
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/57A7394C4B0E11EE8682CD4CC4F9AE02.roa
File: 57A7394C4B0E11EE8682CD4CC4F9AE02.roa (raw, json)
Hash identifier: KMYU/tkIB1m1DV1X8R4g+uYkSGoa3XSDqGtlJKqm51Y=
Subject key identifier: FA:11:E6:1A:11:A8:E3:D4:0F:C1:4B:8F:35:E6:78:2E:56:B2:83:77
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 04B6
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/57A7394C4B0E11EE8682CD4CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:29:26 +0000
ROA not before: Sun 21 Dec 2025 00:21:02 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 134365
IP address blocks: 150.129.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1206 (0x4b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Validity
Not Before: Dec 21 00:21:02 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a48586-710c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:4b:a3:ff:a2:40:34:95:92:f4:94:04:fd:
57:e8:8b:bc:8b:4b:a3:fc:dc:65:50:a3:70:85:76:
6c:54:3d:5c:02:6d:82:f1:1a:cd:71:ee:3a:55:25:
db:18:86:53:a6:df:37:5e:e2:7f:f8:ac:b9:82:db:
60:ee:46:25:e0:5a:a4:6b:9f:f2:2b:a6:25:89:7f:
2f:93:b0:e8:13:c1:73:d3:6e:15:7c:73:ed:35:63:
79:56:16:af:9a:df:8f:e2:f8:7b:9c:45:44:59:45:
29:9b:ae:db:01:eb:98:6a:a8:45:c1:d2:02:bc:89:
eb:c7:f6:3d:61:0a:09:ed:69:6a:00:0c:94:31:30:
c9:66:ac:69:19:fb:02:59:7c:29:9f:02:89:d6:57:
c1:7b:74:e3:6d:fa:b4:43:3d:02:a7:29:ba:8b:0d:
0f:b0:ce:a2:67:af:c0:33:9f:00:6c:61:0c:41:22:
11:b2:4b:6d:74:91:24:67:c5:39:ca:42:88:8d:3d:
80:05:af:34:e7:34:af:ce:2c:28:8d:5c:3e:f7:89:
c3:5b:6c:08:8f:60:5e:5d:fb:c7:a8:03:d0:eb:7f:
c1:82:ea:14:24:4d:62:11:78:e7:37:71:9b:c4:15:
c6:7f:6c:29:24:95:e4:b9:37:58:ab:af:95:b5:aa:
24:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:11:E6:1A:11:A8:E3:D4:0F:C1:4B:8F:35:E6:78:2E:56:B2:83:77
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/57A7394C4B0E11EE8682CD4CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
150.129.218.0/24
Signature Algorithm: sha256WithRSAEncryption
78:aa:62:d8:05:71:ec:d7:5d:aa:ac:ad:f1:cd:4e:fe:ed:d3:
4e:8e:b9:ea:f6:26:e7:0c:01:20:0f:18:e6:96:de:a0:8f:ac:
7d:a6:c3:96:67:13:a0:4c:f6:58:b3:cd:f7:8f:f2:1e:a1:77:
1c:eb:3b:ef:21:9e:05:5a:4c:ef:a0:4d:0f:5b:fd:f3:46:36:
52:8f:5e:5f:59:31:9d:b4:d9:d0:78:a0:34:52:14:0a:1a:e2:
78:c0:84:f4:54:6b:71:17:79:a5:6c:60:1e:96:de:52:97:c6:
13:c2:a3:f2:3a:f6:c7:91:ae:61:6c:ae:28:56:98:8d:5c:5e:
f8:21:c4:5a:88:6d:27:fd:0d:ef:29:2a:f7:c2:05:29:20:41:
b7:62:c4:0f:7d:bb:45:19:7d:ef:11:aa:60:9d:a9:05:f8:91:
85:0a:3f:28:4e:63:7c:c1:ba:b0:b2:52:59:37:35:df:71:32:
95:ad:ae:e1:1d:99:12:02:21:79:70:8d:f6:68:58:e5:05:ea:
d3:55:f1:ce:3a:5c:0e:c8:37:97:17:4f:83:a8:8d:1a:e9:04:
2c:7f:60:1d:da:da:27:aa:d2:31:ed:0b:6b:23:1c:70:f6:04:
86:b5:6f:85:8b:78:34:64:98:e1:c0:62:a1:45:b0:cb:56:c4:
ec:5c:bb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:45 2026 by rpki-client