
$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/43DD36C8184D11F182F41629283D8C67.roa
File: 43DD36C8184D11F182F41629283D8C67.roa (raw, json)
Hash identifier: W2jdh0dCsYZH6chwW5mjxA9lnLxFZ0B7ULAznfGNxoM=
Subject key identifier: 55:AF:20:0D:46:0E:79:E7:1B:86:E3:D5:02:9F:83:68:22:4D:4A:01
Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial: 035A
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/43DD36C8184D11F182F41629283D8C67.roa
Signing time: Mon 13 Apr 2026 10:32:40 +0000
ROA not before: Mon 13 Apr 2026 10:32:40 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 834
IP address blocks: 202.155.80.0/21 maxlen: 24
202.155.92.0/23 maxlen: 24
202.155.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 858 (0x35a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Validity
Not Before: Apr 13 10:32:40 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69dcc648-720c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:66:9c:0a:35:85:be:03:46:51:e1:28:7f:
1e:6a:79:0f:93:7d:0c:62:39:59:08:7c:0e:e3:db:
02:b2:c0:19:2a:62:be:10:4e:9f:08:fb:37:e2:71:
54:d2:84:2e:cc:3c:bb:75:cd:47:5a:ba:16:99:21:
8b:f0:2f:9e:1c:7a:a0:06:60:4f:83:9b:94:f7:79:
c7:fc:09:46:9e:e1:0b:3f:72:03:6e:a6:40:ff:33:
7a:72:30:b8:13:54:74:99:8a:b9:9f:b0:23:84:ef:
dc:3b:c0:15:20:00:dd:9d:52:b0:94:51:ba:f8:eb:
1f:2b:2a:5f:b3:40:23:6b:0f:ed:f1:98:51:09:dc:
47:7b:ef:42:8f:2a:12:18:40:e4:d8:06:f7:fe:ff:
50:28:6a:b2:e9:2e:8e:9a:1e:0d:51:9f:30:97:05:
8d:75:ae:2f:ed:a9:67:4b:cd:bd:2f:b7:a9:02:7b:
9d:f4:47:bf:01:6a:11:34:4e:63:9c:1e:5f:cb:08:
ad:c3:16:f2:78:8a:9f:ab:bd:b6:35:47:12:42:46:
6b:93:58:82:f7:05:89:50:a2:4e:b3:b5:ad:70:53:
ee:10:ac:ec:dc:5c:3b:08:2a:51:b4:dc:c1:13:2b:
ff:2d:a5:f9:dd:0c:4b:98:44:53:68:cc:f9:a0:a5:
82:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AF:20:0D:46:0E:79:E7:1B:86:E3:D5:02:9F:83:68:22:4D:4A:01
X509v3 Authority Key Identifier:
keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/43DD36C8184D11F182F41629283D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
202.155.80.0/21
202.155.92.0/23
202.155.104.0/21
Signature Algorithm: sha256WithRSAEncryption
99:56:67:b7:77:8a:93:b9:aa:b4:a1:45:1c:5d:55:bf:b5:5d:
d9:1a:ed:db:53:8b:61:3a:05:c8:ab:45:18:81:44:e9:7e:d4:
c3:3f:e3:1b:5d:a7:3e:57:a9:3d:90:ae:0b:73:01:dc:c7:aa:
a8:ae:15:bd:8f:70:d4:6a:5c:48:6e:ce:20:b6:ab:12:b3:cf:
ee:d1:d0:35:6a:9c:0f:b3:ab:88:8d:11:af:5b:ea:14:8d:94:
96:86:81:85:32:5d:25:df:48:d1:e9:8d:55:54:f4:a8:4e:e6:
a6:5a:52:7c:69:43:8b:f6:3e:74:80:8a:e7:43:74:86:2f:8d:
a2:10:f0:e4:61:1b:59:4b:91:a8:77:b1:00:52:e3:97:5b:b2:
50:1f:bf:3d:1c:f0:9d:d4:ef:20:1a:c2:ba:e3:5a:c9:86:31:
85:6a:85:86:b0:68:50:c0:bc:b5:c6:bb:56:d9:f2:2b:e5:b6:
e4:56:ea:bc:46:b8:c6:4c:3d:f5:33:1d:29:89:60:97:cf:39:
6e:01:aa:fe:86:09:93:be:3a:06:ad:4e:ba:4c:8a:fa:e3:61:
b4:b7:3d:b9:9f:e6:2a:85:01:fd:60:82:27:88:c7:61:ce:1b:
49:cb:29:f0:c2:74:55:c8:b7:e1:ec:d1:ce:16:8f:02:c1:f5:
11:66:74:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:37:58 2026 by rpki-client