
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/90798692AA0A11EA89D5161EC4F9AE02.roa
File: 90798692AA0A11EA89D5161EC4F9AE02.roa (raw, json)
Hash identifier: RObxtW51NsjZz83e+7RyvdJYnFl+EIf82gNL/++qoe8=
Subject key identifier: 03:E8:9E:DF:21:97:D2:E5:6A:AE:47:1C:D6:97:3D:70:91:0B:FB:0C
Certificate issuer: /CN=A916B4B7/serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B
Certificate serial: 09AF
Authority key identifier: CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/90798692AA0A11EA89D5161EC4F9AE02.roa
Signing time: Fri 08 May 2026 20:25:34 +0000
ROA not before: Fri 08 May 2026 20:25:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38567
IP address blocks: 202.45.149.0/24 maxlen: 24
203.14.176.0/24 maxlen: 24
2001:df0:65::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl
rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2479 (0x9af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B4B7, serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B
Validity
Not Before: May 8 20:25:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69fe46be-94cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:5d:a5:9b:52:62:cb:32:88:0a:14:b5:bb:
01:de:f2:96:0a:81:ff:14:b4:02:df:c0:36:20:a5:
2c:8b:49:70:ec:4f:49:65:23:50:8d:b9:ac:59:1e:
08:61:f2:82:5c:7e:23:fb:e5:cb:18:74:57:5e:6f:
9f:ad:9d:52:ec:ba:e7:0d:38:1b:ae:41:33:fb:12:
00:a1:cc:9d:52:7e:ef:00:00:ff:fe:07:ee:7f:3f:
8d:02:47:7b:84:7d:76:d5:d7:21:8a:7e:6e:c4:90:
74:f4:2d:a2:0b:da:9a:1d:bf:e0:f6:4a:e8:cd:85:
7a:aa:c1:3f:f9:a9:5d:d3:42:7c:28:75:d7:a9:1a:
0e:53:86:03:86:f1:80:ce:cf:42:cb:bf:6d:ef:d5:
9b:e3:8d:5a:1e:51:1c:50:1d:0f:0a:c0:4e:8e:f1:
0f:38:c3:03:81:e5:99:22:7e:0e:7f:75:f6:06:13:
1c:ba:7a:48:31:30:0d:d4:b0:8a:a4:49:ef:84:0d:
d4:5b:b5:5b:b7:50:0c:8d:8c:e9:36:a5:bf:13:68:
8b:27:a8:61:82:00:5b:fe:f5:6f:77:32:5e:3c:65:
de:f5:3a:cd:e5:42:4b:ea:18:44:5a:f9:0e:2f:72:
e6:8a:42:03:17:65:53:47:a9:8b:13:05:b5:6a:d5:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E8:9E:DF:21:97:D2:E5:6A:AE:47:1C:D6:97:3D:70:91:0B:FB:0C
X509v3 Authority Key Identifier:
keyid:CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/90798692AA0A11EA89D5161EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.45.149.0/24
203.14.176.0/24
IPv6:
2001:df0:65::/48
Signature Algorithm: sha256WithRSAEncryption
5e:e3:cf:d7:c8:aa:8e:6f:a1:e6:9e:8a:26:e4:ff:89:e1:9a:
4a:25:cf:6b:4b:9d:8b:71:ef:bf:31:c2:cf:04:21:72:3d:c8:
ea:29:9c:6d:c2:44:ec:4c:67:54:44:21:83:99:b5:bc:ca:97:
d1:dd:da:34:1b:0d:fb:86:c1:d5:ad:9c:5a:3b:7b:b1:38:8e:
7f:7b:f0:02:64:64:d4:b3:16:d1:9d:c8:1b:5f:8f:1d:91:a9:
a7:54:5b:7c:b4:5c:4b:d7:6a:03:d2:dd:14:b8:04:94:c6:d5:
6c:23:e8:c7:2b:2b:22:75:8f:43:53:41:e1:3f:90:cb:54:0c:
0e:f2:df:49:12:c6:6a:45:8d:e4:94:05:52:4e:86:b8:71:be:
a4:58:1d:f2:e4:0f:25:72:29:90:65:65:c8:76:6d:e3:95:82:
13:5b:a2:65:e1:53:e4:11:d4:ee:0a:7d:7e:46:a1:f9:eb:c9:
8f:4a:dd:93:da:f0:fb:51:7b:39:eb:08:a4:57:c6:12:81:f9:
62:23:41:43:80:5c:62:d9:1e:ae:93:1a:0b:c0:da:3a:ab:83:
19:2c:31:8f:de:a2:ec:07:38:e3:ec:bf:af:37:ca:f1:8e:9d:
35:e8:88:d0:76:61:f0:f1:ff:26:be:ed:4b:eb:8b:b2:63:dc:
43:5a:8a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:32:25 2026 by rpki-client