
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/82FF48B4AB3C11EC9D6C1668C4F9AE02.roa
File: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (raw, json)
Hash identifier: Orzj86vjC93cWR06+QsMgW2wBDc5SO3ZdbwzBN1Cn0M=
Subject key identifier: 79:B3:0C:B0:7F:0A:77:F5:E0:75:82:7C:53:79:11:0F:DB:C4:84:49
Certificate issuer: /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Certificate serial: 0429
Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/82FF48B4AB3C11EC9D6C1668C4F9AE02.roa
Signing time: Fri 01 May 2026 01:30:45 +0000
ROA not before: Fri 01 May 2026 01:30:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136451
IP address blocks: 103.184.136.0/24 maxlen: 24
2001:df0:9140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1065 (0x429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Validity
Not Before: May 1 01:30:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f40245-649b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:a7:1f:c4:a1:46:c9:18:38:02:58:1c:43:
5d:50:2c:9d:45:6a:df:ca:2f:e3:af:40:8d:27:c7:
ab:35:f7:a5:07:7d:f6:c1:98:1e:34:b7:6d:01:5e:
ba:fa:a1:39:40:4d:ed:81:3a:00:d7:76:ea:2e:00:
7b:79:a0:82:08:92:d7:0d:99:2f:82:07:30:06:c6:
4f:55:63:67:bd:9d:45:67:42:cd:8f:fc:e7:50:77:
83:d0:d7:2d:a6:e3:09:3c:90:7b:a8:cd:23:f4:66:
a6:93:42:e9:c8:23:3c:9f:80:74:3a:0d:9f:68:2d:
93:a3:aa:d4:83:f7:1d:43:9a:b6:7a:dd:c1:1b:ff:
f5:36:b4:9f:dc:4c:7e:8a:f0:63:1c:52:b2:f0:26:
e0:f5:d2:38:0f:87:f1:b0:68:cb:2c:b4:76:0b:de:
b7:25:f5:b8:c2:10:1f:b7:9f:92:07:c5:5b:e7:2b:
02:39:97:19:45:27:9a:01:e5:40:c5:d3:e4:99:3a:
44:6d:96:5f:fb:9e:5e:84:9e:90:da:a1:ba:28:6f:
d4:99:fe:52:5b:f3:ad:83:28:8e:b0:0e:59:fd:51:
36:e8:fb:c5:0e:5b:03:e6:45:86:d7:4b:df:b1:11:
b6:1d:45:18:ee:32:b3:10:4f:35:f5:58:d0:44:e2:
d0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B3:0C:B0:7F:0A:77:F5:E0:75:82:7C:53:79:11:0F:DB:C4:84:49
X509v3 Authority Key Identifier:
keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/82FF48B4AB3C11EC9D6C1668C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.184.136.0/24
IPv6:
2001:df0:9140::/48
Signature Algorithm: sha256WithRSAEncryption
0f:2f:5b:9b:4d:23:1a:e2:6c:c3:0e:04:7a:f5:b9:7b:ff:ab:
8f:05:b7:e7:90:6b:f6:be:2d:4a:e7:f4:4d:a0:83:63:1a:32:
99:41:e2:9e:13:c5:c2:c4:45:18:79:fc:00:8d:0a:22:b1:9e:
e8:4f:3d:88:3d:be:9f:a4:1a:2d:4a:fc:37:cf:54:d9:ba:2e:
ee:04:45:d7:ee:3a:c7:d0:ca:34:c8:c4:3a:1d:30:32:e8:57:
5e:18:ce:4c:f4:19:ae:01:2f:57:fc:f2:34:8e:58:af:d1:09:
2a:7d:38:99:e6:92:2c:04:e8:6f:33:6f:5f:d3:49:55:69:f2:
67:72:4e:f0:e9:58:23:ea:1a:fb:f8:b8:7b:30:d0:7c:4e:dd:
5b:ca:3e:cb:ca:7c:50:2f:9a:e5:71:bb:c4:fe:29:85:cb:4a:
c3:69:c9:56:24:fa:1f:ad:96:a0:5d:d4:29:ba:ae:46:74:c9:
aa:e0:9e:33:c1:c2:bd:67:b7:22:8a:77:92:fb:96:20:9b:12:
a6:6d:dd:8c:01:ec:bb:b1:f4:00:8c:a7:17:0b:b2:be:ea:15:
0c:bc:f5:11:4a:07:10:a3:78:1d:7b:e4:b5:5d:b9:b4:61:de:
9d:6f:10:6c:67:da:ba:65:ac:5e:5d:44:60:b8:eb:41:94:96:
82:39:14:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:28 2026 by rpki-client