
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/712388E4280111F1A83DAB9AB3833773.roa
File: 712388E4280111F1A83DAB9AB3833773.roa (raw, json)
Hash identifier: K9JzF7ASQ/dIE8eYhUhxHKBukwqoRDy8rDl9EfISA8I=
Subject key identifier: C9:CD:85:0D:83:D3:A1:A0:BB:33:39:39:63:87:5A:08:14:83:99:CA
Certificate issuer: /CN=A9136BEA/serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341
Certificate serial: 02
Authority key identifier: 48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/712388E4280111F1A83DAB9AB3833773.roa
Signing time: Wed 25 Mar 2026 04:16:49 +0000
ROA not before: Wed 25 Mar 2026 04:16:49 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 142248
IP address blocks: 151.158.110.0/24 maxlen: 24
151.158.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl
rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:16:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BEA, serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341
Validity
Not Before: Mar 25 04:16:49 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69c361b0-a298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:45:3a:95:fd:59:2c:9b:03:3a:46:93:a3:
b6:5b:03:14:6f:8d:e0:06:03:a5:50:fc:0f:5b:c8:
15:5b:52:bc:22:40:5f:ef:12:f5:03:3e:76:99:d1:
af:b5:0c:3d:6b:aa:9d:2f:6d:19:2d:07:1b:a8:2d:
26:01:e7:ae:49:55:05:ae:78:51:f5:24:3b:7c:c2:
41:fc:32:7b:16:24:18:e8:58:7d:9e:93:a2:02:80:
72:a9:ca:53:0e:77:35:9d:ea:4b:9e:40:73:13:eb:
67:1f:86:7b:2c:2f:08:47:03:a4:fc:f6:1f:ef:40:
a0:a3:d3:9a:85:fc:d5:d5:88:91:2e:66:49:0f:53:
86:94:43:f9:54:29:6e:56:93:c0:c0:c6:9e:63:27:
29:8c:05:54:11:f4:02:71:02:c0:96:0d:9b:57:e4:
25:62:a3:41:e5:98:43:1e:be:20:e9:50:40:03:f7:
77:61:2e:b4:d3:3b:a1:b6:d8:98:a7:68:ef:9e:f9:
c5:04:dc:3a:fc:41:6d:95:99:a8:f3:6b:8d:95:ee:
fa:a5:d2:68:37:61:14:db:ce:e8:b2:f3:78:de:2c:
07:de:60:12:79:bb:c2:34:aa:20:fd:28:59:89:b5:
57:b3:e3:52:a0:2c:dc:d8:95:0e:93:86:75:cb:2d:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CD:85:0D:83:D3:A1:A0:BB:33:39:39:63:87:5A:08:14:83:99:CA
X509v3 Authority Key Identifier:
keyid:48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/712388E4280111F1A83DAB9AB3833773.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.110.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:8c:e7:11:26:4e:27:41:14:8c:9f:df:c2:06:c5:46:1c:87:
61:1e:5b:6b:ed:81:12:f0:fd:de:22:b1:24:c6:10:48:a3:b6:
50:ca:8c:02:ea:60:0c:bb:f2:76:0e:49:ba:15:60:00:8f:90:
19:43:43:3c:76:29:c8:e3:cb:b3:9e:c1:48:a2:bc:80:0b:3b:
75:a5:4d:24:fa:cb:16:e4:39:78:9d:3c:02:61:da:eb:76:85:
c8:27:bb:71:6e:a0:15:d3:41:bb:09:86:c7:36:64:dd:ec:9f:
6c:6e:0a:21:14:18:46:69:5d:7f:11:a3:7a:35:f5:5f:e4:01:
0d:11:fb:89:05:85:b3:74:30:f5:a9:0f:0b:6a:98:88:ea:ca:
2e:04:ac:9c:d6:34:e0:35:a0:9c:b0:f4:f5:a2:c5:7c:ac:1b:
a1:4a:11:3d:a2:17:6b:e4:7f:82:95:7b:d4:12:e0:6a:3f:37:
71:cf:77:ab:4a:bc:72:9c:ec:d4:5a:52:9d:31:b4:c8:0b:8f:
41:88:04:3d:a7:0a:a6:d6:38:c4:cb:e7:16:95:a9:27:c4:26:
b1:ba:53:8e:e5:7e:5e:fa:01:a5:75:fa:07:66:d5:80:c4:f5:
69:1e:1f:d9:6a:f4:da:73:26:4e:21:82:b0:4a:e2:31:09:30:
66:35:7f:bd
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NkJFQTExMC8GA1UEBRMoNDg3MjdDNDNGNDY0Mjk1MjAxQzlGQTZGODZGNjJDODk2
QkVGQTM0MTAeFw0yNjAzMjUwNDE2NDlaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YzM2MWIwLWEyOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxgkU6lf1ZLJsDOkaTo7ZbAxRvjeAGA6VQ/A9byBVbUrwiQF/vEvUDPnaZ0a+1
DD1rqp0vbRktBxuoLSYB565JVQWueFH1JDt8wkH8MnsWJBjoWH2ek6ICgHKpylMO
dzWd6kueQHMT62cfhnssLwhHA6T89h/vQKCj05qF/NXViJEuZkkPU4aUQ/lUKW5W
k8DAxp5jJymMBVQR9AJxAsCWDZtX5CVio0HlmEMeviDpUEAD93dhLrTTO6G22Jin
aO+e+cUE3Dr8QW2Vmajza42V7vql0mg3YRTbzuiy83jeLAfeYBJ5u8I0qiD9KFmJ
tVez41KgLNzYlQ6ThnXLLQCxAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUyc2FDYPT
oaC7Mzk5Y4daCBSDmcowHwYDVR0jBBgwFoAUSHJ8Q/RkKVIByfpvhvYsiWvvo0Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2QkVBLzE2MDFFRTc0Mjgw
MTExRjE4RTQ2MzY0QUIyODMzNzczL1NISjhRX1JrS1ZJQnlmcHZodllzaVd2dm8w
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvU0hKOFFfUmtLVklCeWZwdmh2WXNpV3Z2bzBFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkJFQS8xNjAxRUU3NDI4MDExMUYxOEU0NjM2NEFCMjgzMzc3My83MTIzODhFNDI4
MDExMUYxQTgzREFCOUFCMzgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGXnm4wDQYJKoZIhvcNAQELBQADggEBAC+M5xEmTidBFIyf38IGxUYc
h2EeW2vtgRLw/d4isSTGEEijtlDKjALqYAy78nYOSboVYACPkBlDQzx2Kcjjy7Oe
wUiivIALO3WlTST6yxbkOXidPAJh2ut2hcgnu3FuoBXTQbsJhsc2ZN3sn2xuCiEU
GEZpXX8Ro3o19V/kAQ0R+4kFhbN0MPWpDwtqmIjqyi4ErJzWNOA1oJyw9PWixXys
G6FKET2iF2vkf4KVe9QS4Go/N3HPd6tKvHKc7NRaUp0xtMgLj0GIBD2nCqbWOMTL
5xaVqSfEJrG6U47lfl76AaV1+gdm1YDE9WkeH9lq9NpzJk4hgrBK4jEJMGY1f70=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:51 2026 by rpki-client