
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/D7E41D6A788411EA9186C910C4F9AE02.roa
File: D7E41D6A788411EA9186C910C4F9AE02.roa (raw, json)
Hash identifier: on6AtAQDJPoil+F6Z95IgUqRZ62ucuYmOFjMm5FOGeE=
Subject key identifier: 9D:F7:8D:F1:CD:9E:A3:DC:7E:B4:6B:92:FC:3E:9A:3B:35:F7:E3:E2
Certificate issuer: /CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3
Certificate serial: 0F75
Authority key identifier: D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/D7E41D6A788411EA9186C910C4F9AE02.roa
Signing time: Sat 18 Jul 2026 18:18:06 +0000
ROA not before: Sat 18 Jul 2026 18:18:06 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 38235
IP address blocks: 111.90.176.0/20 maxlen: 24
2405:fa00::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl
rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3957 (0xf75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144E38, serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3
Validity
Not Before: Jul 18 18:18:06 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5bc35e-d16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:1a:c1:79:d3:8b:a7:84:5b:df:66:29:72:
35:51:41:79:ee:b0:47:ce:a6:68:7a:16:a7:1d:aa:
39:a6:77:3d:91:be:18:fb:bf:1d:7d:e3:1d:15:76:
0b:cc:b3:c3:d4:d4:46:93:8d:9f:46:c1:ec:85:41:
d4:8e:30:4e:7f:22:ff:16:d7:ad:d9:8a:02:2b:03:
a1:f0:70:69:56:ad:6b:1a:cf:52:b4:9e:09:93:6a:
dc:e9:cf:82:15:c6:8e:be:9b:01:ab:ff:9f:05:91:
79:90:f5:11:e0:95:8a:23:13:8a:82:7e:6c:75:67:
b7:01:38:51:28:2f:c1:d3:3d:46:4f:e1:d5:02:c6:
e0:45:2c:98:d3:32:5d:29:d1:02:b1:06:32:07:d0:
f6:3a:7b:62:b8:33:ab:b1:93:de:09:a8:0d:d7:d8:
f7:b7:42:ee:79:82:d4:a8:e1:b8:21:18:25:90:b3:
1e:71:b8:62:1a:83:51:4a:df:81:88:db:6a:da:41:
f3:a0:fd:e6:5d:41:e6:2f:c3:06:e2:8c:dd:4e:f3:
cc:2d:3c:a6:46:67:03:04:c2:7a:df:2e:23:0a:91:
0a:9e:9f:d4:19:d9:26:ea:bc:55:f6:ca:53:50:68:
44:00:45:35:c4:1c:dd:b2:d8:e1:a8:69:99:2c:67:
c4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F7:8D:F1:CD:9E:A3:DC:7E:B4:6B:92:FC:3E:9A:3B:35:F7:E3:E2
X509v3 Authority Key Identifier:
keyid:D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/D7E41D6A788411EA9186C910C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
111.90.176.0/20
IPv6:
2405:fa00::/32
Signature Algorithm: sha256WithRSAEncryption
48:5d:47:e3:be:79:33:68:f4:ef:7d:cd:d3:71:1a:46:0c:04:
40:fe:cc:78:ba:f7:6e:28:dc:a3:37:31:4b:fc:b7:5b:57:5e:
1e:5d:3d:9f:93:96:11:d7:f0:1b:86:0d:a9:13:e5:51:d2:03:
67:b5:be:6b:06:fc:18:b2:5a:c7:1e:d6:0a:08:4b:a9:a5:6c:
20:0d:4c:48:8b:45:b4:c4:c2:74:aa:50:e9:c6:47:33:dd:5f:
ff:36:19:a1:40:dd:68:86:11:da:27:a5:7b:1a:84:74:0e:a4:
44:c0:fd:7e:4a:19:62:2f:c9:ba:21:e0:69:32:1d:13:c5:1e:
31:58:e9:2f:b7:19:1f:e3:42:46:e7:e2:12:fc:18:cf:e1:c4:
1a:f7:2b:37:ff:fe:77:98:c1:0a:34:9d:d1:e2:01:62:bf:1e:
6c:77:1c:ea:35:db:70:b0:a6:f2:b4:4a:f3:95:12:78:fd:43:
f9:88:27:9d:30:ba:23:c1:14:16:bd:0d:34:24:be:bb:76:5d:
9e:a6:2b:aa:14:3a:aa:96:7e:17:b7:22:8a:f4:11:00:b6:0f:
92:d3:fe:c7:b5:bb:e3:09:e4:92:3f:a3:62:8c:8e:53:e2:1e:
80:7c:23:af:78:1c:5e:55:ff:61:ad:37:75:9a:4c:30:af:eb:
09:dc:fe:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:05:46 2026 by rpki-client