
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/19C92BC88DF311E7B616ED66C4F9AE02.roa
File: 19C92BC88DF311E7B616ED66C4F9AE02.roa (raw, json)
Hash identifier: +IkwJLutymOe9v3tylysd9fl5AOsxnKrdRtvPHuXuAw=
Subject key identifier: 94:AF:AC:84:3D:F8:B4:9A:43:41:F8:CC:63:1C:26:11:26:00:FF:F8
Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Certificate serial: 252D
Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/19C92BC88DF311E7B616ED66C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:53:28 +0000
ROA not before: Fri 02 May 2025 16:23:20 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 23634
IP address blocks: 2001:200:c000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9517 (0x252d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Validity
Not Before: May 2 16:23:20 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a460f8-b6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:9d:fc:65:81:27:2c:64:d4:45:2d:89:db:
39:7e:ac:bc:c7:52:0e:e1:2e:96:6a:a4:a1:dd:02:
62:9c:63:42:93:95:7c:25:21:97:3e:55:61:bf:43:
9e:55:fd:e5:2c:a2:e7:5c:14:31:d4:ab:fe:64:42:
63:98:15:77:1d:16:7b:8c:27:1c:c5:31:f1:f2:09:
d2:0b:a4:06:cd:1e:16:3c:d1:81:69:7a:7b:5c:26:
d5:ff:f3:e2:f8:e0:91:8b:64:41:ce:8c:fa:58:ce:
e7:03:2e:be:ed:e0:b7:0d:1d:46:0e:ac:a0:d7:27:
0d:ae:98:e5:bb:f1:1a:d8:7c:fd:ef:81:34:ab:1c:
56:1c:a7:5b:9c:c8:3a:be:79:15:a6:a1:b7:22:1f:
92:4f:64:66:12:9e:65:62:55:09:ef:a4:6a:0e:b4:
f0:00:9c:6e:04:d8:19:53:fc:02:e6:ec:b4:62:4f:
2e:e9:c7:5b:b1:15:1a:03:42:64:2d:df:62:82:ce:
8a:cf:3e:b6:9e:e3:97:7b:e1:d4:f1:ee:d6:9b:a6:
60:9d:e7:23:b1:db:35:40:93:e5:9e:a2:9d:33:07:
8e:63:d5:b1:e9:05:d4:8b:c4:58:3c:d6:6a:0b:07:
be:3f:ca:47:46:b2:6f:bd:95:31:25:d0:92:ee:a5:
9e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AF:AC:84:3D:F8:B4:9A:43:41:F8:CC:63:1C:26:11:26:00:FF:F8
X509v3 Authority Key Identifier:
keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/19C92BC88DF311E7B616ED66C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:200:c000::/35
Signature Algorithm: sha256WithRSAEncryption
97:ce:16:23:1b:e1:08:df:ff:62:78:a7:fc:79:cb:87:42:0e:
7f:58:49:56:dc:77:07:9c:c5:13:48:52:e4:93:bc:74:42:3b:
a2:b8:4f:f4:b7:79:7c:1c:79:79:5e:e2:1d:8d:52:a4:70:b2:
9f:43:68:bb:d4:91:2d:e0:25:ce:d0:38:c2:c8:a1:8d:87:5b:
82:28:53:54:61:59:57:dc:81:6c:5f:60:36:f2:0e:45:60:4f:
cc:2e:57:ba:f3:72:c5:93:18:cb:22:c5:53:b7:44:aa:c9:59:
f7:41:a3:82:19:42:41:b2:a0:7c:9f:9c:05:bc:17:ff:db:e0:
bb:bb:82:4f:da:ab:85:88:eb:75:14:33:b7:93:0f:9b:70:6e:
f4:91:1a:5a:60:7b:12:69:5a:f7:b0:83:eb:89:fc:7b:3d:dc:
e1:bf:e6:5e:08:1c:1b:4b:ee:bb:c0:d8:b9:a1:aa:65:11:9d:
ca:3f:d1:3d:83:88:8e:85:5a:05:fe:e8:05:6a:8b:ce:c5:9e:
65:63:5d:03:67:08:fa:4c:36:cd:87:72:61:69:0c:ea:7e:5d:
44:38:30:79:35:1c:54:15:14:33:0a:88:1c:42:99:22:13:9f:
2e:cc:6f:eb:59:47:cb:a2:5c:dc:e7:b9:b5:a0:df:96:5d:56:
c1:2b:23:c7
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICJS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG
MjYwQjM5RUUwHhcNMjUwNTAyMTYyMzIwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjBmOC1iNmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl5Sd/GWBJyxk1EUtids5fqy8x1IO4S6WaqSh3QJinGNCk5V8JSGXPlVhv0Oe
Vf3lLKLnXBQx1Kv+ZEJjmBV3HRZ7jCccxTHx8gnSC6QGzR4WPNGBaXp7XCbV//Pi
+OCRi2RBzoz6WM7nAy6+7eC3DR1GDqyg1ycNrpjlu/Ea2Hz974E0qxxWHKdbnMg6
vnkVpqG3Ih+ST2RmEp5lYlUJ76RqDrTwAJxuBNgZU/wC5uy0Yk8u6cdbsRUaA0Jk
Ld9igs6Kzz62nuOXe+HU8e7Wm6Zgnecjsds1QJPlnqKdMweOY9Wx6QXUi8RYPNZq
Cwe+P8pHRrJvvZUxJdCS7qWe5QIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFJSvrIQ9
+LSaQ0H4zGMcJhEmAP/4MB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG
MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP
ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkI2QUEvNDZDN0YxNzI0RjE2MTFFNThEMkEzMzI3QzRGOUFFMDIvMTlDOTJCQzg4
REYzMTFFN0I2MTZFRDY2QzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYFIAECAMAwDQYJKoZIhvcNAQELBQADggEBAJfOFiMb4Qjf/2J4p/x5
y4dCDn9YSVbcdwecxRNIUuSTvHRCO6K4T/S3eXwceXle4h2NUqRwsp9DaLvUkS3g
Jc7QOMLIoY2HW4IoU1RhWVfcgWxfYDbyDkVgT8wuV7rzcsWTGMsixVO3RKrJWfdB
o4IZQkGyoHyfnAW8F//b4Lu7gk/aq4WI63UUM7eTD5twbvSRGlpgexJpWvewg+uJ
/Hs93OG/5l4IHBtL7rvA2LmhqmURnco/0T2DiI6FWgX+6AVqi87FnmVjXQNnCPpM
Ns2HcmFpDOp+XUQ4MHk1HFQVFDMKiBxCmSITny7Mb+tZR8uiXNznubWg35ZdVsEr
I8c=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:25 2026 by rpki-client