
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/16572A3CEB3511F08C2D5B303F6F56BC.roa
File: 16572A3CEB3511F08C2D5B303F6F56BC.roa (raw, json)
Hash identifier: EYjWGbva1pZVNsTwphYUGW3QU2qMX7vEwKRCgoGqRuY=
Subject key identifier: 33:5F:B5:3A:AE:79:E3:14:BF:D4:37:2D:AA:CE:84:93:FC:EF:B7:34
Certificate issuer: /CN=A916BCDF/serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
Certificate serial: 0D20
Authority key identifier: 48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/16572A3CEB3511F08C2D5B303F6F56BC.roa
Signing time: Tue 20 Oct 2026 17:32:29 +0000
ROA not before: Tue 20 Oct 2026 17:32:29 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 20473
IP address blocks: 141.164.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl
rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 16:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3360 (0xd20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCDF, serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
Validity
Not Before: Oct 20 17:32:29 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ad7a5ad-559c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:61:3f:de:de:56:99:4c:2f:7b:21:13:79:
03:fe:e1:0c:9b:58:b6:45:35:ef:0f:72:29:e0:96:
88:2e:b9:df:ab:e0:dc:6c:92:b2:8b:3a:d9:a8:4e:
ab:15:a5:9e:b0:e5:64:c9:c9:2b:c1:28:75:d6:06:
88:22:40:2f:05:d3:b1:e9:9c:21:0b:c5:94:6c:82:
c8:e1:4a:7b:3a:07:c2:6e:51:2c:83:ff:c8:d8:63:
0f:52:5d:98:14:e1:cb:50:4f:69:75:8e:c0:a2:e3:
0f:9f:82:c3:d0:bd:31:2d:2d:eb:c1:d7:25:60:17:
6e:11:50:db:8d:56:af:be:10:6a:61:bf:a5:a4:e3:
9f:2f:e9:23:72:f3:ac:f1:9b:6f:c5:8f:a2:51:23:
62:aa:2a:e3:36:3b:31:77:d2:56:69:8b:e9:fa:74:
e7:cd:d9:cb:7c:49:15:1d:f3:4b:48:4c:40:f8:b5:
28:f5:91:e6:98:40:10:9c:0e:40:38:be:a5:fe:d1:
68:9f:74:26:7a:9b:4f:aa:c2:90:74:68:c5:b0:8e:
69:0f:2c:bc:2b:f2:a9:32:17:10:65:7c:26:9b:53:
eb:ab:1c:74:3c:e0:22:08:84:d1:dc:69:77:cc:db:
4b:6f:2e:1c:24:fb:fb:5e:e6:d5:b6:cd:4e:36:89:
54:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5F:B5:3A:AE:79:E3:14:BF:D4:37:2D:AA:CE:84:93:FC:EF:B7:34
X509v3 Authority Key Identifier:
keyid:48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/16572A3CEB3511F08C2D5B303F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
141.164.32.0/19
Signature Algorithm: sha256WithRSAEncryption
14:7d:1d:f1:75:b2:48:3f:aa:17:81:cb:a9:c4:3f:c0:50:47:
1e:28:9f:89:8e:6c:72:53:2d:f1:f2:ec:1b:81:d9:86:46:22:
78:c4:b0:e9:68:f2:70:c2:db:77:71:01:c5:15:8a:e4:23:67:
6c:43:ab:f8:80:0d:ea:dc:a8:45:3c:44:24:94:d4:b3:a3:13:
15:da:ee:e4:a7:1f:b3:9d:d6:2c:c7:17:eb:2a:bd:ff:0c:8d:
41:f5:60:c0:a2:d9:22:84:cb:a2:cb:b6:6e:85:f8:8f:bd:b6:
a3:89:ce:9a:c3:81:1c:82:04:9e:dd:32:76:02:b2:fd:77:7d:
e3:01:54:df:8d:ee:05:93:85:1c:1f:98:ce:8b:a1:07:ab:4b:
71:9f:7b:14:56:a3:c0:0e:b2:1a:3b:9b:da:b5:b4:be:aa:f5:
57:7b:d5:e0:b6:59:67:02:2c:89:0a:17:ba:12:0f:4e:e1:02:
19:82:eb:9f:46:c5:a1:6a:56:0f:4a:f1:49:a6:6b:f8:c8:50:
66:ce:9f:6e:57:be:9a:6b:ea:c3:f2:90:45:44:34:b9:37:72:
f9:12:c0:8f:8d:a1:aa:88:c7:d9:30:1d:c4:8a:48:60:bd:3f:
dc:2d:48:d2:82:80:63:f6:98:88:b6:c8:e0:ae:c8:a6:df:63:
18:5a:ca:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:48:59 2026 by rpki-client