
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/79AA61622C8711EFBDD6F672C4F9AE02.roa
File: 79AA61622C8711EFBDD6F672C4F9AE02.roa (raw, json)
Hash identifier: 30QWvYag8cPnjx7r94UIr3J4yrJ7eaL16fZHXUvAvsY=
Subject key identifier: CA:4F:0E:E0:16:17:0A:E5:94:AE:6F:1D:9F:B1:AF:F1:90:6B:8E:47
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 04B9
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/79AA61622C8711EFBDD6F672C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:29:28 +0000
ROA not before: Sun 21 Dec 2025 00:21:05 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139734
IP address blocks: 103.235.16.0/23 maxlen: 23
103.235.16.0/24 maxlen: 24
103.235.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1209 (0x4b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Validity
Not Before: Dec 21 00:21:05 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a48588-5454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fb:a4:3a:bd:4b:74:bf:3e:40:56:f9:f6:e4:
07:a3:68:cc:23:a4:3c:ca:1c:9a:94:a1:64:d1:81:
82:07:b5:1f:25:29:6e:0f:0f:e5:9d:db:a5:f0:93:
ac:08:8b:2e:ba:76:af:c1:b7:30:8b:ad:cc:61:1f:
c4:b2:31:9f:f2:6b:24:6f:1a:ed:22:02:34:32:2a:
21:9a:b7:51:86:75:8a:18:e7:57:ed:4e:30:30:7f:
27:78:0c:fe:83:0c:9c:ce:0e:61:af:6b:88:5a:45:
18:43:e3:87:6c:3b:a9:a9:32:47:e0:a0:35:34:89:
d1:14:b1:df:71:28:c0:1e:95:e4:63:91:b0:a1:cf:
58:c7:53:3e:aa:4a:b7:3b:a4:f5:cf:54:73:f7:ff:
70:da:bf:80:ce:3d:50:c2:a1:05:ba:81:04:b8:b2:
04:30:28:07:22:ca:47:63:94:f7:5e:77:3c:ee:d4:
63:ed:65:ca:59:12:eb:8a:aa:ed:cf:a5:c5:84:78:
8f:53:42:6d:08:f0:f0:cf:b2:41:b0:12:24:ea:ff:
16:1b:9b:42:0b:15:94:e5:1d:1a:89:04:ef:5c:b2:
fc:8e:96:37:24:81:76:40:b7:ad:2d:43:63:9a:cb:
63:a3:9b:49:b8:05:09:ec:e2:14:6d:d5:56:11:b4:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4F:0E:E0:16:17:0A:E5:94:AE:6F:1D:9F:B1:AF:F1:90:6B:8E:47
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/79AA61622C8711EFBDD6F672C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.235.16.0/23
Signature Algorithm: sha256WithRSAEncryption
37:4b:0b:57:8f:c7:eb:6b:b7:ad:32:d1:69:df:0d:7f:9b:6a:
de:2d:06:54:b3:c5:77:e0:2e:e8:f8:a4:b5:0f:4c:a6:79:74:
bf:b8:51:9b:95:03:33:29:0f:4c:9b:58:25:c4:4b:9d:d8:9c:
b2:3e:90:06:62:e8:3a:5c:4f:66:f7:c0:cb:cf:05:9d:f6:10:
20:a7:f1:d6:31:39:51:43:8c:3f:82:0a:44:d8:82:0b:84:75:
a5:33:0f:f5:ee:ba:2c:56:19:0a:0b:6f:a5:70:0f:35:64:06:
f2:81:d9:0b:75:53:6c:28:d4:ef:82:4e:32:f4:69:88:ef:55:
6d:c7:25:bf:b4:5a:0c:64:8d:69:1e:4a:01:e6:61:8f:f5:57:
53:66:a3:c2:c0:e5:52:9b:7d:95:2b:5f:35:74:c0:c0:b2:b5:
b0:89:ed:a4:82:3e:d0:b3:53:3a:79:0c:f9:a4:b5:7a:52:47:
02:a7:05:d2:63:7b:7d:08:c6:ac:4f:38:d7:0f:8b:42:16:73:
44:37:13:2f:8d:36:24:f3:d6:c3:e1:0f:72:b4:e6:b5:47:29:
58:a5:d5:8e:d2:b0:94:8f:bd:58:39:5f:f6:36:15:8e:17:48:
b2:f5:f8:7b:45:88:9c:98:99:cb:be:af:14:e5:38:ed:b2:4f:
7f:bd:50:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:04 2026 by rpki-client