
$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/B7A4FD5EDD9A11F0956A19D3406F56BC.roa
File: B7A4FD5EDD9A11F0956A19D3406F56BC.roa (raw, json)
Hash identifier: C/nBDRskLxKkB8+VbDj3vPdaP7ntU8FpquVD1dwHslg=
Subject key identifier: DC:5A:8B:55:F4:AC:F6:1F:F5:7D:1A:26:C3:23:30:B8:6A:27:A9:20
Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial: 0338
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/B7A4FD5EDD9A11F0956A19D3406F56BC.roa
Signing time: Sun 01 Mar 2026 18:41:37 +0000
ROA not before: Sat 20 Dec 2025 11:55:02 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 137969
IP address blocks: 202.155.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 824 (0x338)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Validity
Not Before: Dec 20 11:55:02 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a48861-d265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:b4:23:a1:d5:3d:45:7a:f7:4f:90:1b:5a:
16:28:a2:a0:b0:23:3a:ff:76:8c:8d:f5:dc:4a:b8:
7b:ef:fa:9b:da:e7:5f:7b:e8:1c:c8:ab:be:a3:2f:
1c:3b:80:88:c2:d4:3b:9d:a4:fa:86:8d:5e:01:f1:
e9:60:06:83:e8:6a:75:6c:14:5e:fc:0a:b8:21:f7:
0e:12:1f:ae:e7:e4:c0:d5:4c:02:a7:82:ed:d7:5c:
a4:e1:5d:97:55:ab:d9:9a:fe:f0:d9:8d:4b:9b:13:
06:e1:ab:da:42:ad:c7:6e:70:7c:8f:99:b4:a5:08:
d2:f0:3b:a4:ee:ff:52:5d:98:6c:37:ac:5a:30:53:
a4:fc:58:63:92:cf:38:cf:40:3b:bc:c8:7e:73:04:
ed:c0:0e:44:8b:9f:45:fb:82:d8:95:e2:ed:07:34:
20:c1:a8:67:30:f6:3d:7b:55:c6:80:e7:b8:f1:e6:
6b:49:23:f1:8b:9f:3a:22:e5:f7:8c:d4:da:85:43:
12:20:0d:f2:a7:4e:9c:a9:a2:1f:5e:c2:84:2d:c5:
da:62:4c:d2:06:e2:7b:c4:e8:24:f5:1a:d9:20:e0:
29:a2:a6:95:e2:40:ed:5a:58:6a:cb:d8:a4:97:69:
ac:11:99:81:95:64:56:c9:cb:d9:4a:b8:8f:45:d4:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5A:8B:55:F4:AC:F6:1F:F5:7D:1A:26:C3:23:30:B8:6A:27:A9:20
X509v3 Authority Key Identifier:
keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/B7A4FD5EDD9A11F0956A19D3406F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
202.155.116.0/22
Signature Algorithm: sha256WithRSAEncryption
17:d7:31:e7:73:08:e1:c3:ea:71:58:98:9a:05:19:87:b4:7c:
ec:2f:75:4a:eb:97:d0:c9:f9:22:a6:30:c2:70:e7:a2:a7:22:
26:d0:3b:56:ec:3a:c6:96:33:aa:80:39:39:1d:ea:c8:b0:54:
6f:db:b6:2a:ca:f6:af:4d:ff:32:e7:2c:ba:59:c6:76:91:24:
34:9e:6b:2b:e6:b1:96:02:fe:72:41:0c:14:17:99:1d:94:be:
a3:08:37:a9:11:32:5f:34:52:43:84:36:4f:11:25:a9:46:8a:
00:3c:2f:87:57:cb:8f:0a:40:0a:96:4a:ff:0c:8c:9f:e8:fa:
e4:4c:d5:b3:6c:6e:9c:e0:12:86:73:c3:61:38:ad:bf:fa:57:
e5:30:7f:d0:b3:b8:fc:83:6f:6a:e7:3e:83:50:6f:f5:c7:22:
e8:23:fc:20:96:1e:00:e7:f8:cb:b4:1b:9e:4c:91:6c:f3:16:
e7:1c:b7:83:52:de:a0:6f:5e:59:8c:bf:1e:6a:04:99:07:05:
da:ef:27:12:cf:06:8f:52:02:bf:4d:b7:d2:a3:4b:48:b0:09:
82:e8:d1:9d:4c:f8:5e:0a:0f:3f:32:84:af:f8:ba:3f:a9:9b:
6e:2d:27:9d:db:e1:c0:b8:f2:1f:52:d8:13:24:0f:36:36:41:
fa:0e:db:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:27 2026 by rpki-client