
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A22F20AC366311EEB376DC3AC4F9AE02.roa
File: A22F20AC366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier: 2Q8RbjE4mHztepKARc4PS5hTmcTmIbeZgaFHVD5zDkI=
Subject key identifier: EA:E2:15:4C:8F:C0:5C:21:DD:03:04:11:93:33:9B:D6:B8:BF:D0:A1
Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial: 0272
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A22F20AC366311EEB376DC3AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:30:20 +0000
ROA not before: Mon 23 Jun 2025 03:22:18 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 141454
IP address blocks: 161.82.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 626 (0x272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Validity
Not Before: Jun 23 03:22:18 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a485bc-f3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:6e:22:88:55:71:8c:34:66:cd:43:b9:be:
3f:c9:67:37:eb:36:c1:94:ed:75:c2:79:66:5b:c7:
f6:cb:ed:ae:92:c2:fa:7c:6d:72:46:54:39:40:78:
d5:56:d7:ca:a0:80:45:33:00:41:26:cd:82:61:df:
7e:b3:22:8f:46:f3:aa:56:e6:85:32:ff:90:d2:80:
13:51:5d:9c:50:53:96:28:b1:f7:64:3a:cf:31:0f:
8d:5e:5c:5e:30:96:26:8b:6b:41:18:17:70:09:c7:
c3:d6:f7:a3:fe:8c:5c:d1:96:e1:6c:cb:d8:e4:e8:
00:60:70:b3:cc:78:80:cc:52:59:66:e1:65:e5:29:
d8:53:bf:0e:61:60:0d:01:95:d0:96:f8:99:60:34:
41:7f:dc:6b:0d:2b:85:04:d7:e7:2e:88:81:3d:2c:
ee:6a:91:54:0d:b2:b2:69:8c:70:8b:e0:b7:5a:61:
20:67:56:6c:ee:f0:74:2c:d9:41:91:7a:fe:65:37:
ca:f2:93:fc:13:ca:48:db:41:f0:86:a5:37:27:78:
16:0b:d3:f5:75:87:96:2e:e3:8d:52:3c:42:c0:4b:
87:78:fb:8e:d4:00:3d:c9:86:12:43:3d:88:76:d4:
82:24:6a:54:55:86:da:44:30:80:3c:ac:07:21:97:
fd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E2:15:4C:8F:C0:5C:21:DD:03:04:11:93:33:9B:D6:B8:BF:D0:A1
X509v3 Authority Key Identifier:
keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A22F20AC366311EEB376DC3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.82.209.0/24
Signature Algorithm: sha256WithRSAEncryption
76:78:3a:ae:34:ca:ea:6b:01:2f:04:a6:65:1a:42:e8:bf:d9:
8d:49:f2:c4:d5:5c:2b:ca:b2:4f:4f:b9:6b:ab:6c:a5:5c:c6:
54:5f:81:e1:9e:a0:58:3a:75:56:59:19:47:46:63:72:b8:23:
c6:d4:c8:9a:fc:26:cd:4c:48:f5:aa:94:64:16:e0:39:75:f5:
98:33:f6:92:fc:b0:af:b1:1e:10:a2:b9:84:62:b8:0c:97:7e:
b9:ac:e9:09:97:fe:de:cc:da:1b:11:33:f0:98:4c:57:3e:83:
df:95:16:de:f3:85:ed:33:d3:0a:08:96:88:68:a9:70:51:50:
75:9f:57:3f:5d:13:9d:47:c0:a3:4a:ea:99:3d:88:db:00:0a:
fa:4c:3e:7c:d1:16:cd:e0:94:24:69:81:92:59:9e:68:0e:34:
01:c7:ff:54:e6:67:53:76:9e:fd:56:7b:51:24:47:4b:7a:fe:
cf:2c:01:29:be:5e:c9:6b:52:a6:28:8f:ec:db:14:85:94:fa:
43:21:73:b9:83:50:82:52:b6:59:c0:15:c6:3e:aa:3c:e7:b3:
71:85:5d:9c:54:78:7b:0a:6f:ed:0a:76:f5:28:92:87:e6:62:
c4:b2:b0:6c:2a:fa:ce:7f:a2:fd:89:5d:fc:d3:c3:70:94:41:
6f:90:b1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:44 2026 by rpki-client