
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/16079DB83C1D11EBA532C076C4F9AE02.roa
File: 16079DB83C1D11EBA532C076C4F9AE02.roa (raw, json)
Hash identifier: RSYSEY4QPK9Pk0sJgoW6ZjAn6458OKn6/pTCuVoX1jQ=
Subject key identifier: 84:CA:EE:64:D6:0E:7A:CF:1D:68:EE:88:52:C2:0D:73:9A:3F:22:11
Certificate issuer: /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
Certificate serial: 09D2
Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/16079DB83C1D11EBA532C076C4F9AE02.roa
Signing time: Tue 08 Sep 2026 20:40:58 +0000
ROA not before: Tue 08 Sep 2026 20:40:58 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 46997
IP address blocks: 103.152.112.0/23 maxlen: 23
103.152.112.0/24 maxlen: 24
103.152.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl
rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:55:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2514 (0x9d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
Validity
Not Before: Sep 8 20:40:58 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6aa072da-cc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cc:5d:03:33:02:ed:b1:ca:e7:8e:c9:4a:2b:
fd:26:b9:f1:0b:79:b8:38:9d:ec:23:4a:af:db:d2:
55:d6:02:f6:09:1f:21:4c:f8:ea:59:9d:06:b2:a5:
0b:6b:60:36:b4:29:df:1d:98:c5:e8:4a:a6:bf:6f:
68:2e:74:cb:ba:66:2c:9d:04:da:4c:36:8f:a2:96:
46:46:27:3d:b1:84:ea:98:b2:df:57:8f:18:40:2e:
15:da:c6:c3:77:62:d0:85:47:cb:a0:cd:88:ab:1e:
5f:1a:c7:f4:c4:ff:37:ea:a1:43:a6:35:76:9d:70:
d0:29:00:cc:85:e0:b4:79:e4:5a:4b:f7:82:7a:a2:
fd:c3:0a:f4:72:a2:ad:fb:f5:86:8f:ce:1b:2a:8a:
d4:b1:dd:ad:8c:ac:15:4e:05:40:86:fa:22:9e:91:
4d:aa:bc:18:fb:c7:01:3b:cc:52:98:fb:b5:91:1e:
a1:98:2a:9f:67:9c:bc:dc:84:87:eb:d9:4e:e2:23:
70:0e:1b:67:df:9b:34:9c:f5:58:c2:7f:79:40:32:
72:1e:04:d9:a6:cf:8a:93:50:e2:92:e9:23:d4:de:
5f:54:6d:1a:c7:dc:40:9d:2f:fe:24:e1:f2:8e:11:
22:7f:ef:c5:29:1e:6a:a7:b7:ff:b8:e3:5e:5e:aa:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CA:EE:64:D6:0E:7A:CF:1D:68:EE:88:52:C2:0D:73:9A:3F:22:11
X509v3 Authority Key Identifier:
keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/16079DB83C1D11EBA532C076C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.112.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:92:43:a4:e3:01:32:21:23:3f:34:f4:a8:93:29:53:51:08:
6d:9a:a3:4f:23:a4:0f:54:ca:c0:fd:c9:e3:91:a8:e5:6b:08:
04:7d:3c:40:b0:2b:a9:24:ac:17:5d:cd:94:5d:85:14:d2:b5:
3f:69:d5:27:c6:91:0d:b0:da:84:03:2f:b0:eb:31:c7:83:c6:
36:25:8c:71:d9:a1:49:a7:5d:55:69:f2:12:64:ce:2c:ec:d6:
00:93:fe:ed:b1:52:cd:12:9c:69:24:48:33:77:c2:90:6f:84:
47:6f:81:d8:83:35:4b:fd:2e:44:3a:64:a3:52:72:aa:a3:72:
ec:5f:ee:f4:dc:0f:25:e8:e3:e4:cb:d0:36:b3:86:94:39:ca:
76:c8:90:68:28:13:83:98:13:7b:1d:99:9d:d3:cc:e3:da:1a:
44:c0:66:f4:5e:4a:4d:2d:f5:63:37:f7:37:d6:9b:cb:32:34:
51:16:cf:e9:0f:46:80:6e:1c:d3:07:d2:7e:42:47:1f:f9:87:
3f:08:d3:c8:85:0e:05:7d:d4:71:3b:aa:7d:5e:9d:44:d9:f2:
a1:79:4f:d3:d3:21:97:87:ae:43:23:ba:f4:b9:40:1f:15:62:
41:94:c8:0e:da:6e:4d:c8:6f:19:fc:9d:9b:c3:f1:88:5e:54:
bd:0e:6d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:24:48 2026 by rpki-client