
$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/D24316B48D6D11EB9DB49A32C4F9AE02.roa
File: D24316B48D6D11EB9DB49A32C4F9AE02.roa (raw, json)
Hash identifier: o0I6O5Xq4rEg5rfJCmY1FFzWSbqTGhgq6OD4AMsnRGA=
Subject key identifier: 5F:9A:E7:D7:9A:75:84:15:4D:99:4D:EC:8B:CB:55:33:D9:64:BB:8A
Certificate issuer: /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Certificate serial: 075D
Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/D24316B48D6D11EB9DB49A32C4F9AE02.roa
Signing time: Sat 20 Jun 2026 22:26:22 +0000
ROA not before: Sat 20 Jun 2026 22:26:22 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 139862
IP address blocks: 203.5.33.0/24 maxlen: 24
203.5.34.0/24 maxlen: 24
203.5.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 22:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1885 (0x75d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Validity
Not Before: Jun 20 22:26:22 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a37138d-11be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:31:34:25:e9:6c:b6:9c:d5:4b:ae:ac:95:
3d:91:28:5c:8d:3a:ca:b9:20:eb:3f:20:b6:14:87:
c9:ca:ac:a7:c6:bf:8f:17:81:38:0f:ea:a4:53:05:
a3:41:9b:78:36:2f:96:04:a6:0c:3c:b4:c2:70:a2:
5d:da:ef:d4:ba:1c:fb:cb:34:14:0f:04:6b:fb:a7:
e4:e4:44:ce:fb:12:74:3a:e0:50:a1:a3:28:d6:d4:
b9:2b:a7:16:44:f7:08:42:be:6b:e6:ce:36:0a:c2:
0b:85:6a:dc:73:7e:34:8f:15:a1:26:67:b1:10:00:
f1:4a:3b:70:9d:8e:c3:ee:ad:f4:e0:4b:d7:a1:64:
93:9e:ab:81:bd:56:6c:15:03:07:d2:ed:db:0b:a0:
8a:21:ad:fc:33:07:c4:aa:45:2e:b2:9e:b8:48:05:
fc:3b:06:42:90:c8:41:27:b3:3e:87:29:d7:9b:fc:
40:0b:ec:b2:0f:31:76:d5:c0:52:3b:b7:01:d0:e7:
c3:92:0d:5c:3e:55:9b:f3:80:91:04:11:f3:2b:b4:
bb:e9:e0:86:28:7e:96:24:3b:f8:bb:3b:4a:71:e7:
79:fc:16:e4:76:69:f2:42:fa:f7:76:9a:31:4f:40:
8b:41:6f:68:fd:4a:d1:b2:be:b9:ae:af:ae:85:b5:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9A:E7:D7:9A:75:84:15:4D:99:4D:EC:8B:CB:55:33:D9:64:BB:8A
X509v3 Authority Key Identifier:
keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/D24316B48D6D11EB9DB49A32C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.5.33.0-203.5.35.255
Signature Algorithm: sha256WithRSAEncryption
d1:27:eb:93:3d:a3:70:cd:82:5c:d1:bc:5e:19:5d:be:aa:b0:
54:10:0b:d5:b7:26:2b:04:aa:24:e7:dc:9c:3b:71:0d:b8:98:
36:7b:58:67:c4:59:eb:62:8b:f6:19:49:7c:d3:90:75:4d:50:
9e:26:cb:45:33:2c:ff:8f:0c:7f:68:23:74:e8:e3:52:7c:b1:
32:2e:d5:24:6f:6e:b6:78:17:d5:e2:6f:a5:0d:c6:c4:26:c2:
c4:d3:de:4b:e5:30:5b:07:1e:70:c0:3e:be:8d:b8:1c:0e:a3:
1a:80:d2:60:6d:17:23:71:38:14:62:c4:50:da:53:0d:e2:fb:
8c:be:bc:bd:35:17:0d:b1:45:c1:9e:12:9f:90:2f:5b:2d:85:
98:c3:f1:be:27:ea:12:52:a2:9a:70:14:59:52:7e:01:01:e1:
6b:2c:db:60:d8:20:54:88:f6:9e:97:88:b6:36:e5:9b:38:06:
69:8c:a5:9a:bc:e9:f4:be:4b:c8:28:c9:55:58:08:70:36:31:
09:33:a3:e9:c5:6e:cc:2e:63:fd:b4:9d:e3:67:b6:19:b4:0d:
1d:6a:a2:4b:95:bb:e3:9a:75:6d:f5:10:68:49:be:6d:cd:5d:
e8:a8:37:10:f7:54:7e:c2:e1:c8:bc:88:5a:47:7e:3a:f3:81:
67:47:8c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:51:30 2026 by rpki-client