
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/B49957AA134B11F0AE18CB2BC4F9AE02.roa
File: B49957AA134B11F0AE18CB2BC4F9AE02.roa (raw, json)
Hash identifier: JXFvADq4YTaqaen/tnBh56vOg+t9TdkXrX7ZuGzAnPI=
Subject key identifier: C7:8C:21:05:14:A4:9D:2C:22:51:B4:40:B5:5D:97:1F:88:CE:C0:22
Certificate issuer: /CN=A916B7FC/serialNumber=857507F1D8B3915C9510D504700ECE890B06685F
Certificate serial: BC
Authority key identifier: 85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/B49957AA134B11F0AE18CB2BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:17:52 +0000
ROA not before: Fri 09 Jan 2026 06:24:38 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 138668
IP address blocks: 160.191.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.crl
rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B7FC, serialNumber=857507F1D8B3915C9510D504700ECE890B06685F
Validity
Not Before: Jan 9 06:24:38 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a42060-986c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:92:47:06:55:83:65:1a:b0:62:2a:2e:40:
9a:9e:d1:1a:23:b2:ee:b8:bc:a0:45:8b:28:de:92:
2d:aa:76:ee:80:e9:6e:01:1f:e2:0a:67:e2:92:26:
22:8f:ae:29:3a:86:4e:df:0d:7b:b7:b8:7d:d6:f8:
5c:e7:06:c2:bd:7c:6f:fc:28:cd:d4:19:91:ac:f1:
4e:6e:43:6a:ac:60:0d:ca:b9:da:4e:fa:91:8f:c2:
46:51:00:6d:1d:06:de:3a:33:74:9c:6f:52:25:6f:
df:a2:68:70:ae:6f:86:03:50:4d:92:f1:cb:cc:26:
d8:4a:80:22:cc:8b:59:94:be:9c:34:cb:52:29:73:
3b:c7:3f:74:6d:b1:d0:7f:64:77:51:7a:82:14:eb:
22:90:b0:34:fa:11:2f:1a:80:0a:54:fe:e9:47:f0:
13:2c:0e:4c:30:1a:57:03:7b:46:cd:ea:e1:a5:fc:
bd:3b:e8:79:0c:dd:37:cc:ef:0f:25:f2:7a:96:08:
78:c2:a2:8f:3d:ed:a6:63:ef:c0:7d:c8:ff:20:2d:
f8:ef:b9:10:db:b9:81:d2:de:58:4f:b7:9a:34:ef:
21:f1:35:af:f8:e8:77:cd:43:b3:1b:b9:a6:7a:7c:
9c:53:45:9d:cb:a8:60:8b:ff:a0:58:4c:a0:15:e7:
2a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8C:21:05:14:A4:9D:2C:22:51:B4:40:B5:5D:97:1F:88:CE:C0:22
X509v3 Authority Key Identifier:
keyid:85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/B49957AA134B11F0AE18CB2BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.178.0/24
Signature Algorithm: sha256WithRSAEncryption
74:54:e9:df:8e:8b:6c:78:01:ca:15:26:65:14:e1:8b:0d:bd:
d2:ba:f7:be:29:2b:b9:12:64:a1:43:82:f9:bd:70:82:3a:89:
98:2f:b2:ea:0f:12:db:06:e9:bf:d2:73:31:fb:01:49:d0:f3:
49:60:b0:b2:d7:6a:22:78:71:d3:a6:72:39:a0:dd:a2:13:35:
4a:56:18:e6:1d:f0:8d:f4:c7:e1:ad:e5:13:96:d5:0f:4a:90:
9c:f7:76:27:c9:01:59:2e:2b:f8:1d:e8:8a:e7:07:46:07:96:
89:05:69:8f:13:82:f8:2c:b3:93:7c:3e:83:10:ac:1b:1e:90:
b1:0c:87:49:7c:1f:ee:a7:ba:ee:e6:a1:15:a7:1e:55:55:79:
71:ff:96:f7:36:04:39:d7:07:e1:d8:e1:65:fe:de:d1:9d:95:
d0:98:1a:e9:07:1e:cf:3e:5c:1d:1e:e5:08:23:74:00:a2:c2:
33:51:8b:b9:36:de:6b:b7:5e:32:69:64:b3:99:ab:4b:4e:3d:
6c:44:8f:fc:cc:37:62:3d:62:35:d0:ab:ac:05:03:df:77:20:
18:99:23:c3:d6:c0:3a:f7:04:d7:ed:3a:33:c1:e5:10:fd:5f:
27:93:22:83:6b:6b:39:38:af:b3:1a:eb:2a:ef:24:bb:39:67:
2c:14:34:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:17 2026 by rpki-client