
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/00E00D025BC711F0886C5B59C4F9AE02.roa
File: 00E00D025BC711F0886C5B59C4F9AE02.roa (raw, json)
Hash identifier: XkQ1uVk/uXSTQGxlpz6vDp4cVf/noCzCGg0tuyD68XM=
Subject key identifier: BD:41:AD:85:54:37:51:71:01:F7:C4:3D:80:C1:6F:C2:C5:E6:CB:3D
Certificate issuer: /CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A
Certificate serial: 0124
Authority key identifier: 26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/00E00D025BC711F0886C5B59C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:26:07 +0000
ROA not before: Thu 23 Oct 2025 07:49:51 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 139052
IP address blocks: 160.187.102.0/23 maxlen: 23
160.187.102.0/24 maxlen: 24
160.187.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl
rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D6C1, serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A
Validity
Not Before: Oct 23 07:49:51 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a58fef-7462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6d:12:32:3d:d6:01:07:84:1f:87:1a:7f:04:
11:3d:40:eb:85:f6:cb:79:c3:28:9a:09:d9:3b:1b:
62:bb:22:8c:89:5e:66:8a:58:ae:68:65:6a:ea:5d:
5c:02:0c:03:19:0b:24:4c:17:69:20:24:af:e9:da:
aa:bd:fa:09:67:bc:99:68:03:0b:c2:5a:4a:09:0e:
e8:ca:b7:0b:bf:44:4c:be:87:16:66:f5:b6:b0:2a:
a7:92:18:2c:84:91:a8:b0:9e:5b:c0:6a:36:37:14:
27:60:c3:c5:62:f4:d7:a7:ff:c5:c2:43:ab:59:a9:
a4:45:04:7d:c7:4b:94:54:54:67:99:ab:1b:7c:db:
4a:57:7b:7f:f3:82:ea:2f:ae:1d:a4:3e:d3:14:c5:
4c:91:b5:dd:91:25:16:38:bb:51:6d:b4:bb:28:84:
bb:4b:a7:6b:4a:b3:24:a7:f0:c1:ca:bc:f7:83:30:
12:19:43:bd:5b:b0:fa:fc:26:99:11:58:87:ca:03:
f9:bd:87:b1:a6:e6:27:a0:60:8f:f3:68:4f:67:a2:
23:e1:d3:26:08:20:b8:fc:e6:2e:13:63:51:fc:6a:
4e:ab:72:fa:58:67:d3:a7:38:2d:9c:16:03:ef:bf:
4f:89:59:97:c0:04:91:1c:61:d2:69:99:21:16:09:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:41:AD:85:54:37:51:71:01:F7:C4:3D:80:C1:6F:C2:C5:E6:CB:3D
X509v3 Authority Key Identifier:
keyid:26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/00E00D025BC711F0886C5B59C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.102.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:64:bc:1e:89:8c:b5:70:a2:69:03:18:ec:5d:32:7c:7f:b8:
ba:da:b7:25:59:72:ae:fe:1e:af:24:b5:05:1a:79:3d:cf:3a:
6f:b2:02:ee:5f:5b:f1:c2:3f:a3:61:3d:03:e0:84:27:bc:27:
20:16:c3:d2:2c:70:8c:cd:7e:76:8e:0b:e0:3a:bd:38:5e:c6:
a5:8d:4f:c9:22:b4:75:75:e6:35:b5:94:bb:96:9b:77:dc:b9:
15:eb:be:a3:03:14:37:90:08:b5:52:ea:93:a4:81:ac:71:bc:
fd:3f:c1:6c:8f:c7:2a:d4:67:3e:9a:c7:69:b7:c9:06:1f:78:
15:a9:c9:92:f4:61:85:f8:5a:14:83:84:60:61:4f:8f:21:0d:
30:9a:9b:6e:23:61:a6:e7:a1:b5:79:f4:c1:4e:0f:f1:89:9b:
76:ad:b2:c1:ea:09:52:46:a9:b7:2b:ab:a8:d9:ef:77:f6:a6:
6f:ea:02:fd:ee:16:61:94:32:ee:00:30:dd:47:ee:3f:3d:0e:
bc:e8:96:61:9d:b3:84:98:7f:3a:01:f7:85:39:41:96:e8:9c:
42:21:e3:d4:e7:fa:62:1a:ee:60:be:1f:db:a5:8f:8c:69:12:
8e:3d:2e:c2:74:7c:e8:d1:1b:2f:90:bd:ce:6e:3b:84:a8:70:
e1:fb:5b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:54:40 2026 by rpki-client