
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/161983C2B9EB11EDB53AC21BC4F9AE02.roa
File: 161983C2B9EB11EDB53AC21BC4F9AE02.roa (raw, json)
Hash identifier: FrbVDLC2LT0B4deWlUjksBQjibCYTbAIKmE7zJz3gZg=
Subject key identifier: 3C:7F:F4:7A:5B:3C:82:C7:11:79:F7:40:95:64:49:FE:8F:E2:E2:46
Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Certificate serial: 13D2
Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/161983C2B9EB11EDB53AC21BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:33:18 +0000
ROA not before: Sat 20 Dec 2025 17:14:41 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 54600
IP address blocks: 2403:cfc0:1008::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5074 (0x13d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Validity
Not Before: Dec 20 17:14:41 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a4866e-dee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:b5:a2:7f:ef:eb:5d:c2:26:fd:92:57:d9:
71:ca:20:23:87:b2:27:6b:55:6f:e2:0b:21:a5:a2:
93:93:39:c6:9e:04:b8:ab:76:90:46:6f:0e:ed:b3:
68:7d:13:73:d9:7b:93:20:c3:bb:49:cc:fc:ef:ad:
8c:30:09:e7:d2:d2:46:d4:c2:28:07:1e:40:61:bf:
94:8e:1e:0a:2f:0f:bc:a8:67:d5:db:00:99:e9:3b:
d2:b3:51:86:3d:bc:ee:b2:53:2e:0f:13:37:51:29:
f1:a3:42:35:93:1c:72:bd:98:c9:df:58:2f:71:6d:
38:84:b5:02:34:a0:a2:cc:3b:34:3a:6f:f9:9f:0c:
01:4e:e4:99:69:a7:23:f7:b9:17:cd:aa:e2:cd:13:
48:ea:67:c2:a4:0d:d7:4b:f1:64:44:6f:1c:d3:f8:
c9:56:72:a0:86:9f:72:2a:ff:04:16:f7:09:94:e6:
f1:ed:cf:57:5f:7e:90:25:6a:13:65:10:f3:36:b2:
30:ad:a0:3b:78:32:73:84:21:99:da:8b:77:33:64:
f6:18:88:62:1e:08:41:9b:27:57:1f:2e:04:fb:f6:
03:8f:7e:ff:36:4b:1f:db:d8:cf:d9:1c:0e:5b:89:
6f:e8:7a:66:ef:70:46:f3:0b:a3:6d:85:3a:25:8f:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7F:F4:7A:5B:3C:82:C7:11:79:F7:40:95:64:49:FE:8F:E2:E2:46
X509v3 Authority Key Identifier:
keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/161983C2B9EB11EDB53AC21BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:cfc0:1008::/48
Signature Algorithm: sha256WithRSAEncryption
a4:17:3e:f5:6b:90:28:78:c9:00:e1:5f:77:c2:25:89:e6:d6:
db:28:9c:b8:55:3a:5c:e6:e9:3d:96:bc:2c:55:62:07:f5:37:
c7:7d:4e:c6:79:56:fe:67:4d:36:5f:3a:19:7a:a7:b0:6e:76:
9f:6a:ac:da:d0:b0:a6:f8:2d:1a:d4:1c:3e:45:8a:81:9c:aa:
9c:83:de:0f:65:af:fe:8a:f5:cb:27:12:ac:e0:aa:12:39:67:
ba:b2:a1:08:a2:59:22:ae:29:84:61:65:bc:84:a5:1d:2b:9a:
3b:32:11:b2:d1:0c:e5:cd:c0:47:2e:22:8a:4f:97:2b:02:c2:
3e:03:5c:e7:79:96:53:08:86:91:b7:de:4d:7d:f8:05:a4:d2:
1e:34:fa:69:f6:af:60:99:42:12:09:ce:3a:ec:5e:33:0b:d9:
37:04:b3:bb:05:67:16:98:79:ec:43:59:02:c2:d8:f7:e3:3a:
f5:4d:c3:73:98:f0:0d:e0:1c:aa:a5:75:96:52:ad:03:fc:21:
29:4a:5d:72:5d:cd:84:7e:bf:7c:38:cd:51:f7:24:4f:20:95:
ca:29:00:e2:24:2b:8e:e9:30:ec:02:f1:dc:e6:09:3a:4a:08:
fe:e1:63:74:80:6e:02:53:f4:c0:5e:d3:5b:9c:1f:70:9f:69:
81:9d:0e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:26 2026 by rpki-client