
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/DFA7FACA54F711E7BFB4804BC4F9AE02.roa
File: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (raw, json)
Hash identifier: 0hrvh4D9EDd6MqNbEXtgkqXuTp28uKtsLouLemWrWd4=
Subject key identifier: D3:28:1B:28:A4:AC:14:D3:FF:B3:F2:49:0E:05:7C:D4:1B:BA:B6:95
Certificate issuer: /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Certificate serial: 25D2
Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/DFA7FACA54F711E7BFB4804BC4F9AE02.roa
Signing time: Fri 24 Jul 2026 16:23:21 +0000
ROA not before: Fri 24 Jul 2026 16:23:21 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 134431
IP address blocks: 36.255.106.0/23 maxlen: 23
36.255.106.0/24 maxlen: 24
103.62.30.0/23 maxlen: 29
103.82.46.0/23 maxlen: 23
185.146.208.0/22 maxlen: 22
185.146.210.0/23 maxlen: 23
2407:c540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9682 (0x25d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AA0F, serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Validity
Not Before: Jul 24 16:23:21 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a639179-d2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:e7:ee:82:29:f4:1e:27:b6:e7:ef:f1:e6:
cd:e2:61:d6:88:fc:ec:d3:2b:76:6c:22:53:c7:ec:
49:32:25:fe:1d:f8:49:2b:81:16:7d:b5:38:33:8e:
09:5d:a1:ad:b8:40:30:74:d9:49:88:bb:0a:4f:5c:
76:bb:b8:dc:2e:e8:1d:37:85:f4:c6:aa:9e:8d:44:
51:3c:41:87:a6:6d:37:d6:18:5e:ab:68:51:86:d2:
50:f6:b6:84:3b:ff:60:c4:65:1d:c7:bf:77:df:36:
26:48:d1:7a:0f:15:6a:fb:ad:31:57:f7:a5:bf:d9:
70:2e:77:67:a9:a9:e7:23:d4:b9:78:06:10:e0:bb:
aa:e8:db:21:ce:92:49:4a:31:2f:3f:ba:6f:90:cf:
6a:1b:eb:d8:95:20:e5:ce:79:17:00:c0:d6:95:7c:
18:1e:78:b5:52:d1:bc:fb:0b:50:c8:cb:49:62:c9:
19:2d:dc:72:8e:f7:81:a9:69:5e:e8:0b:5c:56:e4:
39:31:7a:c1:58:07:02:4a:ee:6d:76:71:eb:4e:89:
a0:08:c3:5c:a7:bc:de:9a:38:6d:a4:5c:07:b4:bf:
8a:db:87:1b:48:53:32:06:5a:73:c1:b0:64:78:71:
a0:c0:30:e1:a7:7e:75:07:07:6d:4d:95:7f:bd:66:
44:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:28:1B:28:A4:AC:14:D3:FF:B3:F2:49:0E:05:7C:D4:1B:BA:B6:95
X509v3 Authority Key Identifier:
keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/DFA7FACA54F711E7BFB4804BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.106.0/23
103.62.30.0/23
103.82.46.0/23
185.146.208.0/22
IPv6:
2407:c540::/32
Signature Algorithm: sha256WithRSAEncryption
56:85:51:76:48:f2:af:95:70:e3:58:6f:e4:7e:bb:9b:e4:8e:
e8:4d:4c:9f:cc:d2:46:54:28:85:65:3f:9a:30:8d:1a:18:77:
7a:db:4d:7d:47:08:a2:e8:a8:ca:80:6b:69:57:a0:06:23:20:
df:76:93:c5:02:a1:ac:ab:8f:6e:f9:d4:6a:a4:2d:01:aa:21:
2e:0f:34:4f:ea:cf:e1:5d:f0:0e:bd:eb:d6:43:b0:7b:cb:74:
a0:91:82:03:d2:a6:b3:1d:b4:54:40:28:27:fe:51:43:19:27:
57:3b:b0:5c:95:3e:1a:46:57:fa:bc:9f:30:80:91:43:66:fc:
9a:a9:9a:d9:ba:fd:e7:58:30:66:9d:47:e5:d8:7c:22:16:47:
fc:c0:af:64:2f:8c:76:dc:66:be:d2:e1:e5:dc:2d:27:19:b4:
6b:65:66:fe:78:c6:be:b5:12:47:e8:33:6e:68:0a:85:38:40:
f8:54:14:48:51:30:59:9c:39:c6:10:dd:79:b8:b3:c8:1b:c1:
b4:be:f7:ee:42:d2:7b:c4:93:e6:d7:9f:cc:17:31:4e:fc:16:
46:9c:1b:8c:94:0c:7c:76:da:ce:1d:f9:d7:75:c2:6e:91:81:
86:65:b2:bd:96:9f:59:32:39:4c:c4:75:ed:ab:36:70:8a:d1:
80:43:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:33 2026 by rpki-client