
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/413AD9F852E411EC9E19AA2FC4F9AE02.roa
File: 413AD9F852E411EC9E19AA2FC4F9AE02.roa (raw, json)
Hash identifier: 3Nz0u0qKawbNn//HDkZr80q3+/OhbNMzbbOUzKEulCE=
Subject key identifier: 74:8A:1F:79:AA:5C:90:42:C7:AC:CC:79:6F:D7:DB:AD:70:A1:FC:43
Certificate issuer: /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
Certificate serial: 052B
Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/413AD9F852E411EC9E19AA2FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:07:57 +0000
ROA not before: Sat 19 Jul 2025 00:37:23 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 14618
IP address blocks: 202.92.192.0/24 maxlen: 24
202.92.193.0/24 maxlen: 24
202.92.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl
rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1323 (0x52b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
Validity
Not Before: Jul 19 00:37:23 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4645d-6157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:79:db:57:83:db:05:87:8f:4a:91:cb:b1:
41:97:23:37:bd:46:e6:ab:4d:33:00:56:bc:65:66:
c5:3c:5f:ce:1a:31:64:fe:b4:3c:6a:66:54:51:0a:
47:f0:e4:60:b7:df:34:9d:f7:64:73:86:9d:84:58:
81:ce:73:dc:57:79:2c:95:51:28:4e:af:b6:c2:ad:
b0:f5:3c:43:fe:76:7e:4f:ff:41:18:f4:73:7c:ec:
ba:1e:bd:07:f2:2b:9b:97:83:2d:39:22:92:ce:0f:
29:33:8f:15:e2:6a:0c:44:30:27:b3:f6:bf:0b:57:
ae:c7:05:68:37:9e:9c:2e:b3:df:db:19:d6:0b:0d:
7c:88:e0:63:12:06:0c:ff:63:10:0a:7e:a6:9f:58:
fa:ae:03:85:98:15:5e:72:bf:2b:bd:81:8b:67:81:
1e:dc:0a:ee:90:d5:aa:bb:4e:8a:6c:8d:83:ce:76:
ee:2b:9a:ae:e3:78:60:a1:5a:78:05:74:6d:04:55:
eb:cf:3e:7d:88:f4:0e:9e:a9:9c:15:c2:b1:c3:47:
52:75:38:22:9f:06:0e:4d:0d:1b:5b:d7:1a:79:48:
d4:97:82:2f:ee:c1:c0:11:8f:ec:19:30:30:9b:6e:
e7:cf:71:f3:de:13:63:bd:0b:33:20:84:76:af:bc:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8A:1F:79:AA:5C:90:42:C7:AC:CC:79:6F:D7:DB:AD:70:A1:FC:43
X509v3 Authority Key Identifier:
keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/413AD9F852E411EC9E19AA2FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.92.192.0/23
202.92.196.0/24
Signature Algorithm: sha256WithRSAEncryption
22:25:dc:e7:e0:28:49:05:27:34:9a:da:32:b9:21:e5:c4:a1:
90:0f:99:9b:05:e3:71:92:ce:bb:4f:86:e0:c9:e2:ca:1f:08:
8b:f8:c9:c0:76:86:c8:c5:99:b8:f1:e0:56:58:e5:f9:24:6b:
ae:70:f5:96:56:ba:7e:fe:d9:a0:aa:5f:eb:a6:1b:2f:ff:92:
cd:6d:a5:99:96:8c:f6:3a:d3:0e:0e:67:78:ed:9a:01:4f:5d:
3b:6f:de:71:15:a2:6a:5e:cc:0d:08:b6:73:76:a2:eb:f5:7c:
64:98:4a:01:f7:8b:63:aa:5c:92:28:5c:94:30:45:f1:a5:1c:
11:fe:b4:27:57:78:7f:65:e0:d1:34:1e:bd:de:f6:a7:02:20:
d4:87:80:3f:bd:76:ae:59:91:4c:b3:0f:48:c8:9e:40:97:ce:
69:9b:03:69:12:00:27:04:a0:bb:e0:a7:91:62:60:63:3b:25:
b9:e5:1a:3d:4e:8a:60:bf:57:5e:5c:66:67:d8:2c:58:a7:4b:
bc:d5:60:0d:b5:05:fc:a9:19:f2:83:8d:c3:d2:8e:4d:85:eb:
6b:dd:28:b5:70:eb:2a:85:3d:17:6a:9e:6f:56:2b:3f:85:5f:
95:b7:ae:92:39:cb:26:0b:1d:9e:21:07:20:aa:5b:15:d7:b5:
94:2a:c7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:02 2026 by rpki-client