
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/E9A9531644D611F0ABB89277C4F9AE02.roa
File: E9A9531644D611F0ABB89277C4F9AE02.roa (raw, json)
Hash identifier: Tyhx7c0DVAEQgGmo4FKMzM1+jmt5Mt3Gn4Kf+51OmGw=
Subject key identifier: 7F:31:27:EF:48:44:95:F2:66:FB:11:4E:77:2B:65:A1:F5:94:45:F5
Certificate issuer: /CN=A9139555/serialNumber=4365D179D5B73E8A97EDE0505F29EF00C2D63EF9
Certificate serial: 036C
Authority key identifier: 43:65:D1:79:D5:B7:3E:8A:97:ED:E0:50:5F:29:EF:00:C2:D6:3E:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/E9A9531644D611F0ABB89277C4F9AE02.roa
Signing time: Mon 15 Jun 2026 01:29:29 +0000
ROA not before: Mon 15 Jun 2026 01:29:29 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 45269
IP address blocks: 43.225.144.0/22 maxlen: 24
103.31.112.0/22 maxlen: 24
180.148.176.0/22 maxlen: 24
202.14.147.0/24 maxlen: 24
203.176.184.0/22 maxlen: 24
2406:c200::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.crl
rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 876 (0x36c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139555, serialNumber=4365D179D5B73E8A97EDE0505F29EF00C2D63EF9
Validity
Not Before: Jun 15 01:29:29 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2f5579-386c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0f:1d:a1:22:39:9e:30:72:72:eb:57:7e:12:
1a:d4:6e:a4:da:83:6d:d9:be:c7:13:2e:6e:b5:6c:
2c:d7:26:b3:0c:f5:e3:73:ee:76:d7:71:66:7a:d7:
0c:8c:65:da:d7:92:7a:7a:68:e6:93:02:f8:2d:fd:
c8:33:c2:6e:a2:9f:d2:c2:b6:e9:92:e9:20:2c:62:
85:e4:fc:7b:9e:66:e6:37:81:14:bd:42:48:7b:4f:
b7:d1:d2:03:4f:ec:48:aa:01:ac:8a:65:0e:34:98:
11:1a:d6:e7:95:f0:8e:fe:8e:ea:c5:23:e4:68:d8:
63:42:20:56:fd:a8:ab:e3:e9:85:25:eb:97:9b:3f:
7e:2c:c8:7f:11:dc:31:03:d6:91:b5:e3:37:6d:c8:
cf:eb:19:e3:0b:fb:ba:13:a3:0b:e1:21:c5:aa:bc:
0f:ed:bb:81:c4:8e:e8:80:c0:b9:fb:6c:ab:a7:25:
f6:fa:9d:e6:41:3a:76:bb:61:ad:a5:c6:93:86:d1:
6c:4b:e5:a2:de:b3:14:b2:7a:9c:94:5f:ee:ff:49:
f3:be:36:fc:5a:21:1d:6b:50:6b:7e:a6:ad:42:b2:
ba:c7:6c:a0:e7:1e:24:f4:61:53:9d:3e:c2:28:73:
ca:ae:82:1e:37:44:30:d9:b6:1b:34:21:33:a7:99:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:31:27:EF:48:44:95:F2:66:FB:11:4E:77:2B:65:A1:F5:94:45:F5
X509v3 Authority Key Identifier:
keyid:43:65:D1:79:D5:B7:3E:8A:97:ED:E0:50:5F:29:EF:00:C2:D6:3E:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/E9A9531644D611F0ABB89277C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.144.0/22
103.31.112.0/22
180.148.176.0/22
202.14.147.0/24
203.176.184.0/22
IPv6:
2406:c200::/32
Signature Algorithm: sha256WithRSAEncryption
6b:eb:88:80:db:08:08:dd:16:10:1a:a7:0d:38:75:8f:f5:58:
8e:fd:f0:8a:01:26:8e:50:ff:72:e4:90:d0:2d:c3:32:01:55:
31:38:a0:47:cd:fb:0c:6c:9d:ee:d6:de:9d:dd:4b:5c:bd:82:
3b:51:a9:27:fe:36:bd:39:61:b7:53:1a:d5:cf:5d:c0:cd:c6:
67:2a:f0:c1:1a:45:e6:97:7a:54:a0:98:27:2d:9f:ca:6f:07:
5d:c9:06:4e:16:db:a3:4b:d0:27:db:79:6f:37:7c:af:3c:a0:
65:87:17:3b:58:ea:64:c6:52:9f:55:d4:4e:2b:37:e8:a6:b6:
75:99:87:18:fc:15:27:d5:73:5b:1c:9b:de:d0:0b:5b:89:9e:
e8:52:ee:d2:c9:f4:b2:43:71:c9:d4:b5:60:b1:19:99:40:d1:
2a:e8:48:88:6b:39:13:41:1e:a9:6b:33:c1:2f:2f:35:29:0f:
56:1c:32:54:fe:31:e8:dd:ff:75:64:30:3b:07:ec:56:31:31:
43:f0:d8:95:1e:4f:1d:e9:d7:79:8c:1b:7c:f7:ce:f0:62:4e:
23:97:43:4a:30:86:3a:aa:bb:df:89:0e:7c:e4:9e:d5:a8:fb:
64:9d:0b:31:87:18:25:f4:a9:ea:ea:31:e7:48:b8:83:fe:2e:
ff:3a:08:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:00:58 2026 by rpki-client