
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/B4F0A9F800A011E8B6C9E20AC4F9AE02.roa
File: B4F0A9F800A011E8B6C9E20AC4F9AE02.roa (raw, json)
Hash identifier: uLAMMJ1ZH6DI7iyetTkGs+yUb4BJj72QELCzByPN7qk=
Subject key identifier: 2B:3E:CD:46:39:54:D2:5F:79:1D:F3:2F:FF:2A:B9:EC:E5:B4:B8:FB
Certificate issuer: /CN=A916EF76/serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357
Certificate serial: 188D
Authority key identifier: 7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/B4F0A9F800A011E8B6C9E20AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:43:35 +0000
ROA not before: Fri 14 Nov 2025 16:34:42 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 14907
IP address blocks: 103.102.166.0/24 maxlen: 24
2001:df2:e500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl
rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6285 (0x188d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EF76, serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357
Validity
Not Before: Nov 14 16:34:42 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a44287-863a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:e6:1e:63:b0:30:7c:4b:98:a7:b4:3e:ab:
f8:7e:70:89:53:1f:ac:c3:f2:d4:40:58:dd:4f:48:
2a:42:09:7d:aa:58:32:7c:ae:27:a5:b8:50:3c:6e:
d2:d0:34:c1:72:ac:a1:e2:ac:f5:9a:de:b6:45:82:
0a:4f:23:d1:8d:fd:8c:3d:ab:43:c4:e4:43:ca:e9:
70:71:ae:57:37:c8:1e:43:30:17:50:15:1d:ed:2a:
ee:1f:85:a8:5e:3b:17:62:0e:3e:98:86:92:73:4d:
77:ff:ee:54:45:9a:45:fd:0b:4a:67:fa:77:f8:d8:
af:19:2b:e7:64:4e:0c:8b:2c:65:09:9f:f1:8f:a0:
0e:3b:c6:c0:3b:5a:1a:fc:a7:6b:6a:9f:0f:17:b9:
cf:7a:30:dd:d4:fd:ea:a0:6b:e8:6e:20:88:58:92:
35:a0:52:36:bc:1c:b3:5a:2e:26:c2:38:ae:c6:1f:
d4:42:bf:af:65:24:f0:cb:16:22:2f:c5:ac:ba:89:
21:87:00:e1:b3:cf:27:b4:90:22:c4:83:a5:e1:c2:
37:62:93:d2:5c:1a:87:4c:c5:e2:98:cf:c5:22:d7:
c8:c0:33:50:3d:e3:18:0d:52:d7:aa:58:4b:be:9d:
53:ba:08:d7:15:1e:63:88:a5:62:2b:5b:de:10:8d:
5f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3E:CD:46:39:54:D2:5F:79:1D:F3:2F:FF:2A:B9:EC:E5:B4:B8:FB
X509v3 Authority Key Identifier:
keyid:7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/B4F0A9F800A011E8B6C9E20AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.102.166.0/24
IPv6:
2001:df2:e500::/48
Signature Algorithm: sha256WithRSAEncryption
ae:de:9e:19:ed:cf:ff:ee:93:48:55:85:cb:a6:31:0e:05:0f:
67:76:91:94:5f:41:97:77:b4:fd:02:58:94:b5:28:83:18:30:
d6:97:ae:9b:3e:46:9d:80:37:41:33:62:96:63:0e:e7:e9:b8:
f7:2f:f6:86:88:fb:2e:18:34:f7:4b:81:ee:a0:79:b2:af:86:
f3:7c:f7:e1:11:a0:fd:3b:8e:8d:85:63:6f:af:53:f2:5b:fe:
b4:6a:2c:73:1a:ba:e5:04:36:cf:b3:04:40:9e:54:7c:3f:db:
29:2a:45:e6:c8:49:e0:31:39:ac:6b:d7:fe:ce:a8:9c:d4:b9:
26:6b:15:69:87:61:cc:d4:97:51:e3:c4:07:a5:95:b0:eb:92:
63:77:83:0d:93:de:e5:cc:f0:ee:79:00:39:0e:bb:8a:c3:1e:
fb:58:f5:0c:8e:be:04:54:ff:b5:0b:40:f8:64:f6:2f:2e:f0:
f4:09:5f:71:10:7c:a1:a7:b4:1c:58:f7:0a:91:4a:bd:23:ee:
52:06:46:fe:4e:e2:bb:b5:93:06:14:21:2a:48:38:70:d6:b1:
b2:33:ea:46:c4:e7:27:62:6f:73:32:85:ed:49:0c:44:cb:83:
2e:52:b8:e9:c9:2b:99:d0:00:c1:2f:76:ff:52:76:35:cf:1e:
f4:df:5d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:56 2026 by rpki-client