
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/72AA1A38D7CB11EBB8307453C4F9AE02.roa
File: 72AA1A38D7CB11EBB8307453C4F9AE02.roa (raw, json)
Hash identifier: ROzhzi5zfgy9fgc6zLXgho7HUMQ2WdNCrJHIx4CWj+E=
Subject key identifier: A3:66:D7:02:1A:3A:CC:9E:C3:B5:CC:E7:8A:62:C9:8B:C7:82:C4:00
Certificate issuer: /CN=A916C6A1/serialNumber=81BFDE9169D5C2C0EB4517620753737699DF16AC
Certificate serial: 061A
Authority key identifier: 81:BF:DE:91:69:D5:C2:C0:EB:45:17:62:07:53:73:76:99:DF:16:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gb_ekWnVwsDrRRdiB1NzdpnfFqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/72AA1A38D7CB11EBB8307453C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:49:32 +0000
ROA not before: Tue 06 May 2025 23:32:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141999
IP address blocks: 103.164.66.0/24 maxlen: 24
2001:df6:4080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.crl
rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gb_ekWnVwsDrRRdiB1NzdpnfFqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 22:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1562 (0x61a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C6A1, serialNumber=81BFDE9169D5C2C0EB4517620753737699DF16AC
Validity
Not Before: May 6 23:32:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3fd9c-9ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:53:cb:60:c1:d1:86:cc:49:7c:e2:04:fd:
41:3d:13:5b:2c:a0:87:3e:f2:56:d2:06:a2:95:5b:
f8:60:14:4b:75:e6:6e:5d:eb:c2:a7:8a:3c:ac:ad:
c3:cc:92:10:ab:0f:d5:d5:bf:0e:86:71:66:02:d9:
62:20:5d:4f:90:9d:fb:cd:57:9a:52:3c:0c:ed:7c:
af:3b:2d:d9:50:74:75:73:77:cd:86:27:11:7f:91:
f4:1a:21:63:0f:7a:a1:4d:24:39:ef:38:a0:f5:d4:
ea:9c:04:fd:c2:c0:47:0f:dd:b7:4d:57:6e:35:ed:
7a:ba:0e:b1:a1:b1:c8:a7:19:4a:9c:f6:62:cc:23:
84:79:6d:52:1f:19:9c:c8:5b:09:4f:cc:92:51:3e:
02:de:31:99:f0:cd:f9:18:ab:c8:98:b0:6f:b6:69:
8f:8e:09:45:f8:01:63:0a:dc:ea:9e:36:f7:ce:f7:
3b:e7:66:a1:89:c0:82:f6:86:0c:fa:b6:9a:a4:32:
b3:bb:c9:d8:dc:82:a7:f5:eb:dd:37:9f:00:8b:98:
22:88:e6:80:ee:58:6a:63:56:b9:2a:90:12:f7:02:
bd:84:f6:75:e6:c5:d0:83:aa:6e:66:33:2d:fd:ac:
81:00:25:5b:03:e3:40:3f:d8:c5:23:d3:4b:98:b7:
db:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:66:D7:02:1A:3A:CC:9E:C3:B5:CC:E7:8A:62:C9:8B:C7:82:C4:00
X509v3 Authority Key Identifier:
keyid:81:BF:DE:91:69:D5:C2:C0:EB:45:17:62:07:53:73:76:99:DF:16:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gb_ekWnVwsDrRRdiB1NzdpnfFqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/72AA1A38D7CB11EBB8307453C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.164.66.0/24
IPv6:
2001:df6:4080::/48
Signature Algorithm: sha256WithRSAEncryption
25:b4:a9:f4:32:6e:af:c0:6e:68:e6:37:85:f6:33:d6:98:79:
31:6c:97:fd:49:38:c9:f7:fd:bf:08:5d:50:b1:16:78:22:28:
43:79:8a:d6:57:d7:e3:b4:53:6a:3c:10:d8:92:3f:f3:5f:99:
e3:6d:73:01:55:9c:e3:69:79:69:04:8e:e2:b9:4a:c7:ae:46:
fa:a3:35:bc:7c:12:80:73:8a:bf:79:0c:7e:44:a7:00:cb:b1:
65:df:90:92:bc:ad:29:54:4b:c6:90:e3:1e:a1:fe:16:93:06:
ec:1b:70:fa:7b:af:e6:c1:9d:c3:d5:a9:a5:9d:40:52:aa:7c:
d5:bb:5a:9d:e1:83:87:13:2a:b0:f0:1c:ea:17:57:a4:3d:11:
cf:fc:7d:e7:8a:19:28:a7:0a:9f:ca:60:43:47:76:60:66:00:
b6:83:36:e6:4b:88:af:75:9d:4f:d8:d0:1b:a0:7f:0d:6e:8f:
1b:bd:69:18:01:0a:12:5e:cf:4e:b7:fe:33:3c:fd:20:1a:e2:
61:c3:36:68:13:4c:40:64:b0:29:d6:49:71:ef:ce:0d:3c:1b:
5c:41:f6:f4:3c:f0:5a:33:af:a8:84:9a:a7:51:a5:9b:3b:9d:
af:c9:50:c3:e5:95:82:75:63:93:2a:e8:ea:55:bf:22:f3:eb:
a9:a0:74:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:18:36 2026 by rpki-client