
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa
File: DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa (raw, json)
Hash identifier: eC+Ca7N9y7VnPMiNtCOnwDbBNDTPawuOGNwqU/JVjQc=
Subject key identifier: 36:20:48:EF:04:90:0B:40:B1:6D:E0:A6:49:76:FB:5D:13:08:43:4A
Certificate issuer: /CN=A916C473/serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF
Certificate serial: 79
Authority key identifier: 82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:10:12 +0000
ROA not before: Thu 10 Jul 2025 22:54:37 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135310
IP address blocks: 165.101.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl
rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:05:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C473, serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF
Validity
Not Before: Jul 10 22:54:37 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a3e654-b16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:fe:fe:87:04:45:1e:20:5a:f2:c9:3b:cc:
c0:6c:41:a6:5d:a3:68:a8:99:2e:03:39:14:8d:27:
cc:78:86:fe:e8:b8:86:96:c3:d1:51:ae:16:54:f9:
87:ca:1c:fa:a1:99:13:d9:66:ee:3d:50:65:25:e4:
84:4e:f8:4a:55:3c:ad:2d:e6:23:78:f2:d2:58:19:
74:d5:71:ac:3b:0e:02:a6:b5:eb:b3:1b:86:93:23:
53:6c:82:b1:bc:d7:82:15:70:3e:cb:9d:de:4e:e6:
db:4e:4f:6b:0d:42:07:01:04:ac:d2:34:4e:6f:53:
b4:94:51:c6:20:57:89:91:cf:94:c3:8e:59:40:22:
19:fd:ee:53:36:50:03:1c:2b:f6:3a:ef:04:c5:e4:
7d:ea:f3:e8:f4:c2:28:1c:72:28:3b:8b:9c:c5:7a:
38:7c:d2:69:fa:35:34:af:80:17:fd:38:e3:8a:91:
fc:ab:37:0d:da:a0:31:28:15:b4:ab:59:97:a5:34:
fc:3f:42:03:fb:e4:40:95:d9:5d:c3:59:a7:4f:19:
54:1e:4d:36:6b:1d:13:e0:1e:42:0c:06:cb:ca:46:
34:c2:7b:dc:3e:9c:05:f7:8a:96:cd:57:ea:a6:b1:
2f:f1:2b:e6:d7:65:58:b6:5d:d7:36:ba:89:c1:14:
ee:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:20:48:EF:04:90:0B:40:B1:6D:E0:A6:49:76:FB:5D:13:08:43:4A
X509v3 Authority Key Identifier:
keyid:82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.176.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:74:fe:6e:8a:d1:6e:94:2b:df:74:a8:f2:26:56:f8:2a:07:
5b:c9:89:66:3f:87:e1:a5:6e:73:60:f2:ea:64:9d:6e:13:74:
cb:16:f5:94:55:84:64:ed:84:bc:bc:05:5b:e6:95:d8:7a:72:
3d:10:67:9e:f2:3f:3c:03:ab:60:87:68:9e:ec:2f:bc:f6:e3:
eb:2a:30:21:30:07:b2:a5:1d:ab:87:ce:3c:21:90:6a:f7:f0:
98:d5:b2:f5:9c:7d:bc:74:5c:78:f1:bf:83:f4:77:5d:57:79:
f5:a5:67:1a:ba:a0:00:d5:52:f6:6b:ae:41:b4:fc:cc:6b:ea:
17:66:c3:63:1e:9f:77:10:91:2c:99:4c:8d:55:a6:06:19:8a:
09:b2:1b:cb:12:3c:68:84:c5:4a:be:59:87:cd:db:9d:04:4b:
e8:41:a1:a4:11:55:f2:dd:8d:6e:5f:b4:67:aa:a9:2d:1f:0c:
e6:28:20:eb:6c:04:e7:b9:a1:60:6f:e8:21:d1:4d:a1:2f:0b:
89:47:9d:fb:b5:d5:dd:dd:97:47:52:49:d6:3f:11:1c:19:4e:
98:a4:84:58:b9:09:26:c8:76:7c:3d:bb:4e:be:3b:cb:2a:10:
71:78:8a:ef:48:26:4f:50:2d:6b:71:ca:ac:39:5a:e4:dd:b5:
5b:35:8d:16
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
QzQ3MzExMC8GA1UEBRMoODI2QUE4M0JCRTAyNDBEMTM5MDZBQkFCNDY0MzE3RTlF
N0FCNzBFRjAeFw0yNTA3MTAyMjU0MzdaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNlNjU0LWIxNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCq6v7+hwRFHiBa8sk7zMBsQaZdo2iomS4DORSNJ8x4hv7ouIaWw9FRrhZU+YfK
HPqhmRPZZu49UGUl5IRO+EpVPK0t5iN48tJYGXTVcaw7DgKmteuzG4aTI1NsgrG8
14IVcD7Lnd5O5ttOT2sNQgcBBKzSNE5vU7SUUcYgV4mRz5TDjllAIhn97lM2UAMc
K/Y67wTF5H3q8+j0wigccig7i5zFejh80mn6NTSvgBf9OOOKkfyrNw3aoDEoFbSr
WZelNPw/QgP75ECV2V3DWadPGVQeTTZrHRPgHkIMBsvKRjTCe9w+nAX3ipbNV+qm
sS/xK+bXZVi2Xdc2uonBFO5vAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUNiBI7wSQ
C0CxbeCmSXb7XRMIQ0owHwYDVR0jBBgwFoAUgmqoO74CQNE5BqurRkMX6eercO8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNDczL0Y1N0QyMzMwNURE
RjExRjBBNUJGRDY2RkM0RjlBRTAyL2dtcW9PNzRDUU5FNUJxdXJSa01YNmVlcmNP
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZ21xb083NENRTkU1QnF1clJrTVg2ZWVyY084LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QzQ3My9GNTdEMjMzMDVEREYxMUYwQTVCRkQ2NkZDNEY5QUUwMi9EQTk4QkE0QzVE
RTAxMUYwQjFDRDRDNzVDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGlZbAwDQYJKoZIhvcNAQELBQADggEBAA10/m6K0W6UK990qPImVvgq
B1vJiWY/h+GlbnNg8upknW4TdMsW9ZRVhGTthLy8BVvmldh6cj0QZ57yPzwDq2CH
aJ7sL7z24+sqMCEwB7KlHauHzjwhkGr38JjVsvWcfbx0XHjxv4P0d11XefWlZxq6
oADVUvZrrkG0/Mxr6hdmw2Men3cQkSyZTI1VpgYZigmyG8sSPGiExUq+WYfN250E
S+hBoaQRVfLdjW5ftGeqqS0fDOYoIOtsBOe5oWBv6CHRTaEvC4lHnfu11d3dl0dS
SdY/ERwZTpikhFi5CSbIdnw9u06+O8sqEHF4iu9IJk9QLWtxyqw5WuTdtVs1jRY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:33 2026 by rpki-client