
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/B951F87ABE6D11EF933FE870C4F9AE02.roa
File: B951F87ABE6D11EF933FE870C4F9AE02.roa (raw, json)
Hash identifier: S40NIyhP5u7/UlmLJYX9/RykdcdP5gu6OSoqCbZEohA=
Subject key identifier: 34:C8:2B:D3:87:5F:C9:2C:A1:3F:46:A4:3F:2A:48:2D:F6:EA:5D:7F
Certificate issuer: /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
Certificate serial: 0673
Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/B951F87ABE6D11EF933FE870C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:36:25 +0000
ROA not before: Sat 08 Nov 2025 21:43:37 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 7545
IP address blocks: 203.28.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl
rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1651 (0x673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
Validity
Not Before: Nov 8 21:43:37 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a432c9-1f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:34:fc:42:fe:88:e4:f5:e8:17:72:58:f1:
bc:19:75:fb:ad:0a:bd:43:28:50:1d:d5:d2:b8:df:
41:f1:93:57:1c:86:88:35:11:24:91:9d:39:75:5f:
7b:61:f2:f5:22:b9:90:7d:f2:ca:89:39:e8:21:c7:
e6:a6:a5:a0:bf:d8:a8:a9:b5:79:2e:15:26:69:df:
6c:51:86:22:02:49:c7:1a:43:9c:8b:18:58:8b:64:
7d:81:22:1e:36:ef:21:83:5e:e1:9c:38:9a:e2:0b:
50:2e:1e:73:27:1f:9f:dd:ec:b7:46:6e:84:a7:a5:
42:d8:be:c2:39:8b:f3:aa:a5:6e:43:5b:53:94:a1:
ca:34:45:18:4f:02:aa:e3:f0:4e:fd:24:aa:47:50:
be:c7:ad:fb:ec:69:66:ff:f0:90:79:2b:aa:ca:cb:
63:15:1a:14:99:07:22:eb:e3:cb:0f:9a:ed:18:f7:
f2:74:cf:9c:c8:6c:47:2a:ea:f3:b6:78:6c:f5:56:
6d:e7:5f:09:50:de:4c:90:bf:aa:e6:c2:71:43:28:
3a:f7:27:17:af:df:75:b3:cc:c9:68:54:13:34:ac:
b8:9e:18:c1:d3:70:75:37:2e:da:ba:31:ef:74:2d:
e2:f2:e9:9a:cd:ce:74:d9:3c:81:d2:95:be:d2:7a:
c4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C8:2B:D3:87:5F:C9:2C:A1:3F:46:A4:3F:2A:48:2D:F6:EA:5D:7F
X509v3 Authority Key Identifier:
keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/B951F87ABE6D11EF933FE870C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.28.167.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ba:53:ac:44:bf:4f:ff:0b:2f:eb:54:5d:1c:6b:9b:56:5d:
2d:89:39:21:15:00:66:02:ee:97:73:63:3b:ba:43:4f:e6:2e:
54:ef:79:f5:f5:31:0d:d4:24:5c:56:aa:d4:0a:7e:20:58:44:
1b:2c:90:09:29:9c:6f:86:7f:68:a8:52:24:02:d4:be:e3:42:
39:66:9b:c4:75:3d:ad:ae:64:6d:2e:6a:62:f4:35:34:b5:01:
7b:88:3c:d3:26:da:a3:a9:a2:71:04:55:44:27:db:25:7b:9a:
d3:76:69:10:7e:97:28:ac:59:46:5d:a3:7d:09:7d:87:e8:68:
b4:5b:a9:0f:c2:cf:b8:ae:1d:98:e9:31:b1:26:76:61:a8:6f:
75:ce:d6:57:9c:fc:01:d1:92:9b:84:9a:9d:10:4e:68:7d:6e:
fc:3b:94:f4:2a:da:dc:da:21:d9:8e:da:2a:23:3c:8e:aa:0e:
d1:ae:3a:28:a2:e5:aa:8a:1f:46:ba:0f:3a:5c:9a:60:71:94:
c0:0c:56:d4:74:dc:82:b0:24:57:3b:5f:72:c8:71:e3:63:71:
92:81:72:79:d4:15:f2:ee:1f:45:9d:85:5c:73:42:be:b3:43:
e1:e7:c0:2a:14:ee:ac:c1:00:66:5d:4c:af:b8:43:6f:c0:83:
92:ab:b7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:27 2026 by rpki-client