
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/BA4B22643AC911EBB83D7F0EC4F9AE02.roa
File: BA4B22643AC911EBB83D7F0EC4F9AE02.roa (raw, json)
Hash identifier: jVj6UwIo4TXqA/uqzwENPxn//OG6jURpNnawIkmt1rI=
Subject key identifier: 6D:E8:A0:BE:5A:F5:E1:12:72:71:BB:83:F5:09:7E:01:C6:A0:DC:BB
Certificate issuer: /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Certificate serial: 07CC
Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/BA4B22643AC911EBB83D7F0EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:54:14 +0000
ROA not before: Fri 14 Nov 2025 20:41:29 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 24323
IP address blocks: 116.206.44.0/22 maxlen: 22
116.206.44.0/24 maxlen: 24
116.206.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1996 (0x7cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Validity
Not Before: Nov 14 20:41:29 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a45316-6b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:37:aa:eb:b9:13:77:2a:5f:68:8c:d2:5a:
e0:41:2f:50:82:63:3d:94:81:b4:8e:2b:51:75:1a:
e6:1c:f6:34:6b:c3:86:87:42:11:d9:01:0f:b0:2a:
01:21:f1:09:f2:54:a6:05:78:76:05:53:30:84:5f:
a9:8a:17:92:1f:77:1b:f9:af:15:03:3d:bd:ae:cb:
11:d1:5f:91:d5:24:aa:50:ce:ba:fc:93:a3:30:aa:
23:be:17:b5:ff:b3:f8:bd:d1:78:ca:12:7a:60:8a:
df:1a:e7:a4:2c:14:96:ef:9c:a4:15:ef:e8:df:cc:
9e:7a:09:aa:35:2e:3d:16:01:f6:20:c1:ed:54:0f:
05:cc:a6:d1:e5:51:56:50:16:10:a1:7c:ab:47:22:
6d:ae:09:87:6a:8d:ee:45:e5:8d:e2:7c:9b:e0:66:
a7:e9:04:c4:44:20:4d:f6:6c:d7:08:c9:99:6c:7a:
9c:e5:6f:04:fa:75:c9:64:7c:03:c3:55:73:e5:e8:
19:7c:9b:35:68:58:79:dd:7e:4d:80:c0:d5:1d:6e:
60:cd:8d:eb:2f:c5:ee:3d:67:86:e9:96:a7:e1:85:
0f:8d:68:b1:0b:25:0e:79:32:44:9d:e1:d6:12:39:
ae:16:26:4f:e4:d2:d9:18:44:cb:65:f1:ae:92:0c:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E8:A0:BE:5A:F5:E1:12:72:71:BB:83:F5:09:7E:01:C6:A0:DC:BB
X509v3 Authority Key Identifier:
keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/BA4B22643AC911EBB83D7F0EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.206.44.0/22
Signature Algorithm: sha256WithRSAEncryption
20:07:d6:ff:7c:bd:8f:0e:6f:df:dc:ba:dd:95:18:7e:41:97:
71:0b:12:d5:b4:6b:bb:22:22:d5:aa:d7:95:b4:a2:4e:71:3d:
6e:5c:b2:24:4f:12:3a:f6:aa:d0:5b:70:b3:65:77:7e:36:3a:
05:0e:a7:8d:b0:fd:e7:3b:16:d6:fe:a1:59:7b:af:79:7f:ad:
83:2d:6f:60:43:23:ee:a0:ab:16:45:32:9f:e7:76:dc:0d:03:
09:70:fc:02:07:d0:26:96:b1:6e:cf:0d:78:33:5b:fc:b6:7c:
63:f5:41:98:2d:a4:68:2e:80:34:59:a9:f9:ae:1c:6e:0a:46:
b6:25:4a:8f:f8:c3:38:4d:f6:0c:82:a6:3a:17:79:fb:f8:fc:
0f:cf:06:b0:96:8b:52:07:0e:e2:a2:fe:5b:7b:86:14:bb:38:
da:ae:b6:57:06:61:58:4a:91:3d:fb:dd:c7:27:1c:87:cf:36:
8f:10:db:dd:20:b4:80:c4:cd:73:e9:ed:98:0d:6f:7c:7a:d9:
b7:12:60:a5:14:cf:c2:6d:92:b3:0e:03:b1:90:58:14:d2:ae:
b3:3d:f8:19:ca:90:0e:a5:d2:07:de:82:e4:b2:0d:9f:4c:63:
e9:42:27:a5:c1:43:4b:a9:7f:55:cb:d7:b4:e6:f8:4f:3f:e9:
a8:f1:34:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:33 2026 by rpki-client