
$ rpki-client -vvf rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/800F1868BEB311EAAFE28B42C4F9AE02.roa
File: 800F1868BEB311EAAFE28B42C4F9AE02.roa (raw, json)
Hash identifier: L48BeJIxpvIFiGKT1Su56vXjEs2Cv30+BovfIMH3wVc=
Subject key identifier: 58:A8:7C:87:43:BE:51:05:24:73:C5:52:F0:55:B5:EA:43:18:42:CE
Certificate issuer: /CN=A916683C/serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3
Certificate serial: 0A73
Authority key identifier: A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/800F1868BEB311EAAFE28B42C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:01:23 +0000
ROA not before: Thu 02 Oct 2025 20:21:17 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 140583
IP address blocks: 103.152.0.0/24 maxlen: 24
103.157.17.0/24 maxlen: 24
2001:df3:7880::/48 maxlen: 48
2407:3dc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl
rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2675 (0xa73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916683C, serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3
Validity
Not Before: Oct 2 20:21:17 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a446b3-6264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c1:6d:58:f2:1e:af:1e:8b:e4:3f:32:75:f6:
ca:08:19:0a:03:16:fc:39:06:3f:2d:22:3c:77:00:
19:6d:58:1d:51:2e:63:aa:60:c2:26:a5:4c:f8:ab:
a8:78:23:2a:38:91:88:6c:05:05:b8:6a:6c:d5:8f:
1e:a3:5f:4a:b4:71:b9:af:05:34:9e:c5:a4:86:9e:
88:c2:4d:11:7a:16:cc:17:ff:da:2b:80:a1:82:ab:
b4:2d:e2:9d:fb:e2:b6:c4:bc:7e:8c:17:2f:45:a6:
bb:66:e0:be:44:62:cb:ef:68:58:19:46:d6:75:17:
e0:aa:cd:7c:29:f7:89:c7:25:c0:ad:a0:15:58:f2:
bc:fc:76:3f:fb:e0:0a:d3:2b:46:aa:86:6c:ad:17:
8e:97:7f:2e:c4:05:14:5a:f9:6c:bd:94:2c:e2:ef:
cd:43:8a:8f:ab:ec:d1:61:fa:ab:64:15:fc:b6:56:
bd:6c:6c:9b:6f:74:c2:f4:69:c4:32:c2:29:5c:44:
15:62:95:94:f5:1e:8e:a5:e6:f8:80:bb:df:5b:ba:
4e:c3:6e:b8:dd:f8:78:4c:11:29:61:7d:e7:24:c0:
d8:c1:b5:e7:c5:5c:d4:4b:b0:64:ea:a0:54:70:8d:
33:83:3a:b6:61:5a:2d:ac:7b:c4:c6:12:c0:0b:68:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A8:7C:87:43:BE:51:05:24:73:C5:52:F0:55:B5:EA:43:18:42:CE
X509v3 Authority Key Identifier:
keyid:A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/800F1868BEB311EAAFE28B42C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.0.0/24
103.157.17.0/24
IPv6:
2001:df3:7880::/48
2407:3dc0::/32
Signature Algorithm: sha256WithRSAEncryption
a1:54:d7:5e:a3:ac:8b:a0:6a:19:56:ce:e7:b2:83:a6:e0:cc:
e6:fc:d6:4d:5d:e0:9a:5e:a6:79:97:a0:8d:44:d1:44:23:f5:
aa:cd:c5:2b:a2:b9:73:e4:c1:12:8e:96:81:3a:0d:30:d7:21:
a0:a3:8b:ff:14:b2:1e:85:4e:8b:89:20:a1:4a:49:43:f3:a0:
14:87:78:bb:7c:ba:ef:b7:f4:fb:7b:17:44:e8:0b:f5:83:32:
f7:b1:52:e7:c8:7a:7e:b5:c8:ce:2d:a4:72:5c:83:7e:24:72:
8c:70:d2:32:06:2a:fc:5b:3a:d6:84:08:20:f0:ff:42:3c:a2:
ea:1a:53:57:77:46:09:d1:06:08:5d:f9:61:ff:c1:43:f1:46:
61:9b:43:61:17:00:ae:84:15:6b:b0:53:4c:fa:05:6f:bf:3e:
39:37:e1:d2:80:54:4d:1b:94:49:c7:24:a3:1c:a9:38:63:40:
43:f6:56:60:18:0d:27:33:a2:b4:b7:df:6e:28:a3:a4:3d:80:
94:ab:81:e5:4f:8b:45:5c:22:ec:8b:02:fc:81:0b:82:d1:37:
d4:a4:99:5b:b1:e6:fa:f4:76:9e:91:b2:ed:31:96:0f:04:4e:
2b:45:ce:86:ac:a5:06:cd:32:f8:32:fc:47:38:91:e2:6b:1f:
7e:ed:ba:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:09 2026 by rpki-client