
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/800F1868BEB311EAAFE28B42C4F9AE02.roa
File: 800F1868BEB311EAAFE28B42C4F9AE02.roa (raw, json)
Hash identifier: nVlM8+uOljV/QDZ3lwkLpa0hZxnkvwmjDj6PgDNVAlw=
Subject key identifier: E3:42:FD:30:47:72:18:75:F6:82:13:C2:EC:19:BA:BA:86:EC:98:37
Certificate issuer: /CN=A916683C/serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3
Certificate serial: 0AE5
Authority key identifier: A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/800F1868BEB311EAAFE28B42C4F9AE02.roa
Signing time: Fri 02 Oct 2026 20:38:44 +0000
ROA not before: Fri 02 Oct 2026 20:38:44 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 140583
IP address blocks: 103.152.0.0/24 maxlen: 24
103.157.17.0/24 maxlen: 24
2001:df3:7880::/48 maxlen: 48
2407:3dc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl
rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 19:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2789 (0xae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916683C, serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3
Validity
Not Before: Oct 2 20:38:44 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac01654-4955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:de:66:35:db:4f:de:65:39:d0:fb:9d:e3:0d:
96:88:12:d5:b4:0f:02:5b:99:f2:d7:fd:93:d3:a0:
69:b5:d3:45:e9:2d:4b:8a:a0:3d:09:c1:9f:a7:14:
d2:96:e8:40:e1:1a:a4:f5:50:cf:ca:29:5b:39:88:
1c:88:26:cb:0f:34:5f:1c:f7:d1:30:27:e1:d9:30:
b5:ce:2d:b8:27:ad:1f:93:cb:93:c7:91:89:0e:34:
85:5a:ba:53:fb:44:07:d2:af:ad:3d:4b:59:29:a0:
a8:4f:43:c0:1d:36:4f:92:7c:21:a8:1a:8f:11:e8:
57:89:57:47:2e:c6:6a:50:3a:42:cd:3b:0c:11:23:
b9:a7:d0:ea:73:fa:06:17:28:34:d9:4b:0a:d7:9d:
27:d8:e8:93:a4:38:3a:47:3a:2e:f7:94:a2:d3:95:
d5:56:2d:5f:6a:8b:a9:42:9c:ae:42:ee:b6:a2:21:
d4:36:5b:e1:93:c1:dc:e1:4e:d5:5f:04:f7:fd:72:
c4:6c:51:a4:33:a7:8d:34:2b:d5:c0:5d:8a:99:32:
5b:86:f2:11:0b:f3:1c:9f:51:cd:eb:93:2b:a2:18:
96:e2:0e:fc:0c:06:e6:7d:62:9a:53:76:b3:11:b3:
87:16:c3:ab:10:5c:4e:a4:ab:82:2c:ca:00:1b:0a:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:42:FD:30:47:72:18:75:F6:82:13:C2:EC:19:BA:BA:86:EC:98:37
X509v3 Authority Key Identifier:
keyid:A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/800F1868BEB311EAAFE28B42C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.0.0/24
103.157.17.0/24
IPv6:
2001:df3:7880::/48
2407:3dc0::/32
Signature Algorithm: sha256WithRSAEncryption
cb:03:60:df:a3:b3:bf:9f:9c:dd:8a:1c:43:1b:65:04:8a:2e:
6d:c1:01:ac:b4:af:26:68:55:b2:61:0a:3e:60:74:42:74:c5:
cb:5b:8c:2a:d6:ec:d3:b9:18:c5:54:b8:42:17:0b:62:f4:8f:
ee:21:28:cf:4b:0f:d3:3c:60:35:fd:bd:b5:b8:24:78:f2:1d:
98:26:8c:36:a3:e1:30:3c:1e:fc:42:74:c1:cc:c2:a9:7b:b0:
46:49:f3:f1:04:02:70:35:b6:9c:64:36:4d:7e:9e:0a:bd:5a:
67:47:dc:7f:d2:34:db:32:39:47:21:2c:c1:f0:5d:19:e7:8e:
4d:d0:65:b8:2c:01:ca:f9:7c:11:17:5c:b3:05:5b:20:11:b2:
73:b9:98:8b:d0:ff:d8:04:39:64:15:75:55:c7:3d:86:02:ed:
cf:65:6c:c9:61:1e:2c:4c:1e:fb:d8:cb:a9:c6:dc:7e:46:a0:
8d:d0:95:79:e4:94:a8:ed:db:90:28:c0:ef:f9:de:f6:ca:02:
25:44:19:3b:d9:5c:34:50:92:0b:ee:48:01:73:f2:38:5e:a1:
01:db:2b:f3:27:7e:97:5e:b5:ab:57:e5:83:2e:0c:10:bc:ff:
84:72:b6:94:19:5c:b6:e5:cd:78:47:73:5e:c8:c5:cf:58:ab:
99:36:75:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 05:57:53 2026 by rpki-client