
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/75522B0A002B11EA855CA925C4F9AE02.roa
File: 75522B0A002B11EA855CA925C4F9AE02.roa (raw, json)
Hash identifier: WHXfaFkZjSnBU9Sfzv5g3tnFbX+jqXCjgaSr6ZqvkCo=
Subject key identifier: 49:4D:02:62:18:2B:4E:C9:0D:24:16:43:32:17:1E:8E:E4:4D:E9:D3
Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial: 1440
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/75522B0A002B11EA855CA925C4F9AE02.roa
Signing time: Sun 30 Aug 2026 17:33:28 +0000
ROA not before: Sun 30 Aug 2026 17:33:28 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 4637
IP address blocks: 101.167.176.0/22 maxlen: 24
101.167.180.0/22 maxlen: 24
101.167.184.0/22 maxlen: 24
101.167.188.0/22 maxlen: 24
101.167.192.0/21 maxlen: 24
101.167.200.0/21 maxlen: 24
101.167.208.0/22 maxlen: 24
101.167.212.0/22 maxlen: 24
101.167.216.0/21 maxlen: 24
203.36.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5184 (0x1440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Validity
Not Before: Aug 30 17:33:28 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a946968-5a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:e5:b4:5d:14:6d:55:18:5e:85:d4:10:f1:
d5:73:97:e9:46:e8:88:be:0d:03:24:d1:a7:04:55:
b0:e3:62:da:a6:bc:13:af:00:11:eb:48:80:8b:9a:
3e:58:8f:4e:93:5c:79:ea:e8:db:b5:28:d1:fc:35:
e6:ea:77:8c:a5:ec:dd:d0:8b:dc:25:51:34:c0:96:
b4:28:9e:ca:17:69:47:80:b0:5d:b9:eb:8f:10:bd:
e5:09:bf:56:c0:db:f7:fc:85:36:a9:c4:25:73:74:
d5:9a:51:b3:21:f8:12:9d:d0:1e:7c:96:ba:0e:a6:
9b:2b:fa:b0:7c:59:df:83:87:67:bc:21:b8:81:f5:
00:1b:c7:a1:10:02:a7:eb:4d:32:b5:e6:32:21:52:
fd:1b:d5:4c:22:56:1a:6f:08:14:e5:87:31:3d:d8:
9f:c7:86:04:66:3e:08:e3:51:5a:e8:bc:81:65:86:
4a:32:51:f6:a3:31:b2:62:98:a0:5b:15:cd:04:e6:
76:56:2b:35:05:61:d9:8d:0f:28:66:23:d1:4a:c4:
e8:2e:82:06:a2:c2:f5:77:13:dd:74:19:37:d8:cb:
ae:7a:8e:c1:8b:9e:c7:6b:25:86:ca:8c:26:3f:5c:
dc:17:f2:26:89:42:69:79:28:4b:0e:86:0f:f1:85:
45:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4D:02:62:18:2B:4E:C9:0D:24:16:43:32:17:1E:8E:E4:4D:E9:D3
X509v3 Authority Key Identifier:
keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/75522B0A002B11EA855CA925C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
101.167.176.0-101.167.223.255
203.36.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c4:64:e6:00:6a:b8:23:fe:43:d4:fb:cf:d2:8f:92:df:2b:
1e:9d:d0:2f:b7:6a:b3:c6:d2:5e:e9:a4:2f:50:d2:a5:fe:8e:
97:0e:15:3f:8f:4d:ed:02:cb:62:04:58:fc:ea:f3:69:0b:33:
a3:87:80:cf:24:2b:78:3e:92:c3:e6:64:3e:6f:ec:04:cf:2e:
da:45:a0:f9:6b:17:f3:76:87:70:c0:e8:56:49:6c:21:74:5c:
89:33:dc:c3:61:32:95:28:b6:1c:ef:8a:bd:20:a2:3b:ac:fa:
51:f8:f4:8a:ce:c5:e4:d9:87:f7:b9:b2:69:39:2b:be:ae:34:
78:62:54:d8:71:2a:20:85:ec:27:6f:d7:25:2b:e4:02:88:6d:
6c:35:63:7b:d8:5b:8e:37:e0:9d:89:a1:b2:cf:22:3f:fc:c7:
bc:08:53:5c:58:06:a2:69:7f:c4:98:9b:4c:d3:df:a5:59:e7:
45:c1:f4:f8:4f:c3:ad:94:51:ed:03:ae:54:8c:6c:9f:42:bd:
1c:72:e8:5f:ba:c3:12:5f:3a:94:c8:ac:ca:bf:e6:f5:23:82:
8d:33:5b:86:30:5e:f6:d5:85:50:0b:b5:8e:2e:81:bf:ea:02:
8e:86:ec:96:1b:9c:5c:e6:c8:fe:a0:e5:8e:c5:58:6b:d7:c9:
69:0b:fc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:38:53 2026 by rpki-client