
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/817DFE46F25911F0888104275F6F56BC.roa
File: 817DFE46F25911F0888104275F6F56BC.roa (raw, json)
Hash identifier: wLoZHxeWXVPf9Mhwdgvk+RTkXwq9SIFXtoWzgRQoxDQ=
Subject key identifier: 6C:1A:0D:06:80:44:EF:C6:98:02:00:E9:06:28:C5:B5:DD:11:7E:96
Certificate issuer: /CN=A916BCDF/serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE
Certificate serial: 12C6
Authority key identifier: 51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/817DFE46F25911F0888104275F6F56BC.roa
Signing time: Sun 01 Mar 2026 17:50:14 +0000
ROA not before: Thu 15 Jan 2026 21:31:09 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 20473
IP address blocks: 43.224.32.0/22 maxlen: 24
103.43.72.0/22 maxlen: 24
202.182.96.0/20 maxlen: 24
202.182.112.0/20 maxlen: 24
2401:c080::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.crl
rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4806 (0x12c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCDF, serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE
Validity
Not Before: Jan 15 21:31:09 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a47c56-5262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:d7:5b:11:67:8b:28:f3:de:21:60:1c:ee:
07:05:5d:0a:e9:6a:37:50:e4:32:88:91:7e:25:37:
e3:74:4b:31:76:0b:d0:72:d1:58:05:04:bb:48:5d:
c8:a3:07:21:41:33:e7:f1:f8:8c:fc:8f:6d:da:d2:
be:b3:af:19:c0:8c:8b:4b:04:78:ba:a5:b5:02:a7:
e7:92:f6:79:e4:06:81:55:50:a7:4a:af:9f:91:b9:
3b:93:2a:f4:22:6f:2b:45:4c:d9:70:95:6d:e4:82:
19:2f:a5:52:8a:11:06:68:44:d9:60:19:b4:8b:c4:
e2:81:96:4c:fd:6d:0f:b2:25:ad:4e:b1:db:5f:14:
1b:17:63:73:6d:3b:c1:3a:7d:7b:5d:da:7e:7e:c6:
8f:c3:9e:96:9e:cf:33:89:98:56:63:1b:44:ef:31:
8c:93:f4:4a:b0:69:ba:fd:d0:54:c3:ce:2c:a5:cd:
94:68:d8:f8:e0:5e:42:05:df:91:9b:2f:ac:c4:c5:
38:da:f5:20:44:c7:85:69:f1:b1:df:8f:0a:a4:c5:
95:5b:e8:36:a9:f6:42:2d:2d:99:a2:80:10:95:f8:
45:a5:0f:48:a4:1e:56:2a:7a:3b:85:4c:da:c4:1f:
f6:1c:85:36:6c:bd:0e:24:b7:06:2f:b3:d8:a3:c6:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1A:0D:06:80:44:EF:C6:98:02:00:E9:06:28:C5:B5:DD:11:7E:96
X509v3 Authority Key Identifier:
keyid:51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/817DFE46F25911F0888104275F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.224.32.0/22
103.43.72.0/22
202.182.96.0/19
IPv6:
2401:c080::/32
Signature Algorithm: sha256WithRSAEncryption
c7:3b:5a:0c:db:89:09:6b:75:97:76:66:6f:0b:1b:dd:ef:8b:
83:86:82:e9:25:17:68:1a:3d:67:5a:b5:01:ac:99:7a:cf:6e:
44:37:50:5f:05:00:85:10:b7:34:4c:7d:f6:8b:1f:fe:43:3d:
6c:d6:b9:9c:78:27:f6:02:9b:de:53:5a:77:4c:42:a3:15:6a:
1c:56:9b:29:73:b0:7d:91:ba:7a:11:bd:eb:d4:1c:c5:ce:38:
15:5e:69:48:02:fd:21:30:99:0c:7c:e3:fb:a0:1d:59:31:41:
45:bf:06:76:24:4f:5a:d0:86:5b:8b:42:5e:cf:d9:35:8f:d1:
3d:0b:77:23:15:e7:f2:81:3e:60:bb:a2:f8:42:83:68:6f:34:
97:23:fe:4a:01:d3:08:03:ba:52:08:96:7b:83:28:5d:38:a4:
7b:02:75:57:9c:08:c8:84:42:86:d2:32:2e:a7:64:fa:ee:a7:
be:19:4f:7c:e0:ea:1b:cc:b2:f6:59:0e:08:fc:8f:5b:cb:cf:
04:d4:ce:91:77:b9:4e:9e:12:e8:f3:f9:5b:19:df:3d:43:f1:
9a:e0:60:13:e6:a1:ca:26:f3:40:0b:4e:cc:8e:c9:ce:4e:61:
3f:af:f3:1a:b8:c2:38:24:ca:a5:2c:e8:c1:66:22:06:0b:ed:
bb:83:b6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:54 2026 by rpki-client