
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/E265728A877911EA9E28DF0BC4F9AE02.roa
File: E265728A877911EA9E28DF0BC4F9AE02.roa (raw, json)
Hash identifier: eJeSjBWnfyztRwss0NRo6wVnGnHYGD5kAHWaTt/BWrE=
Subject key identifier: E6:62:12:DE:DF:88:74:ED:D2:81:E9:66:EC:15:4C:1E:A6:BB:14:A8
Certificate issuer: /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Certificate serial: 0B87
Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/E265728A877911EA9E28DF0BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:45:33 +0000
ROA not before: Wed 02 Jul 2025 19:58:16 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 59362
IP address blocks: 45.251.228.0/22 maxlen: 22
45.251.228.0/23 maxlen: 24
45.251.230.0/23 maxlen: 24
103.220.204.0/22 maxlen: 24
2407:5c80::/32 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2951 (0xb87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D23A, serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Validity
Not Before: Jul 2 19:58:16 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a426dd-37e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:79:e5:e5:2c:a4:fd:cc:33:e8:de:ca:f9:ae:
fc:18:b2:91:e9:6c:26:28:4e:2d:cd:e9:2e:41:fc:
a2:c8:3a:34:e1:e6:90:cc:c2:95:b5:ff:a9:4f:45:
30:b8:ff:d9:5d:97:29:c1:e3:b1:4a:db:94:1c:a4:
75:89:6e:91:2d:dd:fb:55:bd:10:b4:a6:b8:43:83:
15:a2:c8:65:b0:49:ab:2e:28:8f:4f:b8:c1:c4:b0:
f6:4e:03:11:2a:4d:69:52:e8:3d:a1:05:d5:69:32:
57:57:8f:ca:a9:24:21:1f:2a:1e:b2:ad:23:80:8b:
3b:f2:b6:7c:89:35:66:6d:2f:8e:ec:e0:83:2f:be:
49:88:35:67:69:31:98:fb:95:2c:cf:08:39:1c:2c:
9a:1a:19:2f:ed:fd:61:21:9f:42:6d:5e:32:5b:d3:
8f:f3:2c:36:03:5e:c6:ec:d4:4e:45:0c:fd:da:f4:
f5:5b:85:a9:87:4c:7a:da:bf:5e:66:2a:1a:75:de:
5a:19:30:6d:28:3b:e5:b8:5c:43:55:33:96:7d:5b:
72:87:b1:d1:02:e3:ec:93:7b:2d:53:63:1e:2f:5f:
56:e0:7b:20:db:db:05:6c:ec:77:95:ff:53:95:14:
bd:88:83:8e:10:9c:3c:68:ba:a7:84:59:a8:b4:bc:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:62:12:DE:DF:88:74:ED:D2:81:E9:66:EC:15:4C:1E:A6:BB:14:A8
X509v3 Authority Key Identifier:
keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/E265728A877911EA9E28DF0BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.251.228.0/22
103.220.204.0/22
IPv6:
2407:5c80::/32
Signature Algorithm: sha256WithRSAEncryption
98:4c:26:b4:6d:32:d9:d3:6c:af:8e:d7:86:27:10:8c:9a:25:
32:29:f0:e3:76:61:2a:79:37:1f:3d:77:03:52:de:86:3a:7c:
c8:b4:71:4a:91:48:39:32:63:d7:81:58:00:db:44:63:97:9b:
a4:78:92:15:ce:08:3f:a8:31:29:48:84:02:0b:a4:08:33:d6:
84:e4:bc:6f:7a:fd:74:68:6b:cf:4f:a1:98:ed:68:07:50:73:
44:2e:c4:41:50:a4:06:7f:7a:16:a0:c2:f6:fb:bb:9a:83:0f:
a3:3b:60:ba:3b:e9:2b:ff:79:3f:82:7e:8c:3f:33:78:90:f9:
ea:16:49:e1:5c:a6:0d:bd:c5:6d:db:a9:4b:f3:34:e8:41:2c:
56:6e:7f:34:a6:50:f7:f1:d2:f1:37:54:03:a4:66:0c:fe:39:
85:74:59:31:9e:b2:d0:1c:40:70:5f:73:b3:64:e9:70:95:da:
ac:fe:b2:94:5d:13:45:5d:25:37:0a:59:4b:28:51:af:8b:7e:
26:5f:e4:6f:c7:76:fb:70:ef:98:e6:a8:ce:e9:ae:d2:0a:5a:
36:7f:e7:84:1d:bb:01:f1:e2:d2:0b:98:fb:40:ce:20:a2:ea:
50:8c:35:b2:55:bd:ff:bd:12:7d:70:51:fb:7a:0e:ad:e1:89:
f6:88:99:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:32 2026 by rpki-client