
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/4409B8649D1011F0B28FB758C4F9AE02.roa
File: 4409B8649D1011F0B28FB758C4F9AE02.roa (raw, json)
Hash identifier: CIf5GGGC1TVACvwyThVDydbe+OfzvDk5DC5kiBIMJsY=
Subject key identifier: 44:23:F0:D2:AD:23:8B:0D:3C:8C:41:E7:CF:3D:D8:4B:64:EC:DF:E4
Certificate issuer: /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Certificate serial: 1928
Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/4409B8649D1011F0B28FB758C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:08:31 +0000
ROA not before: Thu 04 Dec 2025 16:15:52 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 153356
IP address blocks: 113.19.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6440 (0x1928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Validity
Not Before: Dec 4 16:15:52 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a4809f-a3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:74:13:4f:00:2e:52:55:57:c8:0b:90:ee:bd:
99:27:6c:3e:68:c3:0c:4a:d2:2d:65:4b:f8:55:b3:
71:46:7b:f8:e9:29:30:a0:b0:d6:43:47:2b:98:c0:
51:e3:42:63:f7:e2:df:1c:98:5b:f2:43:f3:3a:22:
1a:07:45:36:20:4a:f3:e5:60:97:64:f4:49:51:6d:
21:87:10:71:f2:5b:68:e6:94:ca:c2:55:53:18:ec:
fe:66:f9:1f:07:8a:e0:e5:c5:ee:61:db:d7:f6:62:
f6:82:1d:8e:41:30:ff:d3:60:65:cb:eb:25:dd:2b:
53:ff:14:a1:8c:a3:27:c8:e3:3f:7f:14:c4:79:3c:
0d:51:67:5b:90:c1:51:5a:82:23:af:5c:40:82:c1:
73:09:78:ef:4a:d1:e8:57:cd:6a:44:5c:06:15:f6:
f3:f4:4a:90:3d:c1:72:a7:0a:64:2c:f5:12:ef:50:
a4:d8:28:30:e4:68:84:d8:d3:3d:0c:10:b7:3b:b8:
9d:1c:37:f8:37:3b:cb:b6:67:30:80:de:79:16:83:
1c:0b:e1:5a:e9:4d:fc:05:14:80:80:99:d0:de:35:
46:26:a2:54:a4:9b:2d:87:35:e9:37:e9:48:16:aa:
32:1b:19:45:42:e7:68:b3:34:7d:34:f7:97:e2:a4:
dd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:23:F0:D2:AD:23:8B:0D:3C:8C:41:E7:CF:3D:D8:4B:64:EC:DF:E4
X509v3 Authority Key Identifier:
keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/4409B8649D1011F0B28FB758C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
113.19.118.0/24
Signature Algorithm: sha256WithRSAEncryption
97:76:eb:1b:05:bf:f7:6f:15:3f:25:d1:21:47:43:81:79:a3:
00:59:75:e7:bf:7f:7e:a3:86:07:a4:11:bb:64:7e:c9:31:dc:
8e:7f:c5:65:d2:9d:06:da:48:1d:3a:66:47:5c:f4:ad:8c:24:
55:3b:89:12:13:17:30:79:ff:7f:ff:3d:5f:62:fa:16:e4:eb:
80:04:ac:61:f0:33:aa:0a:7b:f3:d2:76:bd:23:1d:61:53:10:
52:6c:9c:78:93:18:7e:50:6a:1a:f6:bd:7c:80:3f:3c:bc:58:
c0:d8:6d:cc:b6:73:19:89:5e:0d:42:59:c0:4a:0d:9d:79:cf:
f2:4d:85:72:d6:d7:2a:2e:a8:0e:b4:45:4e:32:1c:c3:a8:f3:
8f:57:1b:fe:3c:c6:22:0a:08:18:cb:70:fa:2f:32:5b:e8:12:
78:6f:6b:c8:a8:e6:91:8c:3d:93:0f:83:de:f8:07:4a:fb:8d:
36:c7:95:8d:06:91:5b:8c:43:0b:0d:0c:c3:7d:23:d3:5a:dc:
5d:16:04:4a:91:08:c8:01:11:f1:9f:9a:16:a0:74:00:ee:70:
23:81:5f:56:f0:57:8d:e4:8b:ca:2a:63:ed:91:78:ad:0d:a6:
6e:bf:0e:0f:e7:ad:d7:ad:9f:56:18:d9:34:b6:1f:7d:1e:43:
4b:a4:c0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:55 2026 by rpki-client