
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/D6CF9ED61D5611F1A0EA4997233D8C67.roa
File: D6CF9ED61D5611F1A0EA4997233D8C67.roa (raw, json)
Hash identifier: SsE4AcFHHC4+KSYsRKUgPuWZ9aW/dPOP3ZBl/cGum9g=
Subject key identifier: 3C:0B:F5:5D:82:0B:3D:E3:9E:20:2A:9B:E2:CF:C0:46:44:0F:79:E8
Certificate issuer: /CN=A9146039/serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
Certificate serial: 02
Authority key identifier: 48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/D6CF9ED61D5611F1A0EA4997233D8C67.roa
Signing time: Wed 11 Mar 2026 14:30:23 +0000
ROA not before: Wed 11 Mar 2026 14:30:23 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 152741
IP address blocks: 138.252.60.0/24 maxlen: 24
138.252.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl
rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:20:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146039, serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
Validity
Not Before: Mar 11 14:30:23 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69b17c7f-f9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:b3:46:07:be:9d:80:f6:cf:23:0a:58:23:
a6:b7:6d:1a:ba:c9:38:0e:ea:34:22:47:c1:27:75:
30:c4:66:a0:55:e2:44:3b:b5:b2:31:77:af:50:bd:
5c:c1:7f:49:7b:25:3f:de:36:bd:59:04:4d:7f:56:
2a:6d:ef:b4:17:6e:f6:45:8b:cd:3d:a7:74:c1:38:
15:fa:40:e8:f9:36:42:9f:b8:d6:c2:50:be:86:05:
08:38:83:53:7b:73:b8:17:3d:d2:77:fb:b8:0e:04:
8b:4c:15:48:5b:ee:de:06:8b:0a:19:89:08:99:ab:
4f:62:3a:52:75:d8:3c:0b:8d:03:1d:28:c6:b3:0e:
1b:1e:18:19:e9:cc:6a:27:26:a2:b7:3b:ad:e6:d6:
63:a2:98:33:06:35:4f:6b:74:46:69:07:e6:1a:3c:
53:b6:78:73:c6:73:08:98:d4:bf:a0:89:b1:b4:bf:
ca:3f:5d:7a:0e:6a:62:09:96:5a:81:4e:4b:6e:99:
84:ee:04:5a:9f:3e:25:02:77:9c:64:51:c4:0a:f8:
6d:eb:77:06:e0:d0:03:8b:4b:ee:b6:d9:66:6e:a9:
74:77:c5:81:01:5e:fa:5c:dc:fe:fc:72:75:70:76:
04:f7:2c:4b:81:d1:a5:6f:df:9c:a5:ad:c1:c4:54:
3f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0B:F5:5D:82:0B:3D:E3:9E:20:2A:9B:E2:CF:C0:46:44:0F:79:E8
X509v3 Authority Key Identifier:
keyid:48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/D6CF9ED61D5611F1A0EA4997233D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.60.0/23
Signature Algorithm: sha256WithRSAEncryption
50:90:3d:55:a6:b2:00:4d:58:2f:73:33:8e:19:5e:5e:6c:2a:
43:ee:b5:ce:95:63:99:12:2e:c3:48:fe:b3:49:05:99:e2:2d:
6c:88:46:5c:80:0e:c1:47:fb:da:9b:dd:bd:c6:d2:74:6f:7c:
ef:56:39:98:5f:a3:d5:60:36:b2:06:6f:45:04:cf:20:6b:d9:
91:25:32:8d:43:d2:10:ab:ce:8d:df:15:6f:25:dc:7d:33:ca:
8a:84:c3:8b:51:00:82:03:6e:6d:cd:a5:48:84:f8:3a:f3:db:
6d:67:2b:31:5f:b6:14:ad:ab:93:82:14:a4:6e:d1:7b:e7:f4:
fe:b0:a1:5e:0c:1d:7a:57:a2:6e:e8:9d:a0:ea:48:56:61:3f:
ec:c2:07:9d:dd:23:41:9b:96:46:42:bb:34:03:8f:ec:bf:77:
96:8d:7e:8a:07:7c:33:b9:74:00:cc:9b:65:15:07:6b:36:fb:
06:8f:53:fc:8f:fe:2d:b8:bb:d7:0f:e2:2e:a6:0b:ae:d2:c8:
64:6c:11:9a:0f:2d:eb:d9:ae:a8:83:2d:4c:31:ca:69:26:0a:
cf:fc:52:bb:66:de:1f:79:d6:ad:a2:80:3f:f4:08:d1:3a:af:
17:8c:8a:9a:d6:c9:6f:0b:5c:c2:9b:e5:68:ea:24:dc:80:1b:
bc:23:51:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:08:59 2026 by rpki-client