
$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/D24316B48D6D11EB9DB49A32C4F9AE02.roa
File: D24316B48D6D11EB9DB49A32C4F9AE02.roa (raw, json)
Hash identifier: ky5ZB0zmCFJ4ZhtIcZDO2A/tVio+hB2OepjdPThGIFI=
Subject key identifier: 48:13:5F:FF:78:D7:A5:37:98:69:36:B8:DA:27:65:90:24:C7:92:F6
Certificate issuer: /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Certificate serial: 071B
Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/D24316B48D6D11EB9DB49A32C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:13:26 +0000
ROA not before: Fri 18 Jul 2025 23:04:59 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 139862
IP address blocks: 203.5.33.0/24 maxlen: 24
203.5.34.0/24 maxlen: 24
203.5.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:44:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1819 (0x71b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Validity
Not Before: Jul 18 23:04:59 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a44986-f05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:c4:ae:82:eb:f3:fd:70:06:3f:1c:c2:3a:
04:28:0c:84:40:98:41:1b:f2:5f:d8:5d:01:6d:33:
54:a9:03:43:61:f5:99:cd:86:e8:b8:cc:f1:ab:3d:
db:7c:53:bf:be:a2:b1:89:55:e9:8d:d5:fd:a6:2d:
76:a1:37:f1:b9:e0:d2:c3:26:9c:80:61:9b:c5:47:
de:67:24:74:bc:59:20:84:d5:b1:27:b4:65:c5:bd:
e6:75:e4:82:d0:43:d8:38:b8:52:3f:b4:05:a0:4a:
db:8a:4d:64:26:bc:e9:58:66:68:fb:ed:f3:c8:6b:
dd:24:ab:a4:7f:a3:a1:12:20:2a:b2:fa:ce:1c:5d:
c4:da:4b:a0:9b:54:82:ba:44:f6:26:d3:98:6f:f9:
7c:6e:c3:af:9b:2d:c6:09:98:fe:96:e0:6a:40:c6:
4a:53:64:a4:e0:52:80:62:f9:ab:70:f5:36:dd:6a:
83:5f:ee:7d:c9:17:b2:1a:86:a8:e6:38:93:9a:55:
5e:f5:ed:42:99:57:0d:27:61:d1:ff:85:b4:82:55:
d7:24:e7:21:36:24:a8:1b:01:2b:f2:94:20:bb:57:
c9:b1:f5:fd:43:f2:bb:f4:f7:07:bd:1c:81:4e:c7:
35:1c:9f:29:7b:8c:3c:8f:f6:0a:20:b6:e6:21:c1:
27:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:13:5F:FF:78:D7:A5:37:98:69:36:B8:DA:27:65:90:24:C7:92:F6
X509v3 Authority Key Identifier:
keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/D24316B48D6D11EB9DB49A32C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.5.33.0-203.5.35.255
Signature Algorithm: sha256WithRSAEncryption
87:99:79:24:05:86:f2:bb:ce:4c:35:4c:c3:18:e9:d6:01:33:
6d:38:4c:60:95:45:f2:56:c6:29:af:7c:6e:86:fc:ed:14:90:
00:e4:58:04:19:8e:f7:93:5a:b3:bb:10:46:06:f3:a9:1f:73:
6c:4e:a3:b5:88:4e:c9:13:1a:bd:4c:46:1c:34:c0:49:96:87:
a8:9d:83:16:1e:46:3c:4a:0c:b6:5e:46:eb:95:5a:8b:f8:8b:
c5:bb:b9:9e:73:ee:d6:f5:18:44:f8:d4:ae:99:d1:11:2d:c8:
a4:82:74:7e:88:68:1f:8f:30:4c:55:c0:0b:81:51:fa:e1:84:
22:0b:a4:9f:d0:5c:2e:98:73:48:89:19:31:2e:68:f5:54:1d:
fc:7a:fb:62:73:09:c1:04:93:5b:cf:39:cd:b0:d8:c3:78:cc:
0e:23:5f:c0:eb:8f:99:a8:3c:c3:c3:13:15:cd:15:22:f2:31:
44:e9:6f:2f:bd:bd:f8:55:ec:81:9c:e4:34:9f:ca:8f:a6:41:
eb:86:bc:d6:91:d3:f2:cb:48:3e:b7:99:ad:27:13:4c:52:13:
30:a7:23:f9:31:e6:2d:ff:e8:c1:f8:39:fe:53:0f:94:8f:77:
1f:44:17:d0:bb:04:3c:61:c2:36:9b:ef:1d:21:0c:07:de:6a:
bb:71:71:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:48 2026 by rpki-client