
$ rpki-client -vvf rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/FC73357271B811EEAEDED685C4F9AE02.roa
File: FC73357271B811EEAEDED685C4F9AE02.roa (raw, json)
Hash identifier: akhySB51PMI2y7wAP//uAqapHy/Dl5nwYVbMKbRi7uI=
Subject key identifier: 70:B3:58:45:81:E0:61:8A:BE:1F:6A:E7:77:12:86:EB:57:74:8F:FA
Certificate issuer: /CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4
Certificate serial: 01F6
Authority key identifier: 38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/FC73357271B811EEAEDED685C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:37:05 +0000
ROA not before: Tue 09 Sep 2025 04:10:21 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 58955
IP address blocks: 103.216.158.0/23 maxlen: 23
103.216.158.0/24 maxlen: 24
103.216.159.0/24 maxlen: 24
2001:df2:d3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl
rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916600A, serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4
Validity
Not Before: Sep 9 04:10:21 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3eca0-2f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:99:14:f9:cb:af:59:89:59:3b:46:eb:e8:8d:
8c:14:e2:dc:f8:66:e0:be:0b:e1:cc:39:b7:1b:9e:
99:d1:3f:9a:0e:ef:d6:59:7c:9c:38:ae:30:82:59:
4b:5a:58:aa:6c:1a:b2:cf:57:d0:7d:47:b8:d7:85:
c3:67:76:42:66:90:ed:3e:32:a0:75:39:ae:49:34:
3a:40:c2:a0:6f:33:29:7e:95:e3:30:cc:9e:09:6d:
2b:34:13:6d:48:98:4e:c4:49:1d:f8:46:36:f8:04:
97:70:96:cd:19:c4:be:0a:bf:53:1a:25:12:de:0f:
47:71:f5:ba:7e:a5:e4:81:82:ca:ea:47:eb:ca:af:
fa:35:e6:dc:e1:8e:5e:a3:7a:ab:fa:a4:6c:76:cc:
08:4c:78:1e:56:23:71:87:3a:76:36:d1:4c:6b:74:
de:9d:a0:fd:24:83:c4:ea:e5:2e:f9:1f:05:2e:df:
b4:5d:9e:a8:e2:94:ee:fe:7b:54:fd:b4:ef:a8:41:
54:91:19:47:5a:67:a8:3e:2d:f9:85:0a:9e:73:ac:
63:96:09:23:23:2f:b6:27:9e:6d:59:fa:20:f1:59:
1d:5e:22:5b:c8:1f:68:49:79:95:b6:76:78:e4:5d:
34:fa:5e:f4:f6:c9:19:b4:35:97:46:9f:1c:54:2a:
ba:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B3:58:45:81:E0:61:8A:BE:1F:6A:E7:77:12:86:EB:57:74:8F:FA
X509v3 Authority Key Identifier:
keyid:38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/FC73357271B811EEAEDED685C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.216.158.0/23
IPv6:
2001:df2:d3c0::/48
Signature Algorithm: sha256WithRSAEncryption
58:35:bc:7e:8e:cb:d7:d0:9d:0a:ce:00:55:01:48:c7:04:c6:
b6:b1:42:51:13:d0:fa:9e:c1:91:78:0f:76:4c:b5:ca:3c:51:
be:fb:7a:30:04:d4:fd:6c:19:a7:27:c9:b0:c7:e5:d9:d1:66:
49:02:26:2e:23:69:8d:88:92:50:b4:5d:d9:1e:95:8f:9a:d9:
d3:3a:30:67:5e:85:1b:cc:df:f8:7f:47:c0:d5:06:78:18:03:
69:d5:8b:57:1c:4e:e1:9b:77:5e:8f:5c:00:d4:ad:ec:3c:99:
ec:34:07:53:31:93:39:47:b1:46:79:60:09:11:20:c8:1f:55:
db:aa:85:3a:35:23:af:5e:a2:10:fb:d8:b4:2b:8e:66:c0:70:
35:f8:32:46:71:c8:f1:b5:47:c6:2a:ae:a2:a6:ea:6b:e8:31:
7e:b4:b4:08:ec:13:e9:cb:46:3a:be:7d:d6:d6:a5:d5:fc:2e:
98:fe:dd:76:5d:97:cd:95:e4:7d:cd:b5:74:a3:4b:b9:d9:79:
96:a5:07:fa:05:5e:c7:8f:09:87:9e:87:9d:43:fe:f1:bc:db:
ff:5c:31:0e:27:9f:12:4a:ca:c6:18:87:23:e2:41:7f:ad:a0:
52:fe:3d:3c:1b:fa:da:64:bc:cb:f1:9d:91:9c:1d:43:e6:66:
e6:3f:ac:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:10:19 2026 by rpki-client