
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/B542E6104F5111F19B10B1EBBC833773.roa
File: B542E6104F5111F19B10B1EBBC833773.roa (raw, json)
Hash identifier: mP6zUQytayXrN1Je1WI2oXHvaN9oSuIafOIFenUItbk=
Subject key identifier: DB:AF:F6:AD:64:E4:29:60:E5:BB:C5:0C:E4:B3:24:2C:9C:15:CE:69
Certificate issuer: /CN=A916DD4C/serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
Certificate serial: 02
Authority key identifier: 0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/B542E6104F5111F19B10B1EBBC833773.roa
Signing time: Thu 14 May 2026 04:59:38 +0000
ROA not before: Thu 14 May 2026 04:59:38 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 9484
IP address blocks: 162.4.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl
rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 09:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DD4C, serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
Validity
Not Before: May 14 04:59:38 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a0556ba-ef2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:10:7f:24:14:0d:ba:ee:03:3a:66:e4:3f:a5:
86:10:74:a5:a0:3d:f8:79:4e:28:9b:54:9a:95:a4:
d8:13:14:6a:0e:e7:a7:c1:55:60:01:c3:23:f8:f4:
3e:f9:a9:0b:08:fd:d2:9f:78:b3:1b:1b:e0:f6:a6:
92:27:25:b5:59:92:d3:46:15:3f:53:99:d9:b9:41:
37:61:21:8b:bf:e4:40:d3:80:03:2c:85:04:d4:ef:
78:40:54:1b:53:fa:99:23:4e:f9:57:9b:ac:4d:9d:
8a:2d:33:4b:fe:76:c4:84:e6:d0:54:26:4b:6a:36:
65:c9:56:c5:93:53:d9:40:13:05:3f:fe:66:31:7b:
a9:07:b7:f6:db:ab:54:db:83:6f:7a:f8:59:9d:73:
cc:ff:b8:bb:5b:4a:a8:84:87:5f:07:a9:29:21:bf:
be:14:76:6e:7c:77:83:03:85:58:72:d1:b2:5a:2a:
7b:f8:63:7d:77:38:d7:aa:19:4e:fd:1b:69:25:30:
76:c3:77:41:94:92:2c:c2:7e:76:b3:01:76:8d:4d:
c4:fb:e3:41:36:b7:0d:9b:4d:23:ce:61:7a:8d:d8:
7f:9b:25:a2:4b:10:80:04:3c:82:7b:5f:35:0e:db:
91:b7:a3:7f:c7:84:75:58:84:68:36:93:b8:a5:c6:
28:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AF:F6:AD:64:E4:29:60:E5:BB:C5:0C:E4:B3:24:2C:9C:15:CE:69
X509v3 Authority Key Identifier:
keyid:0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/B542E6104F5111F19B10B1EBBC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.128.0/23
Signature Algorithm: sha256WithRSAEncryption
05:d0:3b:1c:6d:7e:de:49:87:ec:3a:5c:26:74:0e:69:d7:3b:
e9:2a:27:7a:c2:4d:55:b8:7f:68:c5:aa:ff:f5:19:91:a1:85:
47:5c:ba:47:2b:f6:5a:7e:3c:32:c4:b0:f2:bf:70:0b:21:ee:
61:a2:6b:e6:30:43:19:d3:c4:bf:22:a5:3a:a9:19:7e:80:e9:
d0:9b:66:6d:1f:1b:92:d7:1e:74:6c:98:04:12:61:59:ce:80:
90:5f:3c:da:40:9b:89:d6:31:ab:8f:1d:45:af:e5:76:60:2a:
22:9d:f2:ef:47:f7:5f:fd:88:99:36:7b:f4:c6:8c:43:22:7c:
be:5d:08:28:82:15:26:98:5b:87:62:d3:25:80:82:ad:11:1b:
b0:54:0c:2b:d3:50:a9:f4:d7:1b:a8:ff:6d:90:66:9e:df:8c:
ee:cd:97:5f:1a:00:b6:e7:db:1d:a5:0f:2e:aa:d9:26:71:d9:
26:04:68:3f:ac:d4:18:d5:dd:46:c1:61:5a:c4:e5:1b:83:a4:
80:49:9e:6a:08:40:75:b5:e7:db:18:99:98:4f:24:51:7a:5f:
aa:fd:ef:f6:25:28:32:82:e1:0b:49:e5:59:84:2b:65:85:7f:
c8:ab:94:29:3e:5b:20:80:e9:b0:6b:65:15:25:7f:c4:c6:89:
fe:84:b7:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 21 13:19:53 2026 by rpki-client