
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/880E53BC852A11EE8B988A85C4F9AE02.roa
File: 880E53BC852A11EE8B988A85C4F9AE02.roa (raw, json)
Hash identifier: k5DYksJixKDhcJPFopcX+J9k9P/tVTzxnGH1/taUbzM=
Subject key identifier: 31:B1:33:91:AD:7F:80:D0:75:BF:3E:FC:C2:6C:65:DE:B3:31:45:7C
Certificate issuer: /CN=A916DED9/serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9
Certificate serial: 01B0
Authority key identifier: E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/880E53BC852A11EE8B988A85C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:26:13 +0000
ROA not before: Sat 29 Nov 2025 02:29:55 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 45666
IP address blocks: 202.89.100.0/22 maxlen: 22
202.89.100.0/24 maxlen: 24
202.89.101.0/24 maxlen: 24
202.89.102.0/24 maxlen: 24
202.89.103.0/24 maxlen: 24
203.55.53.0/24 maxlen: 24
2407:8600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl
rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:56:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DED9, serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9
Validity
Not Before: Nov 29 02:29:55 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a41445-334c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:c4:47:a7:34:b7:18:b0:31:ae:ff:a3:3c:
a9:b0:8b:50:be:0f:b8:9a:64:7d:36:93:2b:84:f6:
1b:a0:49:94:42:9b:33:b9:6d:8f:b2:89:d6:48:51:
3a:0f:3f:09:68:3c:d5:ce:15:df:5e:1d:85:22:26:
95:eb:0c:b0:35:9c:3d:4d:f6:d0:84:3a:77:41:55:
6b:97:cc:2f:48:23:c9:2a:5b:1a:e8:f1:c4:9e:55:
90:b5:92:a4:5a:e8:c9:aa:79:aa:07:74:d6:e3:95:
9f:d2:49:2c:30:15:6e:d2:79:dd:87:f7:88:33:39:
c9:0f:36:40:e1:b4:2a:65:4d:86:3b:b9:bb:38:e4:
60:17:75:f1:7c:eb:f5:38:9c:22:eb:50:24:51:9c:
0b:fd:54:e9:5e:af:13:29:16:73:a9:1c:cc:3e:77:
af:f6:cd:0c:fb:3a:34:f0:88:17:93:d5:ac:88:47:
a6:73:bc:95:12:ce:80:4c:ff:24:d4:e6:8c:b7:a6:
b6:94:4b:7f:38:20:79:f8:62:75:b2:5b:59:1a:5f:
c1:de:e0:49:a0:ac:8c:2f:6a:19:21:bf:58:bd:d7:
5e:ff:52:f4:29:77:3c:1e:20:fc:9f:4b:7a:10:f6:
16:2d:4e:ec:be:55:82:6c:72:eb:76:41:e1:9c:41:
e0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B1:33:91:AD:7F:80:D0:75:BF:3E:FC:C2:6C:65:DE:B3:31:45:7C
X509v3 Authority Key Identifier:
keyid:E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/880E53BC852A11EE8B988A85C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.89.100.0/22
203.55.53.0/24
IPv6:
2407:8600::/32
Signature Algorithm: sha256WithRSAEncryption
82:4c:49:04:91:6b:a7:d0:5d:98:dc:2d:05:79:02:1b:8d:b7:
72:fc:eb:5c:a8:ba:26:65:45:f4:41:23:79:e9:08:12:d9:96:
98:42:b7:65:34:2b:3e:2b:42:76:ff:9e:69:17:92:5a:69:06:
82:19:b3:7a:4c:59:a5:3c:c1:9a:47:f4:67:c4:47:b6:29:44:
a6:5c:bf:62:48:26:5a:89:ee:55:60:23:d1:ab:94:f4:f8:16:
af:15:7b:58:fe:bb:b5:8b:df:0b:3f:23:da:b8:1e:bb:68:80:
5e:e5:f6:9f:e8:aa:a7:4a:fe:98:57:f6:50:14:11:59:f6:82:
a0:48:dc:ca:a1:9e:f4:ee:1a:67:3d:72:59:82:2c:93:8b:79:
0e:2e:62:95:a8:ba:03:97:03:ae:8d:b5:c1:ac:51:af:94:aa:
cb:d4:e3:1c:bf:9d:0f:54:34:f4:22:40:c0:ff:75:e3:97:61:
cb:65:71:dd:6f:8f:62:c3:1e:9e:b3:6a:f6:d1:24:9b:e7:e7:
40:1d:22:24:a2:5e:0e:d6:12:c7:74:6b:e9:1d:66:ff:ee:21:
49:ed:da:68:c2:b2:02:5a:19:8d:a1:23:8f:5e:78:a5:40:69:
ff:d7:1c:75:ac:e4:99:64:46:1b:4a:01:f7:a7:ab:54:c6:3b:
80:7e:7f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:39 2026 by rpki-client