
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/4B65B208288F11EFB3C88742C4F9AE02.roa
File: 4B65B208288F11EFB3C88742C4F9AE02.roa (raw, json)
Hash identifier: Yq2daRikzG4ZrSeoTTYOGveA0n/Xr575I3ns919mQG4=
Subject key identifier: C9:E6:54:59:DE:EF:F0:CC:98:81:10:73:3B:EA:F7:6D:78:20:4F:B3
Certificate issuer: /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF
Certificate serial: 2956
Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/4B65B208288F11EFB3C88742C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:13:14 +0000
ROA not before: Thu 06 Mar 2025 16:02:30 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 17770
IP address blocks: 182.161.0.0/19 maxlen: 19
202.124.160.0/21 maxlen: 21
2402:4000:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl
rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10582 (0x2956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A447, serialNumber=1F68258C526C5DBC715434357D380020146440EF
Validity
Not Before: Mar 6 16:02:30 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=69a42d5a-9cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:c7:12:bb:16:e6:1d:63:56:a3:7c:df:df:
dc:48:43:ae:ea:a6:24:80:17:6d:8f:3a:a6:5d:00:
b3:22:9d:42:5d:39:22:3a:d4:1c:19:f6:0f:ec:62:
dc:3b:56:8d:f8:d8:1e:87:35:a5:ca:4e:33:8b:10:
14:49:93:3e:a1:d8:8b:a7:8a:77:4e:61:24:7b:a4:
9e:73:64:92:6c:dd:4b:9f:2a:a1:e4:9f:5f:87:8c:
60:a7:e4:5c:66:81:cf:d3:3b:9d:39:b8:d9:42:f2:
39:0c:1b:cf:af:fc:6a:47:d3:2c:58:36:cf:e6:a3:
70:b7:71:b1:39:b5:c4:51:38:46:0d:6b:da:0c:59:
40:1e:bc:64:e2:c8:c7:ff:9e:d6:8c:c4:a7:b9:3f:
b1:80:68:fa:b9:a0:82:01:40:10:6f:f2:ab:4c:13:
14:03:34:01:85:e3:cd:30:cb:36:a1:0a:ed:8b:58:
91:d7:3a:6c:f2:d6:24:80:61:c4:a9:28:f0:75:df:
7f:05:a1:91:4c:d1:f0:17:7c:1e:ef:9a:0d:04:63:
de:b0:f1:e9:5e:5b:4b:0c:b6:85:b3:0a:27:65:07:
b8:a0:bb:f8:ff:0b:b3:ca:db:c1:19:99:f5:2a:38:
31:d5:38:9d:6d:d0:66:32:d2:94:f5:c6:0b:b9:b0:
8d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E6:54:59:DE:EF:F0:CC:98:81:10:73:3B:EA:F7:6D:78:20:4F:B3
X509v3 Authority Key Identifier:
keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/4B65B208288F11EFB3C88742C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
182.161.0.0/19
202.124.160.0/21
IPv6:
2402:4000:f000::/36
Signature Algorithm: sha256WithRSAEncryption
02:30:ef:62:29:a0:f3:b5:52:91:8d:90:e7:eb:31:6d:4e:a4:
a2:07:98:97:ac:15:a0:24:66:12:8b:f9:33:3c:91:18:51:da:
3c:8b:f1:e6:88:7c:59:9b:fe:16:57:98:1a:1c:fa:d8:ec:cf:
f4:88:d0:35:6a:e5:f3:40:3b:1d:ee:db:64:cf:2e:23:10:33:
4f:ea:30:f6:79:6f:ab:de:9a:f3:bf:1e:a2:08:7c:7a:ff:91:
b4:3f:86:21:7b:89:4b:6f:5b:75:28:4a:cb:b8:f5:95:80:5f:
93:ad:3f:7c:99:38:9f:dc:47:15:0e:d9:5d:c5:7c:af:3f:cb:
58:60:ec:a3:3e:48:8d:ce:10:c1:1d:e8:4f:66:41:4d:5e:a1:
c9:45:6a:6a:58:e9:12:5b:e8:09:34:2b:32:5a:24:b2:e3:39:
8e:9a:9d:8a:82:a8:46:fc:93:9b:0d:98:f9:1f:ee:c8:5f:87:
03:e4:5c:e6:3e:3c:d0:97:65:54:de:87:88:dc:15:e8:e9:9a:
0d:f6:78:d9:dd:3f:34:5c:a3:25:d6:32:b5:0b:bd:13:4a:21:
43:10:a1:8d:84:7a:79:69:c0:13:b9:02:ce:1a:40:56:2e:a0:
10:2c:20:34:47:3f:8d:44:97:a5:79:45:30:2e:2d:17:4f:7f:
f7:f6:f2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:13 2026 by rpki-client