
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/B2ED9AEE913311E79B98C45BC4F9AE02.roa
File: B2ED9AEE913311E79B98C45BC4F9AE02.roa (raw, json)
Hash identifier: ZdS7RVO23O3K8sGWdOalBse8DUWGN982XwYDDHW1kNk=
Subject key identifier: 3B:36:BE:E3:08:89:0D:F4:FC:0E:0C:12:DE:7A:3E:92:B4:AB:9E:90
Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Certificate serial: 257C
Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/B2ED9AEE913311E79B98C45BC4F9AE02.roa
Signing time: Fri 26 Jun 2026 01:29:02 +0000
ROA not before: Fri 26 Jun 2026 01:29:02 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 7500
IP address blocks: 202.12.26.0/23 maxlen: 23
202.12.27.0/24 maxlen: 24
2001:dc3::/32 maxlen: 32
2001:dc3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 15:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9596 (0x257c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Validity
Not Before: Jun 26 01:29:02 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a3dd5de-643f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:34:16:c4:24:3f:d1:ff:83:19:48:27:80:
ca:70:7b:cd:f9:66:46:ac:83:4d:9b:20:a6:12:e3:
35:97:5e:82:45:80:44:63:f6:a5:66:96:58:9b:f1:
80:8a:b3:b7:f9:46:4e:2d:c1:ff:4a:6c:ed:8b:13:
89:6c:f9:32:25:33:fc:3a:72:aa:d6:ca:87:62:ba:
53:23:27:11:25:cf:c5:c1:25:83:e1:23:6c:e5:c8:
8d:e1:4e:4e:cc:4a:01:86:2c:9f:90:07:55:37:04:
2f:8d:5f:09:ad:ac:71:0f:4a:8c:33:04:29:86:15:
3b:2b:0e:cf:5b:b3:82:8a:b6:f3:1a:04:bf:a8:fb:
ac:2d:74:56:ef:bd:68:73:cc:77:f6:de:df:d8:ff:
a1:28:6e:86:b3:07:bf:af:f1:67:5a:d4:25:f1:0d:
3a:cc:5f:25:ce:3f:ff:2d:5b:e1:11:19:b8:0c:5b:
e5:4f:c6:16:06:0a:24:b5:61:16:6a:89:f2:88:a1:
8a:5a:fa:83:27:ab:54:7a:0b:ac:9a:f4:e6:18:a9:
e3:32:18:75:dc:f8:26:79:94:7f:ff:dc:22:d6:23:
19:46:8e:0b:9f:65:8b:05:bb:fb:8d:b6:b8:32:c7:
60:74:4c:da:56:84:86:28:93:9a:71:c1:31:85:5a:
9d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:36:BE:E3:08:89:0D:F4:FC:0E:0C:12:DE:7A:3E:92:B4:AB:9E:90
X509v3 Authority Key Identifier:
keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/B2ED9AEE913311E79B98C45BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.12.26.0/23
IPv6:
2001:dc3::/32
Signature Algorithm: sha256WithRSAEncryption
be:c0:6d:21:be:89:2e:36:72:76:7d:bb:22:54:0d:80:33:65:
7a:7a:bd:84:00:ed:24:aa:14:3d:8e:6a:d3:11:9d:6e:a8:ae:
b4:e1:e2:bf:10:50:a4:53:9e:84:7d:5a:48:c1:45:7b:a7:4b:
92:98:3f:4c:2e:3b:05:44:a1:d6:07:07:1b:d3:c1:19:32:46:
42:98:9e:48:d7:7d:88:9d:c1:98:43:a7:27:86:68:c2:2a:d7:
45:ba:cf:3d:b4:e2:bb:da:f2:d0:d2:52:29:0e:8f:86:2e:62:
95:50:95:51:fb:de:64:ba:f9:5b:dd:05:02:62:05:f7:1e:28:
d0:f9:7c:45:dc:e5:27:e6:f3:b0:01:c9:2c:e6:8a:29:c8:e0:
48:bc:82:87:88:30:9c:60:5f:35:ad:b3:3b:66:86:67:c8:42:
eb:80:dd:0b:fc:06:99:57:0d:8e:6d:a3:0b:52:9a:92:b0:5c:
42:28:ef:db:b3:2f:93:dd:4c:59:b4:89:46:af:ae:4e:a7:f6:
a9:30:db:54:1c:21:f9:a7:a1:e4:d7:97:97:52:df:a9:8a:18:
68:3e:54:e8:8c:0a:27:c1:6e:5b:8a:4d:d4:c1:93:5b:9c:b6:
7b:b3:96:f9:1a:a6:91:e3:1e:f3:68:73:51:9f:f5:54:47:f2:
8c:db:9a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 18:01:32 2026 by rpki-client