
$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/A44DBD8486F811F0BCE74679C4F9AE02.roa
File: A44DBD8486F811F0BCE74679C4F9AE02.roa (raw, json)
Hash identifier: mmFkgE0L1sreVpQhtYAV83v46s2MaftdRM1lyxnQjlY=
Subject key identifier: 4E:0B:F1:4B:64:A3:FD:FB:1F:65:E8:7B:36:56:BA:4C:63:F9:FA:9E
Certificate issuer: /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Certificate serial: 071C
Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/A44DBD8486F811F0BCE74679C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:13:27 +0000
ROA not before: Mon 01 Sep 2025 05:58:11 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 4826
IP address blocks: 203.5.33.0/24 maxlen: 24
203.5.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:44:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1820 (0x71c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Validity
Not Before: Sep 1 05:58:11 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a44987-db3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:0f:20:db:4a:44:b5:fc:94:a6:c6:2c:b0:
55:ea:63:d8:84:6f:51:63:8b:04:18:92:29:7c:86:
b8:08:98:d5:2d:d8:f4:43:78:c8:b4:be:ab:2c:00:
86:91:37:97:36:25:65:c5:ed:f7:5c:4b:bf:39:8f:
12:da:a4:15:e1:ee:fb:22:15:4d:95:89:80:3e:d7:
ec:8f:d6:f1:ce:80:e5:41:00:74:70:14:f7:b1:fd:
7f:fa:12:64:58:59:95:50:8b:4d:1d:35:77:8d:40:
ff:ad:f0:86:4d:69:4a:dd:2c:44:e4:fd:90:da:81:
72:e4:a8:a3:b0:4b:77:21:cf:e4:59:55:d8:3b:f8:
b9:d8:c7:0d:1c:af:80:d5:f7:f4:9b:c4:83:f5:40:
9a:b5:7f:a3:20:c1:b5:42:b2:9b:a6:a2:93:5d:8c:
89:9a:41:1a:9e:a6:72:fe:cb:8d:45:4f:2f:64:0f:
5d:f6:fa:1d:ac:23:e3:03:42:56:83:d2:3a:a9:ef:
1c:f9:36:02:8d:72:8f:74:83:3e:e2:07:e4:53:2d:
fa:2d:21:9d:71:dd:ec:3a:b9:98:6c:19:60:97:3b:
6c:17:02:07:c6:d5:88:0d:d9:b3:a6:e8:50:22:0b:
bc:f9:5c:b0:b2:66:67:07:e7:37:26:2f:15:b4:04:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0B:F1:4B:64:A3:FD:FB:1F:65:E8:7B:36:56:BA:4C:63:F9:FA:9E
X509v3 Authority Key Identifier:
keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/A44DBD8486F811F0BCE74679C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.5.33.0/24
203.5.36.0/24
Signature Algorithm: sha256WithRSAEncryption
45:55:47:89:b8:dc:cb:b3:6e:8d:c2:fd:c0:61:ad:43:20:fd:
4b:ab:34:f7:bb:35:da:63:00:b6:4a:5a:db:bf:88:22:3f:4d:
d1:07:6d:18:3f:96:7b:bc:68:6d:f2:58:f1:39:2d:c6:5a:0e:
ff:50:30:7c:67:02:d3:99:95:90:b3:95:cb:68:54:cc:cb:75:
db:b2:bd:c1:ae:b4:0f:57:f4:a2:af:de:3a:fd:1a:f1:dd:6f:
d9:e4:5c:d4:22:cb:c9:3d:3b:54:6b:c3:35:1d:e2:d7:83:de:
78:bc:fe:de:41:d3:44:5c:14:9a:87:2f:45:c8:05:9d:76:b2:
aa:6b:0e:71:60:28:b4:07:bc:9d:af:b2:6e:96:9a:b0:c9:d3:
b1:6b:f2:7c:ec:c6:69:d2:7e:df:a1:5f:66:e9:77:cf:4b:79:
84:bf:fc:dc:e8:f7:d1:cf:c9:41:d8:b8:15:a5:04:b1:13:af:
06:4d:e5:d0:23:b6:94:67:d7:c0:36:0a:4b:43:e7:e9:c4:8d:
63:cb:f2:12:40:44:06:e9:dc:8b:b7:bb:2d:5c:8f:64:9e:de:
66:f3:b9:1f:07:17:40:c6:5b:aa:91:48:d0:1b:53:87:bb:52:
f3:50:45:4e:3c:19:f9:5a:31:80:ad:75:68:c8:fe:57:04:fe:
28:89:3f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:15:37 2026 by rpki-client