
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/02734B6624D611F0B50DE20BC4F9AE02.roa
File: 02734B6624D611F0B50DE20BC4F9AE02.roa (raw, json)
Hash identifier: nkGN0BuGNBQJa9SkDsBLxEVJf4EOwgrnQ8ymG8YYjkg=
Subject key identifier: 34:D7:6F:86:E8:4B:41:8D:B8:C6:86:43:A6:E0:AE:DD:12:C2:59:1E
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 04BF
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/02734B6624D611F0B50DE20BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:29:33 +0000
ROA not before: Sun 21 Dec 2025 00:21:11 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 38136
IP address blocks: 43.255.118.0/23 maxlen: 23
43.255.118.0/24 maxlen: 24
43.255.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215 (0x4bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Validity
Not Before: Dec 21 00:21:11 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4858d-6935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:e8:a5:1e:c1:88:cc:66:48:5d:eb:98:8d:
5c:98:85:1e:b2:3f:38:68:cf:e1:41:f3:a4:72:c3:
9b:fe:21:e5:8f:fd:a1:a9:00:4e:f8:50:cc:5b:79:
b0:d8:c4:2d:26:00:ab:af:5d:e1:08:9a:44:b1:a8:
aa:90:31:65:d9:fb:da:07:ef:6d:17:9f:4f:28:3a:
22:a7:58:5f:be:e4:55:77:dc:7d:00:18:b6:f2:e5:
3c:2d:09:7b:99:c3:45:24:ed:e0:7c:ac:ed:54:94:
7c:15:96:1d:8a:9d:3b:de:aa:55:6c:41:24:a1:b7:
26:a8:88:13:ad:81:7b:2a:97:7d:19:09:ab:2f:7f:
81:62:1c:b9:36:11:ea:3e:3a:59:31:92:ea:d7:80:
42:64:a5:ff:14:e5:2f:26:fd:37:48:43:6b:48:6d:
ab:b1:05:3d:04:ed:d2:ae:69:24:69:08:16:f9:5b:
8a:3a:62:90:cf:d4:ea:97:30:26:8e:c2:90:0a:f8:
fd:bd:7a:ce:e1:43:6f:69:01:72:1e:db:63:51:a7:
4b:c0:00:2c:79:26:43:90:fc:7b:bb:8f:91:a0:70:
88:60:41:4a:2e:b8:b4:03:3d:4e:be:90:60:9c:93:
0e:55:df:ff:25:5e:58:34:df:f8:ba:3a:9b:55:c2:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D7:6F:86:E8:4B:41:8D:B8:C6:86:43:A6:E0:AE:DD:12:C2:59:1E
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/02734B6624D611F0B50DE20BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.255.118.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:42:fa:f9:1a:f5:d4:bc:2e:1d:cb:c3:38:b9:9a:84:15:1e:
65:49:2d:e7:e1:56:f8:4e:17:02:f6:d6:f6:37:98:7d:4e:09:
d2:9d:79:f7:36:40:ae:13:81:88:ff:79:18:5b:1f:e0:c7:84:
07:c6:a1:d2:17:8e:4c:81:8e:bc:f8:49:f3:f2:38:94:ed:94:
12:14:f4:ed:24:b1:14:95:d2:77:2f:16:6e:ea:2b:c4:a3:66:
f0:ee:c1:5d:0f:56:d5:90:8d:22:f8:83:0b:b2:1b:93:7d:91:
6d:b7:85:97:59:c4:6d:b2:d4:56:79:82:c1:db:26:57:a8:41:
54:6d:89:a8:dc:38:4e:09:9d:63:e8:54:3e:38:99:30:a7:d1:
36:45:b6:ae:36:c7:b9:65:ae:5e:44:16:a1:ce:51:cb:f5:1d:
c2:59:f6:df:39:47:99:38:02:4a:d6:71:1d:66:bc:b1:ff:22:
ba:b3:cd:86:d2:ac:a3:47:77:8b:29:ee:d3:f8:a3:3b:b1:11:
19:4d:3b:a3:4b:b8:8a:f8:b3:09:6f:61:08:b6:ce:10:cf:82:
d8:e8:59:85:5e:f7:61:ae:be:e9:38:d2:12:4c:c2:cf:8f:c1:
40:1a:ac:75:6f:d6:28:bb:b7:d6:05:1b:4d:41:ee:4c:8e:51:
2c:63:c6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 12:53:57 2026 by rpki-client