
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/FAC35354610611EFB6324A30C4F9AE02.roa
File: FAC35354610611EFB6324A30C4F9AE02.roa (raw, json)
Hash identifier: MGWYl6jAGMEWuZAwwqj4daUxlHs2nlJcqeKspxAgpmM=
Subject key identifier: ED:CD:3E:30:98:DC:6E:D8:F2:32:BB:71:D8:E7:57:F9:7C:66:E6:25
Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial: 0276
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/FAC35354610611EFB6324A30C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:30:24 +0000
ROA not before: Mon 23 Jun 2025 03:22:21 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 152727
IP address blocks: 161.82.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:27:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 630 (0x276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Validity
Not Before: Jun 23 03:22:21 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a485bf-56db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d6:40:2a:e2:ed:11:57:70:17:7b:a6:e8:cf:
c4:92:ec:a4:14:a5:3e:7e:95:cb:9c:b0:05:4f:28:
3c:d1:ad:68:72:70:60:be:19:6c:9a:4f:75:0e:70:
0c:6d:f6:e7:60:56:56:b2:06:28:fa:cc:3d:52:83:
48:81:cf:de:fc:79:3d:0d:fb:b1:b7:58:8f:7f:2b:
01:19:e0:82:5d:7d:bc:f5:a8:6d:e3:62:48:90:48:
f8:23:44:dc:0f:e3:98:1a:28:2b:39:9e:be:63:9f:
b1:63:c7:6e:39:50:5a:d6:4f:79:0c:fd:71:ba:50:
cc:52:6f:eb:e1:f6:16:f0:54:42:ce:39:72:15:8a:
73:b1:bc:0f:2e:c9:b1:bb:57:62:dd:3a:8c:8d:2b:
dd:f5:6c:15:b2:a4:31:e8:85:25:f3:f0:b7:30:a6:
e7:e8:83:ce:05:2c:20:8e:32:bc:6d:7b:a5:47:80:
58:01:c7:71:ce:2b:7a:7c:be:9c:07:e8:2f:0e:a4:
c5:06:f6:50:2a:f0:97:a1:d8:37:be:31:ce:92:73:
fd:cd:18:21:11:56:0b:e9:51:7f:26:73:fa:fa:88:
c2:09:bf:4f:fe:9c:51:be:98:4d:b1:a9:5b:74:22:
1e:7f:35:61:21:10:52:0a:e0:e1:ba:cf:3e:44:75:
86:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CD:3E:30:98:DC:6E:D8:F2:32:BB:71:D8:E7:57:F9:7C:66:E6:25
X509v3 Authority Key Identifier:
keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/FAC35354610611EFB6324A30C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.82.138.0/24
Signature Algorithm: sha256WithRSAEncryption
10:69:db:99:4c:68:08:be:92:ae:7c:ec:13:7e:66:f9:12:0c:
4e:68:11:98:2e:8b:04:be:00:c2:00:8b:92:88:59:c5:29:75:
80:96:f1:21:bd:f8:4a:06:7c:03:c7:c8:7d:c6:14:c3:b7:66:
73:a8:cf:d8:b4:26:ec:d4:16:aa:78:3a:89:b1:0a:e1:c5:ef:
6f:de:ec:e9:09:59:e7:4f:66:3c:23:3a:92:ea:2e:4b:9e:10:
4a:bf:59:f0:2a:98:10:20:40:23:4f:14:e8:0c:63:3e:09:62:
3f:60:ce:d2:23:b5:0d:c5:42:99:1b:19:cf:16:29:77:64:0d:
ec:c9:d4:8c:16:f3:31:cd:b4:12:79:aa:cd:94:55:63:5a:7c:
94:11:cc:a3:a2:b5:46:4b:ff:15:ac:fe:de:de:9e:ec:78:e9:
3c:48:e2:c2:d6:83:f4:ce:e3:c3:e4:3a:28:c3:f4:c4:a3:a2:
3b:32:37:43:a8:0f:b9:df:55:ad:e1:7c:64:51:60:3e:1b:ab:
10:8a:22:84:b1:ef:e0:99:85:12:e7:f0:98:2c:31:ce:54:1f:
59:74:9c:d3:6f:fe:5b:5d:5a:e2:b0:c8:83:d2:ea:f7:c8:8e:
57:36:b7:a0:39:bb:f2:7e:68:d4:b0:2c:23:76:c8:dd:6f:57:
fa:af:b4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:37:56 2026 by rpki-client