
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/75522B0A002B11EA855CA925C4F9AE02.roa
File: 75522B0A002B11EA855CA925C4F9AE02.roa (raw, json)
Hash identifier: oYOOplUnMfrmcYH0EvPlN9Fyxk21VMxZW4LL32Y8NWs=
Subject key identifier: 64:FC:1E:EB:61:C9:F5:68:32:C8:05:41:8F:FA:4A:87:4D:16:A9:3F
Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial: 13CB
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/75522B0A002B11EA855CA925C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:20:53 +0000
ROA not before: Wed 06 Aug 2025 17:26:37 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 4637
IP address blocks: 101.167.176.0/22 maxlen: 24
101.167.180.0/22 maxlen: 24
101.167.184.0/22 maxlen: 24
101.167.188.0/22 maxlen: 24
101.167.192.0/21 maxlen: 24
101.167.200.0/21 maxlen: 24
101.167.208.0/22 maxlen: 24
101.167.212.0/22 maxlen: 24
101.167.216.0/21 maxlen: 24
203.36.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5067 (0x13cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Validity
Not Before: Aug 6 17:26:37 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48385-8c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:c6:ee:30:80:bf:a4:06:1c:18:ec:02:90:
50:4e:44:8b:3e:6c:01:46:36:89:82:8a:ab:39:ee:
ec:5a:31:93:f4:d0:da:92:25:7f:64:92:8d:60:90:
c9:54:82:71:69:aa:b5:52:bb:f2:dc:88:5b:41:c4:
9a:ee:ba:24:45:d6:1d:d6:f5:62:16:45:fe:1c:28:
78:f5:64:54:ae:16:7f:1c:c6:85:28:ef:8c:76:28:
01:62:51:69:53:0c:34:4d:de:5f:91:01:b9:36:ab:
fc:18:d6:e5:50:e8:07:8d:58:56:11:75:08:4a:68:
f0:0c:a1:24:74:bd:56:ea:8c:15:95:43:8c:29:80:
18:2d:a5:51:48:53:4f:eb:e7:69:7d:63:43:8e:58:
c7:1b:91:30:d9:1e:3d:dc:7f:35:bb:44:69:f0:ed:
dd:18:f4:42:0d:58:85:a9:8d:63:59:c3:84:29:c4:
c6:27:b3:da:d0:04:d2:e8:01:be:6e:90:c5:a3:86:
f1:3a:0d:bb:9b:c0:df:5c:6a:7c:f2:cb:64:a9:88:
e0:a4:5a:39:19:86:6e:2f:3d:36:a2:2b:44:78:64:
e3:2a:47:6a:58:d2:a2:f9:8a:be:63:14:83:33:0e:
05:a8:bd:0e:c1:8d:2b:83:cd:06:83:de:ec:62:66:
38:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FC:1E:EB:61:C9:F5:68:32:C8:05:41:8F:FA:4A:87:4D:16:A9:3F
X509v3 Authority Key Identifier:
keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/75522B0A002B11EA855CA925C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
101.167.176.0-101.167.223.255
203.36.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:69:0a:93:3f:bf:81:87:b4:51:1e:35:32:09:41:b8:5e:f9:
e9:73:fb:ad:9e:b6:18:8d:f6:da:d3:18:61:68:91:59:f6:30:
5e:bc:86:04:0c:d1:4d:e5:35:d2:94:38:7a:a3:70:be:2a:67:
80:e1:9b:52:52:f1:ff:db:62:a6:e7:e7:ba:9d:5e:28:eb:5f:
25:cb:e6:bd:f8:44:14:cc:b7:46:02:48:c0:24:67:7d:05:0f:
c8:b1:85:f7:d9:1f:7d:d9:fd:51:44:29:4d:f6:65:1b:60:db:
bb:31:78:73:b4:65:54:7a:60:98:cd:d9:0e:42:72:aa:2d:25:
3c:33:b6:c9:21:47:b7:5d:cc:57:41:e5:da:1d:f8:b8:5f:f4:
4f:b0:67:93:09:38:34:9f:8e:92:2f:59:e5:37:ef:d2:d6:88:
f3:f1:11:35:11:7f:ea:a2:40:dd:e9:b9:84:84:a3:47:55:3c:
bb:9a:86:2a:44:c3:2f:26:78:34:cf:7f:91:ca:a7:03:86:88:
9c:bb:85:63:73:81:b9:8c:48:7c:67:85:8b:3d:94:e1:4e:68:
e2:d1:2f:a8:68:6a:ca:cc:42:99:1b:78:25:75:b4:9e:8d:d5:
dd:68:b5:5f:44:c1:10:0e:dc:d9:60:9c:78:af:dc:7e:8f:81:
ea:58:3f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:26:00 2026 by rpki-client