
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/E080F3508DFC11E7A7F08785C4F9AE02.roa
File: E080F3508DFC11E7A7F08785C4F9AE02.roa (raw, json)
Hash identifier: N/cJUWhUEKkKWK0CKRJr7DF4dmuct4+FW2hs6wmCMag=
Subject key identifier: E8:26:12:9C:20:29:37:2B:E5:15:70:25:28:A1:BC:F1:BC:DB:4C:89
Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Certificate serial: 2532
Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/E080F3508DFC11E7A7F08785C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:53:33 +0000
ROA not before: Fri 02 May 2025 16:23:25 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 7660
IP address blocks: 2001:200:900::/40 maxlen: 40
2001:200:e000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9522 (0x2532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Validity
Not Before: May 2 16:23:25 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a460fc-d963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:13:64:b4:29:85:81:0c:da:08:86:b5:03:
ea:16:81:0a:59:ef:f2:a4:ec:bd:10:5e:9b:3f:a4:
2d:73:ab:b1:b3:3e:39:00:58:99:0e:fa:75:05:d6:
f3:af:ae:0f:86:51:49:60:6d:cf:12:ba:b9:57:0c:
12:e4:63:c7:e6:1d:90:d4:c0:5e:22:32:b2:4f:84:
e7:88:d1:ba:c7:12:d3:97:1d:cb:70:b0:6c:ca:46:
75:d1:c8:1c:41:31:1e:cb:61:b9:e5:c9:98:e5:75:
a9:54:3b:0a:f3:0c:e8:5e:68:c9:e7:76:fc:a5:78:
e7:4c:50:8c:6e:2f:77:17:fa:18:ef:95:9a:05:63:
f1:c2:18:a4:01:d4:59:2b:f1:26:ff:33:7d:50:2a:
e3:09:60:0e:e0:a2:25:2a:bb:d8:38:da:9d:63:7e:
d4:1a:82:71:cf:0d:68:9f:69:18:2b:7e:68:fb:09:
ee:09:f4:49:b9:bf:cc:ca:af:71:e0:4c:d8:5b:37:
b1:ce:e8:af:08:10:fe:ac:45:79:82:f5:9b:58:12:
c4:cb:1d:c0:8b:18:9c:ef:ae:c6:e6:81:ed:a4:a7:
74:79:34:dc:13:39:aa:7c:39:b8:25:77:33:40:c0:
03:3a:cc:69:aa:6c:60:3d:50:38:e2:0c:6d:aa:89:
3c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:26:12:9C:20:29:37:2B:E5:15:70:25:28:A1:BC:F1:BC:DB:4C:89
X509v3 Authority Key Identifier:
keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/E080F3508DFC11E7A7F08785C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:200:900::/40
2001:200:e000::/35
Signature Algorithm: sha256WithRSAEncryption
0b:94:13:8c:37:6e:81:98:ee:b3:dc:3c:9a:05:68:77:34:cb:
4e:ec:5e:41:4d:6c:ad:bb:59:a7:82:82:cf:2f:19:ba:a9:5d:
31:be:58:9d:37:5d:90:8d:45:3f:7d:94:de:0f:15:96:81:63:
f5:b0:35:7c:08:65:70:7e:9b:6e:e6:98:35:53:78:bb:cf:bc:
51:c0:f4:d3:c8:8d:c3:9c:ce:9b:18:6a:7d:cb:2a:cd:67:7f:
92:30:90:c1:ec:c4:17:ad:d5:d8:78:0e:bf:09:f4:ae:47:57:
2e:20:d4:b0:13:74:aa:35:6e:b9:b5:82:f5:b0:44:09:6a:17:
13:cd:db:66:4d:a6:c6:ca:c1:50:3f:8c:4c:63:d8:9e:01:3b:
93:bd:b4:42:b1:42:58:34:8e:78:b0:b3:34:7b:be:57:92:81:
cf:72:6d:8e:b3:43:b3:03:26:b9:54:1b:31:1f:8d:1f:ef:d4:
3b:f3:10:ad:2a:ed:aa:4c:7b:a0:80:65:00:2f:6e:1a:b8:b2:
c6:25:4b:a5:d1:8b:c5:80:12:a4:29:9b:5b:e4:02:e0:5d:de:
c0:c3:f2:f0:9b:c7:41:f9:4c:de:96:9b:b0:4f:9f:f7:2a:af:
2e:ab:20:58:c2:16:61:9f:96:c1:1b:f2:d8:86:88:3e:4d:0a:
01:84:1d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:11 2026 by rpki-client