
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/79057E1CEB1011EEB9CE4F19C4F9AE02.roa
File: 79057E1CEB1011EEB9CE4F19C4F9AE02.roa (raw, json)
Hash identifier: XLu1VP1kxPDCxF31gfLm3nkT8+eZyJnAfii6Pmd0KGQ=
Subject key identifier: E9:96:9C:4D:38:F1:DD:56:C2:B2:1B:C4:16:30:4B:61:96:0B:E0:9F
Certificate issuer: /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4
Certificate serial: 019E
Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/79057E1CEB1011EEB9CE4F19C4F9AE02.roa
Signing time: Sat 02 May 2026 21:26:18 +0000
ROA not before: Sat 02 May 2026 21:26:18 +0000
ROA not after: Tue 01 Sep 2026 00:00:00 +0000
asID: 141015
IP address blocks: 103.154.240.0/23 maxlen: 24
2407:e340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl
rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E9F4, serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4
Validity
Not Before: May 2 21:26:18 2026 GMT
Not After : Sep 1 00:00:00 2026 GMT
Subject: CN=69f66bfa-ddce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:44:80:09:16:96:35:65:19:7e:e4:77:d2:
b4:47:1f:b9:59:6b:d6:10:ba:91:55:15:db:e1:9f:
f2:07:6e:8d:e6:a1:6b:38:ec:91:6c:95:88:aa:69:
d0:26:77:7c:c1:d2:f3:3b:f8:9e:b1:57:61:ad:d3:
d1:d9:d3:de:4b:f7:30:61:3e:5d:f4:b8:ca:a3:e2:
2d:62:ce:b6:91:1f:db:2b:ce:6c:3d:c3:e4:29:e8:
71:6c:58:14:ab:b1:d1:40:23:33:15:66:a8:53:7b:
5a:c9:12:9e:af:86:5e:b4:30:78:70:f5:a9:c0:4e:
ab:9c:75:94:d6:15:5c:12:9c:98:40:59:f1:a0:b9:
f0:47:6b:14:8a:ba:93:5b:4e:15:19:3a:cb:76:7c:
fa:74:bc:88:59:d6:82:a6:c4:6d:80:5c:47:3c:9c:
1f:df:99:4e:87:3f:4f:0a:e8:cc:65:e3:5c:b6:22:
07:88:ee:10:e7:ed:f4:25:81:16:1c:52:69:14:57:
21:04:aa:95:b6:b8:f8:76:e6:40:d2:8f:8c:38:cd:
7a:df:7a:dc:58:93:e2:d5:d7:94:e6:49:ad:4a:88:
7e:d6:16:d7:e1:ad:03:37:af:d1:b8:8a:71:a4:0e:
f7:6d:0d:c9:8d:59:98:a6:8e:7d:3d:48:6f:e1:4e:
b9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:96:9C:4D:38:F1:DD:56:C2:B2:1B:C4:16:30:4B:61:96:0B:E0:9F
X509v3 Authority Key Identifier:
keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/79057E1CEB1011EEB9CE4F19C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.154.240.0/23
IPv6:
2407:e340::/32
Signature Algorithm: sha256WithRSAEncryption
60:4f:dd:e9:84:8d:d6:8b:a1:cc:35:ad:85:44:b2:73:73:b1:
fd:9c:eb:bb:57:fe:83:53:33:36:1f:8c:62:d8:09:c7:4f:9f:
ef:2c:48:4a:40:58:f9:28:e7:e9:37:7b:53:fa:85:fc:3a:68:
1a:f5:0c:69:52:81:81:34:7e:69:4f:ab:ab:c5:b6:8b:2c:41:
ef:9c:9a:37:80:55:96:9e:86:54:3b:73:80:31:92:42:e6:12:
9f:5a:c7:ee:46:2a:78:8e:39:14:f2:f9:1b:c5:a4:ad:d8:3d:
8a:ee:13:df:c3:49:ef:c8:c0:36:3f:b2:9d:ba:0c:76:b5:76:
d1:b3:8e:5f:88:4b:34:21:63:cf:af:6d:2f:bf:70:e1:ef:cb:
11:2d:60:08:ba:43:94:6a:32:28:c9:63:37:b1:fe:cb:69:8a:
e1:50:ae:2d:07:d6:7b:ad:b4:be:a8:6f:16:2c:40:e7:03:7a:
2c:da:44:b7:1d:4d:d8:36:37:f8:55:f8:68:4e:67:4f:77:b2:
78:e7:d7:12:10:55:e4:bc:4e:9b:5b:21:c7:b9:b2:a5:e2:90:
be:d9:09:3e:b7:36:73:df:ed:f1:f5:0b:4a:3a:16:02:73:44:
d7:5c:d4:3b:7c:6e:a9:55:9f:5f:a1:a3:66:fd:20:ab:94:cf:
c5:59:b7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:48 2026 by rpki-client