
$ rpki-client -vvf rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/67CD2004292211EB8A9B3D73C4F9AE02.roa
File: 67CD2004292211EB8A9B3D73C4F9AE02.roa (raw, json)
Hash identifier: tcE4gvT48rVkQCBAi3c3JCe7vlGJ11O5lP9n2KM3sUE=
Subject key identifier: 33:C4:5C:19:B6:4E:68:2E:60:20:68:DB:AD:7A:34:E5:44:B2:17:C2
Certificate issuer: /CN=A916432A/serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB
Certificate serial: 07FE
Authority key identifier: B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/67CD2004292211EB8A9B3D73C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:56:41 +0000
ROA not before: Sun 16 Nov 2025 20:11:29 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 136902
IP address blocks: 103.157.182.0/24 maxlen: 24
103.157.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl
rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2046 (0x7fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916432A, serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB
Validity
Not Before: Nov 16 20:11:29 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a42979-f65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:38:9d:f5:70:91:1b:a3:b6:83:e5:02:7d:
19:d6:6a:b9:cf:57:7b:b8:4a:14:90:2e:78:bf:de:
31:a0:e8:c0:3a:be:65:d1:83:57:e2:ea:44:e7:8b:
d6:1f:9e:29:2b:48:c8:1e:16:c8:1a:56:6e:cf:08:
b9:04:38:bc:c4:3c:0d:c2:4c:51:7c:b1:4c:42:9e:
3f:43:69:42:67:bc:92:58:bc:8c:d6:69:a8:98:ce:
02:ec:e5:13:6b:42:a9:3f:03:e4:a8:28:46:d1:72:
6c:39:ac:5b:bc:7b:85:f0:fb:b5:57:ef:d0:bf:9f:
2f:e7:02:84:c6:7f:c2:c4:d5:f7:d3:bc:16:d4:8f:
51:7a:6f:8f:94:78:da:ce:12:e9:89:1b:a1:9d:0e:
21:b3:2c:8b:63:bc:84:0b:0b:df:e5:cd:14:65:6c:
34:05:bb:31:61:72:45:b8:91:d7:7b:82:e3:4e:d7:
17:38:9d:4a:d8:d1:e8:39:44:d8:7b:11:80:bc:11:
d7:d5:e7:73:b6:cb:6d:98:8a:d1:97:26:b9:01:b7:
83:71:89:39:92:68:68:31:f8:4b:80:c2:b0:83:4b:
25:d7:71:e9:72:2a:70:45:7e:80:23:1a:42:cf:ca:
c7:31:16:43:55:74:df:ec:4b:92:c5:a2:71:43:fb:
fa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C4:5C:19:B6:4E:68:2E:60:20:68:DB:AD:7A:34:E5:44:B2:17:C2
X509v3 Authority Key Identifier:
keyid:B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/67CD2004292211EB8A9B3D73C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.157.182.0/23
Signature Algorithm: sha256WithRSAEncryption
64:c0:78:6a:7f:3e:3e:30:f2:f0:04:c5:a3:c6:14:62:98:27:
6f:21:0a:54:c4:72:00:0a:7c:b7:07:96:06:84:02:4c:06:ca:
6e:6a:4e:e6:dc:a3:8e:eb:9d:dd:fc:54:78:47:2a:ad:1e:36:
59:de:e7:73:4b:04:fd:4f:9b:be:2c:0e:39:82:9e:6b:37:9c:
44:52:2a:fb:ea:09:df:09:56:31:1a:f8:d8:63:e9:8b:16:2e:
bb:9a:a7:55:aa:18:7e:0b:81:f9:c4:aa:27:33:41:89:08:b1:
88:98:be:c9:70:26:c6:6d:a8:a5:de:ba:7e:47:0a:43:14:3f:
ae:a3:62:71:bf:d2:e8:96:1c:2d:9c:31:a1:94:8c:4f:b0:ff:
27:d7:41:20:41:74:a0:cb:9d:04:9f:8a:5b:d4:63:17:c3:25:
65:d5:d0:6c:28:53:a4:52:ef:84:73:d5:49:99:18:ea:16:ea:
69:97:49:21:6a:7d:b2:b3:f0:f6:c9:26:2f:d6:a7:32:16:fc:
21:1a:23:0b:78:e5:07:69:49:7e:d1:1a:57:92:80:3b:a8:fd:
29:94:de:46:3f:c4:30:34:17:e8:8b:71:17:02:53:f9:91:92:
3a:be:24:63:2d:a6:a3:cc:6a:44:9d:6a:66:9d:c6:12:0b:7f:
f5:4b:46:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:25 2026 by rpki-client