
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/0A34182CE9FC11EF9D3DE972C4F9AE02.roa
File: 0A34182CE9FC11EF9D3DE972C4F9AE02.roa (raw, json)
Hash identifier: 5aZLhkHexwZy2OGn8j73qB9Fr54SX5MLYLq1gSETLgc=
Subject key identifier: A2:3C:66:02:7A:74:D1:86:49:B2:25:60:DD:A0:CE:15:0A:EC:F0:A8
Certificate issuer: /CN=A919E1FC/serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
Certificate serial: E8
Authority key identifier: CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/0A34182CE9FC11EF9D3DE972C4F9AE02.roa
Signing time: Wed 25 Mar 2026 06:43:43 +0000
ROA not before: Wed 25 Mar 2026 06:43:43 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 16509
IP address blocks: 163.61.116.0/24 maxlen: 24
2001:df5:14c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl
rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:43:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E1FC, serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
Validity
Not Before: Mar 25 06:43:43 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c3841f-f320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:89:47:a0:04:bf:87:03:02:29:af:16:60:
c1:d8:59:6c:f4:c9:5f:72:b2:69:3c:1c:26:38:71:
19:27:6b:6b:28:9d:78:f9:20:a9:20:21:59:c8:03:
85:15:cf:b3:5c:32:f2:a4:9d:d2:22:3f:da:27:da:
ff:31:17:f4:b8:89:9d:0e:55:72:40:f3:4b:a9:1d:
02:a9:64:99:36:59:47:78:b8:d3:ee:37:d9:bf:bb:
bb:2a:ac:c9:8c:fc:de:50:02:cc:94:5a:fc:12:e4:
58:6f:c0:60:f9:39:68:77:ba:a3:90:9e:6e:0f:a9:
a9:33:a7:9a:b6:20:0c:ae:eb:46:52:c2:d9:68:80:
69:dd:5f:d6:d7:58:8a:c0:e5:47:80:49:61:53:36:
9a:b4:87:8f:26:b9:8a:cb:26:fe:46:13:61:c9:59:
5e:16:b8:4b:28:bb:26:ea:41:b7:5e:f2:03:41:6d:
d7:9e:a9:7a:76:42:1e:b4:74:31:c0:f6:60:a2:0d:
83:fe:ea:dc:3e:2b:a9:a0:23:cd:65:56:85:57:5e:
d9:b1:2a:20:8e:46:7c:13:d0:16:6a:fd:94:0b:48:
20:10:42:22:5e:cf:0c:58:f3:df:88:15:45:59:e6:
f6:b7:45:82:43:ca:74:43:97:39:64:32:4f:79:23:
da:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3C:66:02:7A:74:D1:86:49:B2:25:60:DD:A0:CE:15:0A:EC:F0:A8
X509v3 Authority Key Identifier:
keyid:CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/0A34182CE9FC11EF9D3DE972C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.116.0/24
IPv6:
2001:df5:14c0::/48
Signature Algorithm: sha256WithRSAEncryption
6b:63:f2:27:cd:d1:e3:81:12:b2:55:fc:48:09:94:e3:7a:1f:
5e:2b:75:e7:52:96:85:31:9b:0b:69:6a:da:c8:87:0f:f4:4c:
a2:c0:f4:b8:67:b8:b3:a7:6f:b5:08:e8:b8:61:53:07:d7:ed:
3d:99:da:2f:98:70:0f:c3:d6:28:fb:3b:d1:3d:c3:98:55:e5:
d7:b6:91:8d:ed:2e:73:22:7c:37:ac:57:62:42:60:a1:75:e6:
cc:ef:44:86:a8:91:05:26:ce:1b:09:03:99:65:9b:8d:f6:fc:
9d:e4:e8:96:56:30:c6:0a:cf:80:94:92:a3:de:a9:54:46:86:
6e:d1:d7:66:f6:cd:45:45:4a:7f:5b:03:c8:11:30:56:45:07:
f9:dc:3e:a0:26:e2:60:fe:ee:b5:a1:93:26:01:ed:05:ce:4b:
30:f9:7c:4b:d5:e0:50:08:2e:a5:4e:04:62:19:c3:3d:e2:58:
29:2f:75:77:23:9f:cd:95:e1:8c:1a:a2:55:09:81:25:ac:0f:
11:c6:c5:bd:99:88:60:d7:04:18:58:c9:8c:d3:b2:2d:05:75:
7a:b4:34:3d:a0:a3:26:40:38:6e:34:6c:42:a7:3c:53:ce:21:
38:99:fc:2c:da:5c:6b:3b:ed:87:79:54:54:18:dd:ed:24:95:
70:34:81:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:16 2026 by rpki-client