
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6AF5AEC0CFEB11F0A1299838C4F9AE02.roa
File: 6AF5AEC0CFEB11F0A1299838C4F9AE02.roa (raw, json)
Hash identifier: utR/09O0AGP/257BXicDFWozKqlEHDXtcXIiW8htsC0=
Subject key identifier: AA:DD:8A:11:8A:99:7A:50:47:12:EC:D0:9A:B7:D8:6D:67:9F:67:22
Certificate issuer: /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial: 194B
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6AF5AEC0CFEB11F0A1299838C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:32:49 +0000
ROA not before: Wed 03 Dec 2025 01:57:27 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 26337
IP address blocks: 116.90.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 16:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6475 (0x194b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Validity
Not Before: Dec 3 01:57:27 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a59180-7573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:11:49:43:fd:9f:d5:43:9a:b5:9f:e1:48:10:
4a:c9:50:49:95:1b:9e:86:44:c8:54:5b:06:b7:66:
13:4b:55:46:46:63:37:5d:05:96:14:26:60:2a:13:
1d:da:72:16:2b:46:eb:71:b1:e3:29:2b:a1:64:8c:
f4:29:72:44:32:6a:70:1a:cf:d6:74:c2:57:1c:04:
bd:6b:f0:0e:9b:c1:b7:49:3f:ae:f4:f9:6b:91:13:
ce:e1:bf:55:4f:1c:1e:06:35:8d:14:79:51:4e:ef:
0d:72:99:fd:76:a9:46:fe:31:37:a9:a0:07:44:f8:
d6:e6:e5:21:a7:9c:99:56:d7:e1:96:dd:51:4c:03:
c2:f5:5b:46:2c:2f:7b:fd:52:e6:19:49:b5:95:ef:
d2:ea:34:24:d1:3f:c9:5b:b2:92:37:37:67:30:9f:
5f:0a:01:fc:8b:21:cb:e0:c9:f5:88:1e:a9:d7:48:
27:ab:1d:48:81:28:84:a6:74:c1:54:33:6c:b6:18:
99:83:c8:e0:10:e4:97:c0:3c:e8:ec:d8:5c:de:49:
0a:00:c7:10:3a:c0:31:b3:5c:91:f1:d9:8c:1c:05:
8c:43:56:ec:88:38:af:61:ef:6c:6f:43:88:b3:4e:
99:6c:72:a3:ca:10:1b:2f:1f:68:6f:15:3a:bd:fe:
06:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DD:8A:11:8A:99:7A:50:47:12:EC:D0:9A:B7:D8:6D:67:9F:67:22
X509v3 Authority Key Identifier:
keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/6AF5AEC0CFEB11F0A1299838C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.90.0.0/18
Signature Algorithm: sha256WithRSAEncryption
77:5d:35:57:a2:22:2d:70:bf:75:20:3d:64:6d:ba:c7:31:72:
2a:84:72:dc:88:ba:d7:ba:19:d5:0c:a2:21:94:1d:83:22:0f:
41:bd:22:73:c8:3b:6a:d3:02:7a:ea:27:b2:0f:e9:d3:59:74:
9f:1a:a7:01:3b:c3:9d:2d:3d:24:4e:ab:b0:15:14:db:0f:f3:
c4:47:ee:6e:10:7c:fc:b7:a0:e4:ca:46:bd:33:04:ee:3c:17:
db:bd:53:21:f5:da:65:d6:09:1a:42:11:75:0a:e4:c9:80:8f:
84:12:29:97:3f:6e:c3:6f:61:ae:dc:01:7c:d6:fa:ac:73:15:
dc:8d:5d:aa:60:2d:40:b2:17:8a:43:6a:a5:df:4f:97:c8:f9:
70:92:62:33:f4:76:68:a4:0e:43:0e:6d:b1:41:16:56:cf:09:
92:cb:93:3c:a1:fa:2d:0b:24:b3:85:4c:06:74:72:3b:a4:72:
ac:41:33:6f:50:f8:1e:bd:df:02:2e:84:c9:4f:cd:2b:c3:ac:
26:5b:b0:43:87:7a:56:ef:83:02:b7:44:b3:05:68:67:0e:30:
76:ef:80:05:02:8e:2d:25:4c:b9:da:a5:d7:be:e3:03:20:b9:
fa:89:33:31:c1:87:54:1d:c2:fc:ae:00:aa:4f:53:f0:a4:59:
14:85:c8:88
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICGUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIzM0UxMTAvBgNVBAUTKEQwMDcyRURFQjY3RTE3NTJBQjc1MjI2M0E0RkQ5NDUw
REQzQTMzRUMwHhcNMjUxMjAzMDE1NzI3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTE4MC03NTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlBFJQ/2f1UOatZ/hSBBKyVBJlRuehkTIVFsGt2YTS1VGRmM3XQWWFCZgKhMd
2nIWK0brcbHjKSuhZIz0KXJEMmpwGs/WdMJXHAS9a/AOm8G3ST+u9PlrkRPO4b9V
TxweBjWNFHlRTu8Ncpn9dqlG/jE3qaAHRPjW5uUhp5yZVtfhlt1RTAPC9VtGLC97
/VLmGUm1le/S6jQk0T/JW7KSNzdnMJ9fCgH8iyHL4Mn1iB6p10gnqx1IgSiEpnTB
VDNsthiZg8jgEOSXwDzo7Nhc3kkKAMcQOsAxs1yR8dmMHAWMQ1bsiDivYe9sb0OI
s06ZbHKjyhAbLx9obxU6vf4G5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKrdihGK
mXpQRxLs0Jq32G1nn2ciMB8GA1UdIwQYMBaAFNAHLt62fhdSq3UiY6T9lFDdOjPs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMzRS8yRjY2QjU3QUI4
M0UxMUU3QTAxRDY2NTBDNEY5QUUwMi8wQWN1M3JaLUYxS3JkU0pqcFAyVVVOMDZN
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBBY3UzclotRjFLcmRTSmpwUDJVVU4wNk0tdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkIzM0UvMkY2NkI1N0FCODNFMTFFN0EwMUQ2NjUwQzRGOUFFMDIvNkFGNUFFQzBD
RkVCMTFGMEExMjk5ODM4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQGdFoAMA0GCSqGSIb3DQEBCwUAA4IBAQB3XTVXoiItcL91ID1kbbrH
MXIqhHLciLrXuhnVDKIhlB2DIg9BvSJzyDtq0wJ66ieyD+nTWXSfGqcBO8OdLT0k
TquwFRTbD/PER+5uEHz8t6Dkyka9MwTuPBfbvVMh9dpl1gkaQhF1CuTJgI+EEimX
P27Db2Gu3AF81vqscxXcjV2qYC1AsheKQ2ql30+XyPlwkmIz9HZopA5DDm2xQRZW
zwmSy5M8ofotCySzhUwGdHI7pHKsQTNvUPgevd8CLoTJT80rw6wmW7BDh3pW74MC
t0SzBWhnDjB274AFAo4tJUy52qXXvuMDILn6iTMxwYdUHcL8rgCqT1PwpFkUhciI
-----END CERTIFICATE-----
Generated at Sun Mar 22 12:13:13 2026 by rpki-client