
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/2036C856362911E8B6C37C78C4F9AE02.roa
File: 2036C856362911E8B6C37C78C4F9AE02.roa (raw, json)
Hash identifier: 8xUrdUhoqiEQtEMVlp3eU8zsGPwNwBU0y12jksKJnIs=
Subject key identifier: F4:2C:58:39:19:99:6C:3B:12:F3:71:55:1D:78:3B:59:12:BC:6E:3C
Certificate issuer: /CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950
Certificate serial: 160D
Authority key identifier: 37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/2036C856362911E8B6C37C78C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:16:50 +0000
ROA not before: Thu 10 Apr 2025 16:54:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23898
IP address blocks: 103.112.116.0/22 maxlen: 22
2402:a840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl
rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 16:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5645 (0x160d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DA1F, serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950
Validity
Not Before: Apr 10 16:54:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a40402-899a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:ba:4d:fd:f3:ad:35:33:0a:5d:95:55:bc:
af:25:42:f1:a3:43:f1:f9:db:bf:44:25:d1:68:fa:
11:76:18:26:16:68:23:a1:e6:79:b3:77:1b:35:86:
ac:81:4d:7f:35:8a:25:21:f6:55:dd:ea:02:00:e7:
2b:43:33:ef:02:be:56:50:5f:88:81:d4:e3:ae:16:
25:da:4b:38:c6:46:64:d8:68:b3:0d:b8:9f:75:69:
62:67:db:03:d2:48:28:fe:4f:38:e9:90:72:44:fe:
26:8c:73:e1:0d:61:5d:24:2e:8b:6f:b3:03:fb:2c:
66:ca:38:87:5c:b6:8f:49:91:18:d5:4c:02:39:ae:
e4:e7:90:92:01:c0:70:5e:7a:8d:60:6d:ae:bf:5e:
6d:2e:c8:07:dc:15:2d:cc:eb:76:6f:b8:7c:69:9d:
8d:29:02:81:d3:84:ee:63:e4:2d:2d:9d:8c:93:b3:
47:2e:7b:12:ec:70:75:00:d0:dd:34:3e:d1:6a:c6:
d4:1f:69:5e:ee:ce:40:a8:ab:43:e9:d9:90:06:00:
c4:2e:ef:e2:bb:7d:47:65:07:b8:c1:62:bf:67:fb:
72:b2:d5:ee:43:d6:60:13:22:66:a0:8a:9b:a7:05:
94:1a:69:f3:1c:fb:f3:56:2f:76:da:84:e0:a9:53:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2C:58:39:19:99:6C:3B:12:F3:71:55:1D:78:3B:59:12:BC:6E:3C
X509v3 Authority Key Identifier:
keyid:37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/2036C856362911E8B6C37C78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.112.116.0/22
IPv6:
2402:a840::/32
Signature Algorithm: sha256WithRSAEncryption
3b:2e:1a:b8:f5:d0:c1:5a:4d:a4:de:35:65:26:7f:9b:85:db:
34:32:68:63:45:e5:43:c6:40:d8:21:08:71:1e:5c:1b:a0:0d:
5d:18:89:52:3b:fc:e2:69:5d:10:9d:93:e7:72:fe:fb:3d:88:
f1:5e:94:db:a2:b4:2e:d7:8f:5e:d3:81:e5:54:59:0f:c1:c3:
57:08:5c:db:05:6b:bc:11:66:b7:22:d2:bd:36:44:63:ad:31:
a1:72:bc:c5:98:9b:44:c9:fa:37:fe:f9:7b:60:6a:7f:de:3d:
cf:44:b1:8a:c0:04:9d:1d:09:6f:80:66:b4:74:1c:94:b5:7b:
51:b2:68:bc:81:29:1e:c9:19:1c:19:15:da:8e:c5:1a:c9:f4:
8e:d0:a1:9a:27:57:cf:f4:e1:81:97:c0:33:1d:6c:8b:28:4c:
81:fe:df:0a:af:95:77:7e:c6:3b:17:ff:1b:0a:8c:0b:70:0c:
51:89:2e:12:a0:6f:d3:dd:67:2a:f5:2d:98:3e:b8:7d:a7:1b:
6b:b0:36:ff:da:5b:4f:94:06:79:d1:5c:bf:bb:d0:7b:59:84:
b3:dd:f4:bd:35:6d:ca:8a:87:e4:bb:dd:ac:30:b9:f0:e4:ec:
c4:9f:14:c1:fb:eb:e0:82:94:30:11:eb:58:ec:f9:85:41:b2:
a5:72:3f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:40:57 2026 by rpki-client