
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/A16366C6FDF811EEA4D57274C4F9AE02.roa
File: A16366C6FDF811EEA4D57274C4F9AE02.roa (raw, json)
Hash identifier: d03oC9NyvqRx8U/l5SE7fqdhkjTewkYgCSF6lgvXCMc=
Subject key identifier: F6:82:A0:D0:EE:D1:8A:4A:EA:10:F7:CD:B8:FE:6F:2D:F5:80:9A:17
Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE
Certificate serial: 0215
Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/A16366C6FDF811EEA4D57274C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:00:30 +0000
ROA not before: Sun 29 Jun 2025 02:50:48 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 16509
IP address blocks: 217.10.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl
rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:14:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE
Validity
Not Before: Jun 29 02:50:48 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4386e-32f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7c:ac:33:8d:eb:ba:eb:b1:ba:34:75:97:8c:
74:8b:c5:25:2a:02:51:e0:8c:d1:ca:20:43:a3:84:
36:9b:42:5b:e1:67:36:5f:03:72:26:db:bb:f5:e8:
b2:db:19:bb:ee:5d:21:99:77:fe:f1:f9:c5:7f:b7:
0d:ff:64:ed:15:95:27:2b:04:d3:14:d6:20:43:75:
84:8e:63:d7:d5:ed:9e:d7:39:9d:10:84:e7:49:fa:
b0:0f:4e:77:c2:89:3e:60:25:4b:ce:ca:96:32:98:
84:fb:08:23:34:4d:e1:0b:56:f6:9b:b9:25:17:f9:
7e:67:c6:9e:a4:82:ac:2e:97:de:8b:af:5c:58:06:
c9:4a:14:c7:1c:eb:f5:b0:de:5c:38:82:d3:d3:e1:
c7:45:54:7a:ff:c3:ff:27:ab:dd:16:94:16:3c:74:
f5:29:ff:35:e3:34:ce:7a:13:d5:4e:12:20:24:2e:
e8:ab:2f:e8:5f:82:5f:fc:eb:b3:6d:d6:33:1a:4f:
ce:c6:d2:20:25:64:eb:61:d3:39:63:1e:60:dc:47:
2c:74:ee:0b:b9:de:89:c9:5c:6c:64:34:be:f1:63:
18:a8:6e:00:03:36:79:40:0f:e7:1e:13:1e:f0:4f:
13:23:52:5c:4d:f2:b9:c2:44:0e:16:e0:28:7c:d3:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:82:A0:D0:EE:D1:8A:4A:EA:10:F7:CD:B8:FE:6F:2D:F5:80:9A:17
X509v3 Authority Key Identifier:
keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/A16366C6FDF811EEA4D57274C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
217.10.231.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:c1:e3:03:80:a4:30:5c:21:ce:dd:6b:15:3f:22:c4:db:fd:
95:ca:9b:38:9d:3c:f6:44:61:f6:e7:cf:5d:19:33:d3:7f:de:
77:14:d7:0a:b3:8d:4f:a9:62:9a:4d:a1:60:b0:ab:ed:d7:d1:
7d:45:41:82:73:aa:4a:83:3a:22:84:08:c7:78:47:5e:ed:40:
0e:4c:d5:b3:ad:14:34:5b:cb:73:6f:72:9e:60:c1:77:aa:b3:
bf:87:ae:d8:72:c4:f8:ff:0f:a0:71:b9:42:9c:78:e9:5c:11:
f3:59:ed:bf:02:b8:cb:38:ab:d5:b7:ed:5d:21:8e:4e:aa:b1:
16:94:c7:54:58:d0:3e:b2:4d:12:ad:01:e8:21:b9:89:d6:1d:
99:71:74:86:d0:a2:b7:f7:bd:bb:58:14:23:a7:27:3a:28:cc:
fb:71:82:57:3e:e1:f9:4b:3a:e3:f8:6b:fa:e5:4c:1d:5a:88:
22:3f:e4:8c:b7:4f:a8:a1:70:09:4d:76:1b:92:95:ef:7a:6e:
b1:ef:c7:fa:c3:3a:7b:ea:eb:30:27:34:3e:75:be:20:f6:be:
54:ad:4f:ec:4a:2d:9c:b6:1e:68:c5:0b:cf:59:5a:5d:f5:2b:
5b:99:45:56:86:d0:9a:fa:0b:be:28:2d:45:00:7b:df:1d:87:
8a:b8:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:20:07 2026 by rpki-client