
$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/7151B356EAD411EFBA2AB40EC4F9AE02.roa
File: 7151B356EAD411EFBA2AB40EC4F9AE02.roa (raw, json)
Hash identifier: vTtmwtfTWeWgt0Kqlpj1w8h+HhCrz3wW/GEbhwZ5qWU=
Subject key identifier: F7:64:D5:32:A4:1B:A9:8C:63:AB:15:5A:97:1C:80:2E:D1:D3:F2:20
Certificate issuer: /CN=A919874A/serialNumber=D0480FF1075052FEFEE6C08E1DBF8E83E0012788
Certificate serial: C8
Authority key identifier: D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/7151B356EAD411EFBA2AB40EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:04:45 +0000
ROA not before: Fri 14 Feb 2025 13:06:03 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 138106
IP address blocks: 161.248.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl
rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919874A, serialNumber=D0480FF1075052FEFEE6C08E1DBF8E83E0012788
Validity
Not Before: Feb 14 13:06:03 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3f31d-2dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:34:d2:bf:56:e6:15:69:f8:2e:36:16:8d:
da:3c:e2:53:d3:b7:5d:a6:4c:89:9c:60:38:d3:5a:
24:b5:22:45:1b:01:c8:f6:47:dc:a3:d5:b1:51:2b:
1f:f8:3a:25:7d:13:f4:8a:c3:57:4c:7c:e9:19:79:
17:e1:b8:ba:82:4d:7b:68:1c:5d:af:c4:dd:9e:e6:
12:30:92:b7:9b:49:7f:10:56:b7:42:db:b4:78:c3:
98:a2:54:be:70:d1:87:89:87:5e:9d:bd:24:e4:a8:
80:bc:87:df:67:5c:42:6a:3a:99:76:d6:76:3b:ee:
69:11:1f:c3:0f:01:33:25:33:0c:b6:b2:62:f4:5a:
ab:f7:5b:ee:bf:b6:1a:02:c1:7e:0b:b1:60:09:00:
c9:d3:97:5e:9d:14:0e:32:55:e4:22:4d:0d:27:bb:
15:23:e2:e6:df:31:3f:05:34:ec:28:78:f8:4f:82:
05:2c:67:69:c1:d3:c9:9a:b4:58:59:8f:d5:14:2c:
92:bb:a4:48:36:e3:12:48:3d:03:dd:bf:02:26:91:
4f:c6:31:f9:f6:fc:ae:67:c0:f3:55:cb:8d:48:80:
8e:62:1f:a5:d5:08:13:d2:7f:41:ce:0f:b6:65:5c:
93:89:ff:d4:03:b8:30:59:41:37:20:e4:28:a7:be:
b8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:64:D5:32:A4:1B:A9:8C:63:AB:15:5A:97:1C:80:2E:D1:D3:F2:20
X509v3 Authority Key Identifier:
keyid:D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/7151B356EAD411EFBA2AB40EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.116.0/24
Signature Algorithm: sha256WithRSAEncryption
85:01:22:fe:d5:47:d4:56:35:ed:69:89:31:e7:74:aa:13:57:
f6:e5:bb:e0:a3:02:4c:b4:58:4f:5c:1b:0b:41:84:bb:ee:9f:
d0:08:b9:3f:59:5f:e1:0a:35:57:1b:18:14:d4:90:40:42:fb:
1b:a7:c7:46:ba:7f:bc:63:ee:7c:f9:d3:7c:17:37:f1:8a:f6:
c2:62:fb:c9:4c:d2:d8:9b:b8:16:e2:34:05:e2:f0:7c:cf:57:
f9:58:ad:6b:8e:23:03:a3:ba:1e:da:97:19:23:83:19:5b:48:
21:00:55:40:a6:94:8a:fd:08:34:9b:6e:d6:1a:b4:cb:96:0e:
10:8f:bc:22:35:a1:83:37:aa:d4:b4:f7:0c:66:99:a3:55:c5:
45:80:68:3c:84:b9:18:29:fa:00:73:f2:b6:97:96:13:1a:5b:
13:c2:d7:2e:14:44:f7:92:ee:b8:f6:73:d2:56:67:7d:a5:03:
0a:82:10:79:f8:fa:77:0e:ce:0e:30:99:a9:22:c8:83:d4:5e:
47:26:ae:e5:75:53:10:15:cb:67:d9:e8:d8:7b:b3:dc:0d:66:
3d:fc:6c:6a:0d:cd:c5:d0:29:10:ae:3a:05:0e:4f:09:7d:a6:
0e:b5:13:74:b4:57:40:18:0c:d8:39:7a:ca:d3:9b:b2:7e:fb:
22:b8:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:54:45 2026 by rpki-client