
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/413AD9F852E411EC9E19AA2FC4F9AE02.roa
File: 413AD9F852E411EC9E19AA2FC4F9AE02.roa (raw, json)
Hash identifier: 6vDTx1Sxq8tUZv93hoBcq2yOxm15beDyF9zkAam3IFw=
Subject key identifier: 51:2E:29:6F:42:48:49:76:BF:A7:1E:34:F4:64:54:2B:9D:CF:FC:29
Certificate issuer: /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
Certificate serial: 0578
Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/413AD9F852E411EC9E19AA2FC4F9AE02.roa
Signing time: Fri 17 Jul 2026 00:25:32 +0000
ROA not before: Fri 17 Jul 2026 00:25:32 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 14618
IP address blocks: 202.92.192.0/24 maxlen: 24
202.92.193.0/24 maxlen: 24
202.92.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl
rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1400 (0x578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
Validity
Not Before: Jul 17 00:25:32 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a59767c-05c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0b:65:60:1f:be:18:58:cf:93:d0:58:1d:7a:
d4:8b:58:ab:bb:6a:77:ef:08:8c:26:5d:08:81:42:
bc:a1:4a:5b:b9:81:75:8c:e7:2f:f5:27:82:a4:15:
7e:0f:d9:4d:b8:1b:b4:6d:50:dd:0f:bb:ba:e4:76:
cb:12:a6:c7:c1:fb:05:d8:d2:87:33:f6:a7:c0:63:
75:2b:45:cf:6a:13:89:0a:33:a5:70:6a:22:26:cf:
d9:da:52:c7:5f:7f:b5:54:e9:89:df:1c:4a:aa:bd:
07:9f:9b:db:db:44:6f:86:07:3c:aa:fe:a1:2c:5f:
4c:0d:bd:67:3e:45:ae:5f:56:b0:dd:e7:0c:0a:b4:
8a:4b:a0:d3:60:25:7c:2d:a3:14:f8:e7:82:f7:69:
66:75:26:f0:bb:a2:95:36:26:01:e2:45:c8:1b:8d:
18:1a:4d:cd:d8:fc:fa:ad:ab:8d:73:90:b7:57:d4:
fc:ac:ef:3c:25:c6:d5:57:9c:e6:84:bf:ff:55:c4:
dc:61:5b:4c:32:97:8e:96:be:f5:e2:41:56:91:56:
8a:54:0e:a3:81:a3:c4:e3:13:87:01:f3:a8:32:72:
7d:43:e9:96:9d:66:13:2d:8e:45:f0:41:54:5d:01:
40:ba:12:d3:a1:28:99:87:f4:8c:57:d0:1f:0a:14:
bd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2E:29:6F:42:48:49:76:BF:A7:1E:34:F4:64:54:2B:9D:CF:FC:29
X509v3 Authority Key Identifier:
keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/413AD9F852E411EC9E19AA2FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.92.192.0/23
202.92.196.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:fe:3b:01:2f:aa:34:85:76:2d:f6:d9:6f:36:92:b1:87:a5:
fb:93:b1:b9:86:bd:da:1b:c8:5a:a9:14:68:61:5d:28:81:da:
ba:fe:2d:52:50:bb:bf:58:9d:6b:94:3a:f6:88:eb:ad:60:93:
19:67:2c:b3:21:b6:c0:fa:9f:c4:2f:0e:d1:68:6e:b7:b1:97:
48:47:de:88:f2:da:01:fd:02:c3:7b:09:d0:74:5b:b7:e0:9e:
be:26:a3:a3:00:e6:4e:cb:c1:93:62:41:00:79:9e:e9:74:08:
c9:e5:85:a8:2e:6d:5f:41:dd:67:26:df:ed:10:e8:bc:c0:34:
89:57:6f:91:0b:6d:37:3b:57:fb:01:b9:c7:53:9f:ba:df:a7:
8d:d0:d2:c1:13:fb:a2:cc:ac:4c:91:ce:57:d8:85:0e:a8:dc:
66:3c:33:e0:45:d6:44:e3:f6:f9:54:02:4a:de:fa:49:f2:2a:
7f:b8:19:79:a3:9b:61:b8:50:a7:e8:c6:47:b1:0b:04:92:8d:
40:d9:33:8c:72:f5:8e:db:71:55:2e:20:78:1a:66:a6:43:12:
c0:77:f3:0d:96:36:81:f0:c0:ee:81:33:79:40:79:6f:2f:71:
ab:b9:0f:22:52:aa:60:86:a0:4a:b5:46:ff:eb:9b:fc:51:fa:
ed:e6:5c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:18 2026 by rpki-client