
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/E6B9A5DA95F611EC88E42C7EC4F9AE02.roa
File: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (raw, json)
Hash identifier: SDTEbz2hGnRYnFJXKd6IlQ51tGl5oAT74G7J4uFxxwg=
Subject key identifier: 94:5E:DE:27:06:51:EB:E1:0D:E7:AC:CF:89:77:DC:8A:31:C4:AB:33
Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2
Certificate serial: 04E3
Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/E6B9A5DA95F611EC88E42C7EC4F9AE02.roa
Signing time: Thu 12 Nov 2026 23:46:57 +0000
ROA not before: Thu 12 Nov 2026 23:46:57 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 9299
IP address blocks: 103.146.59.0/24 maxlen: 24
202.0.116.0/24 maxlen: 24
2001:df2:4d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl
rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 23:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1251 (0x4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2
Validity
Not Before: Nov 12 23:46:57 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6af64ff1-580f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:87:5c:eb:ba:1d:b2:47:6f:17:24:a1:19:1d:
b7:b2:ec:83:e0:82:1b:38:85:93:dd:71:53:53:b0:
bd:c9:da:2d:c4:f7:7c:25:5d:6d:0c:76:35:e8:8b:
f0:14:db:55:34:4f:df:86:fd:c7:b9:d4:8a:bb:90:
71:e5:e6:f4:de:ae:97:44:48:e6:d4:6b:e6:75:67:
6c:5a:f8:7c:ed:29:27:97:00:ac:3a:51:07:c2:87:
52:5b:2a:c5:30:9b:0c:51:05:56:01:11:1b:11:cd:
d8:52:f7:18:c0:63:5c:f9:34:20:ef:f5:ed:62:82:
c2:87:be:29:c0:20:d4:9e:ac:1a:62:1a:4d:97:d8:
c2:a6:b0:7f:1d:31:e8:83:ae:30:7a:40:19:8b:dc:
8e:56:c7:19:54:cb:22:50:95:16:6e:79:96:e4:f4:
c7:05:00:4e:c8:be:5f:96:a4:b1:72:70:17:ab:11:
29:fe:d3:bd:a0:55:b4:34:c4:a1:20:bb:66:e4:b0:
7a:fd:e6:8c:de:b2:16:31:11:aa:f8:ea:8c:5c:b7:
74:f2:c1:83:32:7f:a4:91:ed:f1:b9:11:1a:be:34:
39:5f:1f:2f:3c:8e:cb:d3:90:c7:c6:e4:f4:f4:27:
2b:cd:e1:19:67:df:57:1a:76:ff:5e:d4:87:0c:54:
2c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5E:DE:27:06:51:EB:E1:0D:E7:AC:CF:89:77:DC:8A:31:C4:AB:33
X509v3 Authority Key Identifier:
keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/E6B9A5DA95F611EC88E42C7EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.146.59.0/24
202.0.116.0/24
IPv6:
2001:df2:4d80::/48
Signature Algorithm: sha256WithRSAEncryption
0f:e9:25:4e:be:c8:e2:fe:16:d0:91:93:4f:7f:47:3f:a5:0c:
4b:0e:55:1c:2c:48:dd:d2:07:1b:13:18:0a:bd:33:b0:0e:f1:
f7:74:24:29:de:93:4f:7d:52:b2:8e:28:a2:62:46:11:22:cd:
1d:eb:f9:c9:e6:1e:fc:4b:fd:c0:f5:8d:1a:fb:da:cf:cc:12:
8b:3a:53:31:30:57:a8:23:c6:cd:67:95:9b:be:3d:3a:0f:4f:
3b:4b:87:2e:43:0b:1a:13:01:f4:7e:02:93:39:d3:b8:4d:c2:
4b:c2:f6:49:e8:d8:90:ca:da:44:c1:df:b4:4e:32:e0:ab:d5:
24:6f:35:c2:42:d9:fc:5c:82:b3:b9:ce:06:15:5d:5a:15:a6:
ff:c7:7d:b0:00:85:c6:29:0f:32:b8:5a:04:06:6f:5c:79:8d:
f7:02:e8:e6:37:a1:aa:2e:68:4f:55:47:5e:e4:06:55:71:80:
78:6e:5f:63:40:43:09:96:aa:d5:8b:05:26:a4:bf:25:67:63:
37:08:b3:46:cf:bd:74:6e:08:6b:10:37:ab:d2:e2:7b:02:29:
91:52:a9:79:c4:94:4d:bd:3f:f6:aa:9e:0c:09:25:15:b5:08:
d2:0e:2c:f5:8b:2a:58:3a:39:6b:95:0c:9f:60:46:9b:11:76:
cf:f9:20:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:24:06 2026 by rpki-client