
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/02F57BD252E711EC931DB95CC4F9AE02.roa
File: 02F57BD252E711EC931DB95CC4F9AE02.roa (raw, json)
Hash identifier: veDCLElENt6wbI9mRj7E75/CdxbPil5hBlzZcPWTVIs=
Subject key identifier: 86:C7:E6:2B:17:73:67:12:E3:EB:AC:D2:2A:01:9C:0E:44:78:4D:E3
Certificate issuer: /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
Certificate serial: 059F
Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/02F57BD252E711EC931DB95CC4F9AE02.roa
Signing time: Fri 18 Sep 2026 14:33:35 +0000
ROA not before: Fri 18 Sep 2026 14:33:35 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 36776
IP address blocks: 49.50.6.0/24 maxlen: 24
103.169.228.0/24 maxlen: 24
103.169.229.0/24 maxlen: 24
202.92.192.0/24 maxlen: 24
202.92.193.0/24 maxlen: 24
202.92.194.0/24 maxlen: 24
202.92.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl
rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1439 (0x59f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
Validity
Not Before: Sep 18 14:33:35 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6aad4bbf-2d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:dd:e9:75:97:f4:16:c6:04:3d:47:94:79:
67:4f:7a:d1:4e:bb:43:f5:f2:40:f2:8a:d0:22:e2:
45:94:0f:66:8f:9f:a6:91:ad:6c:ee:06:ae:f3:04:
95:20:2f:d0:71:38:08:8b:2f:ca:99:12:a9:6f:68:
b9:f5:e6:92:78:13:33:6e:78:34:92:da:15:d7:53:
7d:9b:de:6e:0e:ad:41:04:c0:d2:07:9d:b7:9e:03:
fd:7e:b5:d2:99:aa:0c:76:8f:ee:a7:50:f9:3e:7e:
e0:d8:a2:18:2a:b1:3b:c8:35:5e:08:2b:3f:04:8b:
1e:64:be:24:b3:25:73:be:68:5d:76:3c:5e:92:9f:
bb:7b:ba:c5:5d:f4:28:cf:af:a4:bf:41:be:db:58:
85:75:fb:14:b1:f8:1d:e7:75:79:fa:8f:de:50:8a:
67:c4:24:13:f7:12:48:64:7f:33:57:e6:1b:29:d1:
27:0f:3f:dc:ea:6e:5e:8a:0e:d0:be:a6:1c:4d:f5:
7a:86:9d:6b:d4:09:ec:86:e5:ee:ba:dd:93:55:c9:
3b:87:ee:c8:05:ed:9a:fa:e9:1e:33:53:75:0b:fd:
76:ea:76:35:8d:18:40:9e:04:92:54:4b:7d:a9:5c:
3d:d0:d5:1a:55:aa:c1:71:7e:40:b8:c8:c1:70:3a:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C7:E6:2B:17:73:67:12:E3:EB:AC:D2:2A:01:9C:0E:44:78:4D:E3
X509v3 Authority Key Identifier:
keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/02F57BD252E711EC931DB95CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.50.6.0/24
103.169.228.0/23
202.92.192.0/22
Signature Algorithm: sha256WithRSAEncryption
52:dd:1d:a7:a9:d7:1f:e5:50:0b:36:f2:9b:79:f1:81:4d:8f:
b4:1e:cf:13:d0:46:85:79:0b:d3:e9:16:a1:bd:25:76:9f:05:
00:dd:c8:de:55:96:f1:85:9c:fc:57:06:6f:9b:f6:5a:81:38:
fc:e0:51:16:99:76:08:f2:52:ad:32:e3:f8:a8:cf:11:dd:26:
e8:e0:7c:dd:58:d7:b9:a9:56:3b:87:08:2d:f6:5d:93:b6:c1:
17:42:91:48:19:a2:95:7e:e5:9e:07:8e:0b:0c:ef:4c:01:d0:
af:55:0f:b9:4f:e8:88:7e:06:ac:73:ae:3c:56:c1:45:22:6f:
77:a0:be:48:36:9d:73:b5:f2:04:11:93:e3:58:fd:7e:06:1a:
04:fb:3d:c4:6b:e4:92:dc:3a:21:2c:08:7c:c3:c5:14:45:7b:
ff:97:a6:32:95:37:d7:7b:7c:52:bb:9e:e9:89:b5:1e:54:6a:
13:d6:26:8d:cf:58:a8:99:1f:03:42:9e:41:49:a8:98:07:6c:
ed:d0:cf:24:38:ac:69:69:bc:db:64:5a:34:84:60:ee:ea:0c:
62:1d:6c:8c:92:6b:86:46:3a:37:91:95:e7:9d:b4:7d:5a:63:
e8:6e:33:92:16:12:83:7f:5b:67:2a:81:81:f9:84:f0:9d:45:
42:30:83:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:24:55 2026 by rpki-client