
$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/16637998DB5311EE9F9F1F75C4F9AE02.roa
File: 16637998DB5311EE9F9F1F75C4F9AE02.roa (raw, json)
Hash identifier: 1+Pf4CxXczREzjqp7Ph5y8t73GX+ZHQlj5fHrRYlZ4o=
Subject key identifier: 96:07:F6:21:57:0A:37:DD:C1:30:05:C7:B5:86:67:A3:3E:1A:D9:EA
Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial: 0690
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/16637998DB5311EE9F9F1F75C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:37:11 +0000
ROA not before: Sun 03 Aug 2025 00:06:26 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 16509
IP address blocks: 1.44.96.0/24 maxlen: 24
203.17.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1680 (0x690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Validity
Not Before: Aug 3 00:06:26 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a48757-5a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:94:b5:16:14:50:4d:0e:da:e9:cc:55:9f:
fe:77:0c:52:52:fc:c2:da:b1:a0:2c:ea:db:56:8b:
9d:69:4f:06:19:80:27:19:d8:b4:9a:c6:db:3e:5c:
36:92:7a:be:70:e4:69:cd:5a:9b:59:6e:f7:d6:2d:
d7:a1:4c:42:6a:2f:5a:3b:59:35:74:d3:48:84:0d:
95:f0:61:35:c6:2e:fe:9b:80:03:a9:e7:75:a2:08:
40:e9:9b:28:61:e4:4c:82:e8:50:b2:d9:76:cd:9e:
d1:bf:a9:e9:e8:b8:20:74:e2:39:d1:6b:8b:6e:bf:
cd:a3:f5:89:12:61:7c:fb:90:fc:b7:27:4f:c5:9f:
72:7e:64:79:7a:74:f7:41:86:2d:16:5b:24:5d:d9:
23:4f:68:53:aa:37:62:a4:1c:64:31:80:41:ef:a0:
19:6f:98:8f:92:11:e6:fa:52:47:91:7f:96:89:ca:
64:dd:29:e5:7a:bc:43:7f:00:7f:42:a8:ac:65:4c:
5c:e9:da:e5:16:9c:b9:61:ae:6e:06:bc:03:a9:4c:
f4:b9:16:f2:53:b1:02:ad:9d:27:b3:78:06:c6:50:
22:1e:5d:e8:77:be:c3:b8:75:ac:e6:8a:15:03:d4:
28:1d:0f:f0:b9:48:ee:df:a2:91:cc:c6:99:7b:9c:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:07:F6:21:57:0A:37:DD:C1:30:05:C7:B5:86:67:A3:3E:1A:D9:EA
X509v3 Authority Key Identifier:
keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/16637998DB5311EE9F9F1F75C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
1.44.96.0/24
203.17.138.0/24
Signature Algorithm: sha256WithRSAEncryption
83:4f:3d:33:45:21:75:0a:2d:d5:29:3a:e8:9c:b8:c4:43:7c:
62:d1:09:a1:5c:5f:b6:cf:0e:25:e0:65:54:eb:13:bc:17:c7:
2a:9d:d8:35:d9:20:65:2f:ce:ad:99:e3:c1:37:1d:a6:b0:34:
07:95:82:fb:5b:7d:4e:cc:2e:1d:85:7c:e6:f7:86:46:99:f8:
16:99:17:18:2e:05:d4:64:8b:92:03:3e:66:85:41:15:3f:f3:
e2:71:09:00:a2:d6:37:60:bb:97:1c:65:26:a5:2a:53:a6:7a:
ee:cb:9a:64:75:4f:66:af:34:44:c6:d2:b9:8e:4d:3b:59:d1:
a1:73:9a:c1:c4:e3:47:0a:9c:ec:d5:11:22:77:2f:3a:9c:80:
8f:cc:87:bd:9d:5b:96:2e:d2:11:fd:8a:7d:71:f0:45:14:69:
42:85:36:7c:17:7f:4b:67:69:15:b8:64:65:0d:92:38:2b:15:
26:9f:18:d4:91:4d:42:b5:5c:05:91:38:c3:1d:1d:19:d3:ca:
11:97:6c:8a:33:f2:d2:92:50:6d:3a:aa:b0:20:1e:17:05:6f:
7d:8e:a0:b1:48:12:b2:f6:24:4b:79:aa:af:1a:bd:5e:69:5b:
a0:eb:d7:e2:9c:e1:c9:4d:35:0c:79:cf:80:fe:54:63:53:ed:
3b:42:4b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:57 2026 by rpki-client