
$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/B4450EF68E5311EBB81E6C70C4F9AE02.roa
File: B4450EF68E5311EBB81E6C70C4F9AE02.roa (raw, json)
Hash identifier: vvZS0ECU2CMPi9BX1RvoJ53ycBpah2sWmUSMu5XAMO8=
Subject key identifier: 53:DD:D4:4E:49:01:0F:DC:BE:03:99:FC:95:EE:4C:0A:00:76:06:FD
Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E
Certificate serial: 16C0
Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/B4450EF68E5311EBB81E6C70C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:57:52 +0000
ROA not before: Wed 26 Nov 2025 16:35:24 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 55446
IP address blocks: 196.1.105.0/24 maxlen: 24
196.1.106.0/24 maxlen: 24
196.1.110.0/23 maxlen: 23
196.1.110.0/24 maxlen: 24
196.1.111.0/24 maxlen: 24
196.1.111.0/25 maxlen: 25
196.1.111.128/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl
rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5824 (0x16c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E
Validity
Not Before: Nov 26 16:35:24 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a46200-44f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:d0:c6:a8:7b:fc:cf:b4:44:60:f7:72:45:
0f:5e:b6:84:39:87:c5:c7:d5:be:56:39:7c:06:fd:
0a:60:5a:e7:38:1b:9f:bc:02:34:96:53:7c:ae:4a:
27:7b:7f:eb:85:05:14:1a:3e:22:d8:cd:53:0a:77:
50:6b:2c:0d:0b:26:a6:b5:a4:b2:6b:68:7f:c1:21:
0c:34:1e:80:a0:83:2b:dd:d2:43:b1:e1:ed:a8:7e:
3d:72:58:fb:97:df:6a:da:9f:34:c1:6b:96:88:84:
4c:90:57:ae:01:7b:cd:da:d4:c8:4b:f8:dd:23:ed:
b5:d5:b4:84:c2:27:78:5f:86:62:fe:ad:76:7a:da:
6f:72:53:64:ea:a4:da:af:ef:69:6f:41:52:b9:42:
43:2e:19:c2:d3:86:d2:7c:eb:af:ba:74:07:2f:e7:
5a:4c:22:33:e5:3f:4a:a2:8f:02:11:bc:56:43:71:
06:87:30:42:3e:c6:75:69:41:9c:cf:a9:e4:06:af:
51:0d:45:15:8c:fd:7a:90:7f:b4:5d:4d:d7:0d:93:
3e:2b:ba:76:b3:cc:96:b3:34:e1:38:73:68:d4:5e:
71:86:a4:1d:f6:4f:e9:7b:01:50:30:e0:5e:aa:f1:
d6:ff:04:c7:42:35:04:d6:83:ad:aa:5d:ad:c5:9a:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DD:D4:4E:49:01:0F:DC:BE:03:99:FC:95:EE:4C:0A:00:76:06:FD
X509v3 Authority Key Identifier:
keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/B4450EF68E5311EBB81E6C70C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
196.1.105.0-196.1.106.255
196.1.110.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:40:ca:b6:53:f9:eb:31:65:ba:00:df:6e:59:f5:1a:7c:d3:
d7:94:15:02:e0:3c:fc:aa:18:9b:d9:5a:bd:33:8f:03:7b:35:
ca:3b:87:4f:af:c2:4e:fd:91:8e:56:cf:40:ca:b0:04:0d:fb:
6e:a1:09:3a:37:15:45:e1:34:85:84:2c:16:1b:44:b2:3c:02:
00:af:3f:a3:2e:13:98:2a:d5:17:80:b2:46:80:5d:e7:94:39:
a4:1b:7a:9e:6a:c3:aa:89:f2:a3:ad:ed:bf:86:93:12:17:6d:
85:56:2e:64:f0:66:67:92:9d:13:67:a3:f8:be:fd:0b:a7:f5:
0b:6d:b9:8e:ec:01:21:c7:ab:54:a2:fc:94:f9:5c:43:27:f7:
a8:8b:dd:23:14:49:09:4c:d6:3e:ba:b3:e9:46:cf:21:8a:fa:
0e:a3:c7:53:08:7f:0f:ab:5d:68:74:70:6a:93:95:bb:e6:6d:
36:68:56:91:f5:40:dc:c4:49:bb:ac:3e:87:a2:c7:6d:40:3f:
ca:73:a8:88:6f:6c:e4:12:e8:0d:c0:59:97:8a:89:7b:89:67:
9a:a0:90:6b:08:cb:12:4a:99:90:f4:f5:72:ca:12:f8:1d:df:
d6:fc:f3:b4:a9:a4:16:89:7b:72:b7:45:9b:04:11:38:c8:47:
ab:8b:29:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:12:09 2026 by rpki-client