
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/82FF48B4AB3C11EC9D6C1668C4F9AE02.roa
File: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (raw, json)
Hash identifier: 2SfGs1jOgqzEhF9rdWUTh/Lqm2DcuWtgPENfS4h26Tg=
Subject key identifier: 8F:B9:E8:21:38:E7:D6:49:17:7C:BD:E5:CC:05:F4:88:B6:50:A1:80
Certificate issuer: /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Certificate serial: 0406
Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/82FF48B4AB3C11EC9D6C1668C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:56:42 +0000
ROA not before: Fri 25 Apr 2025 00:56:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136451
IP address blocks: 103.184.136.0/24 maxlen: 24
2001:df0:9140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:45:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1030 (0x406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Validity
Not Before: Apr 25 00:56:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3ff4a-9fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:5e:3b:77:2b:99:b1:92:fc:ba:e2:1f:16:
92:c0:81:80:c3:d2:08:48:69:85:46:c1:12:6c:4b:
d3:aa:da:a1:d1:28:5d:91:c0:b3:a3:4c:7a:97:9d:
88:25:6a:bf:f6:4a:39:6a:6b:9a:fe:2a:4d:86:b5:
33:10:79:d6:e7:ba:60:cf:d2:8b:a6:f3:da:56:e9:
b1:ce:64:fc:b3:0e:9d:b8:32:27:cf:64:08:c6:87:
ce:89:26:a8:8e:57:e0:08:1a:8e:df:9a:1b:9e:be:
98:c1:2a:b4:48:7b:1f:a0:77:7a:fc:9d:cd:f9:40:
b5:fd:53:75:9a:57:d7:b9:60:19:4d:9b:88:5e:e3:
f7:f5:87:47:65:2b:a1:b9:97:0f:0d:6e:2e:83:37:
8c:0b:d6:fb:cd:cb:8b:74:26:db:f4:e3:81:ab:87:
23:87:de:f4:3d:63:52:cb:cf:7f:19:44:15:ff:eb:
f5:3e:c8:b9:78:78:7f:8d:d7:68:31:60:d1:87:88:
9f:dc:5f:c6:e3:34:c7:54:2b:8c:5d:b0:d1:90:9b:
90:1e:67:e4:b5:46:82:96:1f:82:40:7f:7f:e7:5c:
39:c6:de:3d:be:b9:67:6d:43:ad:6a:a3:04:38:aa:
a0:57:a5:b9:85:47:66:65:0e:c0:df:f7:20:fe:54:
1d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B9:E8:21:38:E7:D6:49:17:7C:BD:E5:CC:05:F4:88:B6:50:A1:80
X509v3 Authority Key Identifier:
keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/82FF48B4AB3C11EC9D6C1668C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.184.136.0/24
IPv6:
2001:df0:9140::/48
Signature Algorithm: sha256WithRSAEncryption
5e:39:16:e5:6e:e5:0d:65:e9:0e:86:39:c6:b8:36:13:05:4d:
92:df:47:04:05:15:31:b5:1c:3e:54:eb:1c:81:09:33:a1:bb:
16:82:98:0f:08:c3:6f:2a:19:8d:7c:36:99:05:5d:2a:cf:12:
e7:05:6c:10:25:78:21:aa:5d:2f:c3:62:f4:74:d0:75:05:29:
3b:ea:bc:9e:8e:d4:de:83:17:15:ca:df:8f:46:d4:c4:1a:04:
c6:93:46:f7:77:98:dc:d7:ff:36:68:4d:f3:be:ac:16:a0:e7:
3d:d2:df:5f:f0:ea:d6:5a:bd:f9:8c:9a:05:bf:11:c9:6b:3b:
76:56:6f:03:ca:2f:3d:51:1a:66:04:af:0a:a3:dc:56:e6:47:
e4:43:55:f8:85:7a:af:aa:2a:99:4f:e5:f5:71:06:93:5a:45:
a2:c2:1d:67:4e:27:30:bc:9e:a0:56:cd:6d:19:6f:25:88:02:
53:81:55:e0:b8:22:24:de:cc:4e:1b:5d:23:8f:b0:97:05:88:
aa:39:bc:07:15:3b:f8:32:9d:95:c5:a6:7b:75:13:b5:75:07:
a1:88:51:e3:7b:2a:28:c0:0f:5a:b6:04:90:9c:15:50:2f:0d:
c8:1f:a7:24:79:20:37:d4:8d:03:9f:41:07:2a:60:24:97:7e:
4f:e0:9a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:00 2026 by rpki-client