
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/EB967844235F11F1A0672958B4833773.roa
File: EB967844235F11F1A0672958B4833773.roa (raw, json)
Hash identifier: mobncmXjJUKPVRdY5SgsST8d5Lmn2t08RY5pwNlIsZs=
Subject key identifier: 80:B9:40:11:96:27:EB:59:DA:64:0B:B6:CC:4E:AF:6F:D9:3E:1B:BD
Certificate issuer: /CN=A9110477/serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81
Certificate serial: EA
Authority key identifier: A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/EB967844235F11F1A0672958B4833773.roa
Signing time: Thu 19 Mar 2026 06:50:31 +0000
ROA not before: Thu 19 Mar 2026 06:50:31 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 63927
IP address blocks: 161.248.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl
rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110477, serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81
Validity
Not Before: Mar 19 06:50:31 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69bb9cb7-7867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:59:5d:43:ca:14:79:40:a5:02:fd:f9:19:
20:42:bc:c3:76:04:e4:99:01:55:84:16:9c:85:d0:
d3:38:37:df:c3:6f:cf:77:84:32:74:e8:7d:82:1f:
90:64:3f:a9:80:dc:67:74:79:f6:b1:b4:24:1f:90:
3f:37:88:01:75:37:0c:15:75:b5:ce:2c:99:6d:5b:
49:13:19:74:9a:d0:a0:b4:ab:25:84:e3:c6:6c:25:
96:55:9d:39:c7:2b:b8:43:6c:26:bc:59:30:66:ed:
7d:6a:84:06:36:c8:8a:b3:28:73:5f:46:39:0d:6a:
a5:a8:b6:60:80:c8:86:f0:fd:97:f5:ba:d0:53:b3:
8f:06:3f:93:e9:ab:6a:e5:55:06:ab:3c:ae:b5:90:
a2:d4:e5:a0:71:d0:91:c5:84:c5:34:ec:7c:57:62:
07:c2:97:04:73:28:78:b9:1a:b8:bf:ff:b5:d0:88:
c3:3f:ae:68:1f:2f:a5:9f:aa:bb:2e:c3:74:84:bd:
8a:68:4f:07:1a:6c:59:a4:2b:04:a8:c6:5a:ae:2f:
37:24:ac:f6:9b:ab:a0:c4:25:d4:49:f5:fc:37:84:
96:59:f7:b7:c6:b5:ca:7f:24:7a:04:6d:7a:55:d6:
61:81:7a:fc:c1:42:fc:0e:fb:34:dd:9b:cc:f0:fc:
5c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B9:40:11:96:27:EB:59:DA:64:0B:B6:CC:4E:AF:6F:D9:3E:1B:BD
X509v3 Authority Key Identifier:
keyid:A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/EB967844235F11F1A0672958B4833773.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.36.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:f6:6c:b5:10:bc:ca:fc:2e:f4:69:a6:8c:2e:95:c4:eb:9c:
65:0e:2c:f4:30:a0:b3:d8:37:51:df:6c:e2:5d:10:7a:ec:96:
b2:08:aa:e8:e5:27:1e:92:e2:21:87:95:f0:e8:51:f7:15:6d:
82:4e:1c:83:f1:8a:98:74:87:b8:54:fe:b9:75:75:ba:7b:b3:
86:ed:b3:72:14:6c:25:38:7f:93:80:bc:60:f5:97:3f:8f:95:
50:01:d0:ef:e7:89:9e:8f:91:b5:6b:45:f1:d0:35:95:bb:14:
11:d3:25:b3:6a:9b:b8:f0:71:84:7e:7b:b8:42:07:2c:c7:4d:
f2:55:71:b0:d4:5f:12:08:9d:d5:8c:41:64:a3:c4:1f:29:6d:
b0:f4:a1:31:cc:f4:89:be:49:9b:45:26:dd:dd:38:a7:41:08:
da:fc:7f:3b:00:64:05:b2:83:e5:3b:61:56:95:65:42:cc:f2:
a2:9b:95:63:b3:84:ad:c7:64:d2:f1:41:b1:94:e2:ae:e4:2e:
36:fe:7f:56:bf:af:41:9c:fd:03:31:bf:9d:f4:04:f7:65:ad:
09:a6:8a:5c:77:0e:1f:50:73:0c:71:d3:1b:ed:71:a6:4f:70:
f4:63:de:1d:2d:9f:64:f4:11:95:aa:39:c2:0d:5f:da:6d:49:
0a:93:fb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:20:17 2026 by rpki-client