d9:93:4b:e0:31:7b:a0:ad:43:df:
bd:2d:f3:8e:4b:bd:44:cd:a6:37:78:8f:a4:86:9e:
59:31:ad:0b:90:87:8e:0e:c8:bf:ea:f9:be:39:69:
58:7c:52:dc:4d:6a:4b:fe:aa:eb:75:dd:da:7e:24:
5d:3b:80:cd:01:0a:e1:db:25:ce:f7:8b:bc:5b:a2:
f5:22:54:e4:c0:fe:e9:70:58:15:2d:32:1c:ef:9d:
62:96:99:df:61:f6:af:2d:4b:b5:9f:cd:f6:46:55:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:48:CA:BA:B6:20:92:8D:DC:45:0A:6A:48:A6:49:7F:4A:E1:20:6F
X509v3 Authority Key Identifier:
keyid:BF:08:E8:E0:B2:A6:76:DC:AE:C4:9D:51:9B:FE:C7:65:46:C2:16:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/610EBED6B06911EEA7F1DA31C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.166.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:ec:ed:e3:13:84:20:5d:0d:70:fa:72:7c:5b:b5:c9:ee:20:
2a:b7:c9:c2:3a:a0:7c:2d:6b:96:7b:b3:0f:15:59:4f:e3:a0:
79:f1:e2:a9:89:9b:03:6a:d2:78:d5:8e:b4:d7:f3:73:23:82:
c7:39:7c:ce:60:5f:d2:c7:8d:81:a8:c5:a3:70:63:80:97:90:
c1:38:10:2f:bb:b9:91:d6:e8:48:92:5a:7e:39:21:51:5f:9c:
37:ae:37:eb:9f:43:94:65:82:fb:d0:9d:f8:5b:9a:18:d9:84:
01:0c:5e:bf:87:a1:32:26:25:e4:3e:b7:28:b4:5f:f0:ec:32:
3f:f7:3f:4d:35:d9:4f:4d:ba:b8:da:b9:f9:60:02:20:24:4e:
23:08:11:67:da:9e:84:e1:b4:cc:e3:56:93:d0:34:76:70:39:
89:00:03:07:73:97:b4:ab:ae:d8:4d:02:c2:98:a3:02:48:ea:
86:ad:ad:73:e1:9d:53:99:1d:02:a7:ce:0a:dd:df:57:e6:f6:
2b:f8:9e:13:46:86:13:95:6b:a6:e1:f6:08:ba:ce:59:ad:38:
c9:f5:dd:66:26:d3:5b:8b:d7:d3:c0:a5:75:fe:65:49:8d:9a:
03:a3:2f:c9:08:df:98:2b:75:2a:e5:f0:73:f4:c3:f0:c6:e7:
54:56:0e:ad
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIzMEMxMTAvBgNVBAUTKEJGMDhFOEUwQjJBNjc2RENBRUM0OUQ1MTlCRkVDNzY1
NDZDMjE2N0UwHhcNMjYwMzIzMDMzODU5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWMwYjVkMy01NTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq9Qs6MjsIlEsDA/lKK2vTq+zsFrNuuoPthJRnnuplNuH4UNbly92/bDEGpL1
fOOiDT4iW8Wgx4K0YazQhWN+T/4LnJfXNmeGoer1qOJtIaCvd36GRoaf2pVvgSGW
oKqlbp820jA5qGr9nnsX18jxcJWdGk/SMhCZHMsC0SJiJwKXkPQQ38HwfMBE6mnM
b3NuhSNK3KxSdGBrb9mTS+Axe6CtQ9+9LfOOS71EzaY3eI+khp5ZMa0LkIeODsi/
6vm+OWlYfFLcTWpL/qrrdd3afiRdO4DNAQrh2yXO94u8W6L1IlTkwP7pcFgVLTIc
751ilpnfYfavLUu1n832RlXBWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJBIyrq2
IJKN3EUKakimSX9K4SBvMB8GA1UdIwQYMBaAFL8I6OCypnbcrsSdUZv+x2VGwhZ+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMwQy85MTVDQkEyNkIw
NUUxMUVFOTdDNzhCNzVDNEY5QUUwMi92d2pvNExLbWR0eXV4SjFSbV83SFpVYkNG
bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3Z3am80TEttZHR5dXhKMVJtXzdIWlViQ0ZuNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkIzMEMvOTE1Q0JBMjZCMDVFMTFFRTk3Qzc4Qjc1QzRGOUFFMDIvNjEwRUJFRDZC
MDY5MTFFRUE3RjFEQTMxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnQqmMA0GCSqGSIb3DQEBCwUAA4IBAQC37O3jE4QgXQ1w+nJ8W7XJ
7iAqt8nCOqB8LWuWe7MPFVlP46B58eKpiZsDatJ41Y601/NzI4LHOXzOYF/Sx42B
qMWjcGOAl5DBOBAvu7mR1uhIklp+OSFRX5w3rjfrn0OUZYL70J34W5oY2YQBDF6/
h6EyJiXkPrcotF/w7DI/9z9NNdlPTbq42rn5YAIgJE4jCBFn2p6E4bTM41aT0DR2
cDmJAAMHc5e0q67YTQLCmKMCSOqGra1z4Z1TmR0Cp84K3d9X5vYr+J4TRoYTlWum
4fYIus5ZrTjJ9d1mJtNbi9fTwKV1/mVJjZoDoy/JCN+YK3Uq5fBz9MPwxudUVg6t
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:25 2026 by rpki-client