
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/8247E286967711EA81018623C4F9AE02.roa
File: 8247E286967711EA81018623C4F9AE02.roa (raw, json)
Hash identifier: y10qCt7Fl6t2oez7PlUi3bvenEnmvPzgsBbQMTuv47I=
Subject key identifier: 5B:67:2A:70:59:81:AB:47:89:EB:26:B1:E6:46:02:D6:14:19:5F:02
Certificate issuer: /CN=A916FEAF/serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37
Certificate serial: 0940
Authority key identifier: 55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/8247E286967711EA81018623C4F9AE02.roa
Signing time: Fri 04 Apr 2025 20:33:05 +0000
ROA not before: Fri 04 Apr 2025 20:33:05 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 38084
IP address blocks: 203.92.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl
rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2368 (0x940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FEAF, serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37
Validity
Not Before: Apr 4 20:33:05 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67f04201-a6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:80:d7:1f:c8:30:8a:94:1a:46:34:89:19:6a:
8d:91:83:9a:8a:b2:96:60:e9:f5:09:66:e7:4f:f7:
e1:12:22:fd:e5:c9:c1:20:8e:9f:3c:41:13:7f:67:
ff:8c:0a:44:c9:97:37:36:95:b0:79:04:0d:a8:3e:
f3:d4:6b:7d:ea:b9:22:ee:dd:ad:18:a4:44:0a:48:
78:ff:08:a2:c4:7d:57:b3:6b:28:c7:37:30:21:b5:
8e:60:d3:54:8e:f6:8d:b5:a0:fe:40:95:5d:81:f5:
2c:23:f0:c8:11:b5:25:52:fa:0c:c3:6e:14:3b:27:
09:07:61:fd:2a:93:0b:bf:26:e1:bc:97:3b:e6:6f:
73:a3:f7:f7:4e:4c:e5:62:d6:16:0e:a2:80:0b:0a:
39:7e:71:cb:00:51:ab:f8:37:83:e8:47:d0:db:2c:
c7:04:2d:f1:83:57:b1:3b:b8:1e:7d:a0:4c:59:24:
cd:01:ac:b5:66:56:d8:5f:6a:88:0d:89:97:57:8c:
24:72:cc:f2:65:ac:ee:4d:27:e8:99:4f:ec:0b:a4:
bb:b6:b6:10:04:a4:5d:9e:6b:c4:0c:37:ba:dd:f4:
05:88:20:21:6d:24:af:21:ae:68:88:37:83:92:ae:
5b:34:65:db:b8:a8:38:43:63:84:3d:69:39:31:86:
89:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:67:2A:70:59:81:AB:47:89:EB:26:B1:E6:46:02:D6:14:19:5F:02
X509v3 Authority Key Identifier:
keyid:55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/8247E286967711EA81018623C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.92.26.0/24
Signature Algorithm: sha256WithRSAEncryption
22:02:cf:9b:18:12:5f:1d:42:17:63:35:d9:da:72:bc:dc:02:
d9:d9:7c:72:d8:7b:8f:8d:0f:7c:41:ce:58:1d:fc:58:a2:f3:
9c:db:50:59:ef:1c:15:8f:94:6d:42:05:71:b2:30:f6:7a:da:
c1:f7:63:29:00:df:b5:58:ea:47:41:6f:39:9a:aa:b6:b9:d3:
a5:33:f8:4b:9c:81:3e:1b:ae:48:fe:49:e6:89:74:25:8a:58:
92:8e:7b:4d:f4:bd:da:cb:f7:83:5f:ca:69:39:2c:20:47:15:
e2:26:81:69:40:4f:f9:39:4e:ec:38:8c:88:a4:9c:74:8f:d5:
15:68:3f:22:b1:be:17:92:66:89:52:26:c8:3f:3a:32:3f:c7:
cf:76:85:5e:86:16:2a:56:c4:2e:08:05:93:65:8d:7e:83:d0:
ca:65:eb:25:1c:64:f3:15:f0:b3:ea:56:75:03:95:41:d2:c8:
3b:d1:cf:b1:87:b2:f8:24:fd:d4:79:8f:9d:47:5c:31:ff:b5:
16:35:e3:bc:c8:ed:82:49:16:27:52:8e:b2:0f:8e:17:88:03:
c5:d5:dc:9b:c0:5d:f4:50:d0:80:d6:a3:b8:9a:c9:e6:af:7a:
7f:d6:42:33:9a:b6:69:c9:70:b2:f9:21:8d:16:02:09:6a:ff:
8b:f2:d8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:03:13 2025 by rpki-client