
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/B02CCB344E0C11EF9175067FC4F9AE02.roa
File: B02CCB344E0C11EF9175067FC4F9AE02.roa (raw, json)
Hash identifier: 9CYjpAjEKPnEF+FQPILjYe8BG993NnJI6vG3A2BwbG0=
Subject key identifier: B0:C1:6A:24:08:F4:D7:E3:93:48:1A:FD:38:32:4D:60:2E:E5:1E:4B
Certificate issuer: /CN=A916E44B/serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
Certificate serial: 01B0
Authority key identifier: 81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/B02CCB344E0C11EF9175067FC4F9AE02.roa
Signing time: Fri 21 Aug 2026 04:56:50 +0000
ROA not before: Fri 21 Aug 2026 04:56:50 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 16509
IP address blocks: 122.252.145.0/24 maxlen: 24
122.252.146.0/24 maxlen: 24
122.252.147.0/24 maxlen: 24
122.252.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl
rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 04:47:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E44B, serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
Validity
Not Before: Aug 21 04:56:50 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a87da92-098c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:29:89:2f:c2:a9:23:ec:67:62:c9:ae:d6:06:
32:9a:19:7b:e5:15:46:69:c7:6a:f4:71:bf:5c:5e:
2b:fe:fe:76:3e:1c:66:68:43:fe:d0:1d:7f:a9:15:
b5:cc:55:19:e9:fb:24:4d:e4:2e:75:ec:1a:9a:e8:
4c:f8:84:fe:49:50:dd:c5:77:0d:ed:30:02:c1:d6:
21:8f:ae:bf:64:e4:26:9d:6b:48:8d:bd:14:e9:72:
bb:73:fc:02:3d:c6:e3:cb:45:b2:17:9d:f0:95:28:
e6:70:44:97:13:1e:b2:ee:1b:7d:a4:d0:ee:b9:7a:
55:37:5e:b7:27:16:01:d6:ce:7a:86:66:1b:a6:fd:
62:2d:4d:d6:ec:f3:d9:3b:8a:3e:b6:c8:65:82:97:
d1:80:71:d9:60:09:e8:b9:16:db:b6:b0:17:48:12:
15:a2:47:99:12:47:bb:7b:5d:3f:51:f0:2f:c3:7d:
5c:de:17:7a:3e:fe:9b:15:06:4d:56:cb:dc:f3:89:
83:f9:8d:25:48:3f:b4:03:cd:f8:88:5e:ac:15:7c:
52:bf:f5:8b:c0:b5:48:52:84:62:2c:09:5e:44:7e:
37:34:f8:89:18:ca:ed:22:9f:a9:eb:dd:44:49:e4:
11:32:20:60:d2:1f:64:60:cf:8e:57:d6:48:b0:c9:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C1:6A:24:08:F4:D7:E3:93:48:1A:FD:38:32:4D:60:2E:E5:1E:4B
X509v3 Authority Key Identifier:
keyid:81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/B02CCB344E0C11EF9175067FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.252.145.0-122.252.151.255
Signature Algorithm: sha256WithRSAEncryption
37:ba:57:d1:cb:dc:36:3f:95:31:22:3e:94:61:fe:42:69:97:
ff:56:4b:6d:fa:a7:05:fc:28:e3:2e:2e:60:66:b5:3d:23:f2:
0c:bd:db:d5:43:e0:5d:46:87:0d:6a:7c:f7:6c:39:b4:13:9a:
d2:6a:f0:0e:90:74:17:39:7b:06:3a:cf:47:1a:7f:a1:43:50:
e0:50:61:46:12:8d:dd:ce:60:51:c9:86:f1:d4:bd:30:41:94:
30:16:4e:74:19:b6:6d:2b:19:02:79:b8:f4:35:13:e7:77:17:
42:4c:7f:86:c1:7b:b7:c7:73:5e:2a:67:e4:28:3c:78:fa:44:
b0:cd:08:05:f6:09:1e:1c:ee:a2:d0:d1:5c:34:6b:b2:a7:fa:
b5:72:6f:cf:d6:e3:44:3c:1a:ac:b5:47:5a:8e:c4:94:aa:1e:
2c:d1:7d:9a:04:1f:16:6f:90:9c:47:e6:e2:71:b1:0f:a7:2c:
5a:5a:25:8c:2d:45:e1:4a:0b:70:ce:59:cd:8e:db:46:52:8a:
2e:7f:22:b2:70:b2:a6:9a:7b:7d:d7:f4:97:9e:4d:c5:a9:87:
57:28:df:4e:b6:0d:ff:a7:3b:9b:6d:09:00:db:a9:18:9c:f6:
d8:1e:b2:2e:61:b6:50:bb:af:63:4e:d7:3c:b1:e8:2c:bd:46:
fe:ed:38:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:26:56 2026 by rpki-client