
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/1468305C31A811EE939F1D33C4F9AE02.roa
File: 1468305C31A811EE939F1D33C4F9AE02.roa (raw, json)
Hash identifier: nzgMbwU42mINAJdZoRjX1pUDKN+WXmiafTWb0wxAKf0=
Subject key identifier: 90:70:BB:15:E9:56:AD:E4:A3:D3:BE:78:E4:6B:C2:DD:7F:C5:4A:FE
Certificate issuer: /CN=A917EFA9/serialNumber=7B91A8B011D619C4271D45203A0E33D9185EF781
Certificate serial: 0201
Authority key identifier: 7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/1468305C31A811EE939F1D33C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:17:44 +0000
ROA not before: Wed 03 Sep 2025 04:22:34 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 23878
IP address blocks: 182.16.152.0/22 maxlen: 22
182.16.152.0/24 maxlen: 24
182.16.153.0/24 maxlen: 24
182.16.154.0/24 maxlen: 24
182.16.155.0/24 maxlen: 24
202.62.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.crl
rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EFA9, serialNumber=7B91A8B011D619C4271D45203A0E33D9185EF781
Validity
Not Before: Sep 3 04:22:34 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a41248-8f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:bc:7e:65:de:a1:55:76:b3:be:12:15:ce:
6b:a0:fc:c2:c7:a7:ed:b7:4c:62:23:fc:64:ef:f8:
53:52:4c:af:52:c7:a8:30:3a:d6:bd:36:a5:f7:1e:
e6:ac:ca:3b:8b:2d:6f:da:57:b2:78:58:f1:31:16:
13:57:a8:f5:23:75:7e:23:74:53:22:54:16:6b:54:
55:df:0a:88:1a:58:7c:2f:d5:f7:e9:fa:1d:c5:9a:
a6:71:de:73:19:77:cb:54:20:19:4b:e4:50:87:ee:
8e:24:0a:e3:67:69:ee:88:2f:75:20:04:9c:11:de:
f3:e4:29:21:8b:ea:a6:b8:f0:c2:54:6b:9b:9f:07:
a3:1c:7b:61:84:e1:e3:7a:cf:20:f3:e9:de:cb:22:
ab:08:23:94:13:19:53:4c:6c:a0:da:db:e9:4f:d5:
14:7d:79:67:da:5b:a7:dd:db:48:c3:05:51:82:ee:
9b:06:ef:eb:34:02:bd:b2:4e:a9:5a:ad:ca:ee:90:
da:5a:94:90:86:e9:90:0c:f9:cc:50:e6:01:53:33:
2c:05:b6:04:ff:be:b6:ee:6a:4b:da:03:00:64:17:
16:c2:aa:c3:34:3d:5a:7d:c5:f7:61:c8:2c:dd:f9:
91:bd:6f:d9:5e:05:a1:22:c5:b4:24:fb:e0:d8:24:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:70:BB:15:E9:56:AD:E4:A3:D3:BE:78:E4:6B:C2:DD:7F:C5:4A:FE
X509v3 Authority Key Identifier:
keyid:7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/1468305C31A811EE939F1D33C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
182.16.152.0/22
202.62.245.0/24
Signature Algorithm: sha256WithRSAEncryption
72:01:c5:69:d7:c3:d1:df:bc:b3:96:05:b8:2f:2b:67:04:53:
83:67:62:96:37:1d:8c:28:e4:de:c5:ac:38:27:39:86:b1:e2:
be:54:01:83:23:2c:4d:be:24:ab:80:d1:7e:b9:79:df:db:d1:
aa:e9:4f:b6:db:92:e0:07:bf:74:2b:ce:50:b4:c9:c3:2b:7c:
6b:8c:9c:fd:67:af:18:7d:8b:39:b1:ab:44:76:e5:64:b9:23:
2f:bf:90:2b:27:48:74:4d:28:bd:ec:02:60:5e:62:3c:fe:3a:
da:1f:e1:00:08:7e:78:eb:61:dd:d3:ab:c1:b4:a8:cf:6c:a7:
dd:4e:b6:57:21:82:a7:c0:d6:1a:6c:1b:35:2f:82:58:ab:fe:
43:ed:17:92:ce:68:26:3a:21:18:4a:d4:90:c8:b0:1d:85:f9:
0a:52:49:d6:73:b7:db:a5:24:f1:9a:48:6f:b0:20:4c:12:c4:
5c:fb:7c:2d:4e:5e:c7:7f:40:c1:38:a1:05:04:75:e4:7e:59:
d8:c8:9d:7b:79:27:41:7f:6a:2c:25:17:eb:66:fe:1f:98:f2:
74:3d:ec:cd:d6:90:7f:e9:35:18:9c:b4:53:85:e4:c2:0c:2c:
d8:bc:06:04:7e:ef:f8:c9:51:75:75:fe:18:d2:5a:01:1a:0a:
8e:e4:36:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:24:57 2026 by rpki-client