
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa
File: 9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa (raw, json)
Hash identifier: zv8nloA9U8eAmryUp26vTAYnavKSs7YqUby16TlyAj4=
Subject key identifier: 8C:58:9A:F8:9A:38:04:A6:90:A7:7A:A6:3E:A3:D0:7F:A4:6B:E2:DB
Certificate issuer: /CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350
Certificate serial: 0237
Authority key identifier: CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:27:51 +0000
ROA not before: Fri 25 Apr 2025 02:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 203.13.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl
rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:51:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136C5E, serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350
Validity
Not Before: Apr 25 02:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3ea77-38fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:f5:68:3d:b5:64:bb:c5:9e:a8:29:e9:a1:
f9:c9:f0:b7:b1:18:c7:32:cc:6a:2c:4d:63:a7:e4:
e9:63:4b:aa:38:92:9d:9d:73:4a:ff:13:0d:89:23:
9b:f5:54:49:a5:6f:f5:ac:57:db:e7:33:13:db:69:
49:c3:8d:7a:d1:e1:55:11:02:ad:bd:01:55:9d:2f:
d6:80:e8:55:01:f9:17:cc:58:5a:9e:13:59:af:10:
c4:a8:48:c3:fd:1c:05:78:5a:db:8e:b5:c1:2f:96:
1a:f4:68:1f:11:5d:f9:31:b2:22:85:1d:e2:e9:fc:
73:a5:9c:b3:c3:a4:ab:3a:c5:d1:3f:e1:16:7b:7a:
3b:de:7d:df:8f:25:bc:7a:3c:1d:fb:64:26:5b:3c:
29:15:5f:e6:4b:24:72:8b:38:72:47:1b:3d:0b:c5:
f5:31:02:3c:e3:06:36:55:a1:ec:a0:61:da:36:dc:
b4:cb:b9:27:af:b5:db:f3:3b:1d:99:ca:e9:8a:95:
86:72:ae:0e:56:cb:9e:cb:15:b1:3d:bd:94:1d:dd:
59:3a:af:d7:34:c0:ee:19:8e:be:fa:f2:14:a4:52:
58:0a:c6:fa:a5:c7:4c:48:ad:c0:a3:63:5f:3a:cb:
06:c5:bb:ef:54:6c:0b:33:d9:31:0e:74:65:fa:18:
e7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:58:9A:F8:9A:38:04:A6:90:A7:7A:A6:3E:A3:D0:7F:A4:6B:E2:DB
X509v3 Authority Key Identifier:
keyid:CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.13.75.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:0c:d5:34:59:12:40:f3:14:73:bf:dc:71:f0:a9:80:a5:fe:
08:72:9d:c5:0f:1f:53:1e:21:5d:56:2e:04:a8:f8:6d:3f:4b:
53:85:a1:a5:80:b1:8b:47:42:38:4e:0e:36:aa:03:cb:06:9c:
a6:fd:84:7f:1c:b9:e6:ad:36:d1:27:28:20:67:c1:eb:ce:ae:
c1:e5:5d:80:f1:70:5c:85:1f:31:bf:74:ba:16:4c:43:85:b3:
40:20:4b:4a:2e:79:b1:ad:54:2f:2a:39:f0:d2:9a:5d:ec:74:
03:60:cd:c8:50:3c:3d:d1:37:96:82:99:95:49:19:60:75:23:
a8:aa:c5:5c:a2:10:ff:c4:6b:ce:ec:17:03:0b:3a:77:d8:61:
8f:2a:72:28:7d:de:91:bd:19:cb:4a:a9:42:e5:ad:38:b6:ab:
fa:01:4a:10:c2:52:2f:af:d6:a1:09:51:93:3c:99:d2:8c:88:
3d:ac:6a:19:ca:6e:a7:c7:cd:1f:f9:fd:75:bb:53:94:f1:23:
27:a9:96:61:84:6c:b2:e9:7d:e4:51:b6:87:36:3a:bf:8e:b0:
aa:2c:7f:f4:45:c4:87:22:a4:32:79:ac:32:36:e8:aa:e7:fc:
fb:5f:5e:23:97:05:d0:a4:dd:97:c5:7f:a2:3a:c8:22:ed:22:
67:3d:93:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:18 2026 by rpki-client