
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/8FD5A938522911F0AECD911AC4F9AE02.roa
File: 8FD5A938522911F0AECD911AC4F9AE02.roa (raw, json)
Hash identifier: 9yyOlJOhdq5a9n8HjUs77Doecig0wOxCg0TdaMSwGMQ=
Subject key identifier: D8:5F:79:68:94:09:01:DE:9B:6F:26:3D:96:78:3A:21:CA:6A:F2:2B
Certificate issuer: /CN=A9148CCE/serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098
Certificate serial: 93
Authority key identifier: 4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/8FD5A938522911F0AECD911AC4F9AE02.roa
Signing time: Thu 19 Mar 2026 06:44:33 +0000
ROA not before: Thu 19 Mar 2026 06:44:33 +0000
ROA not after: Sun 30 Jul 2028 00:00:00 +0000
asID: 153862
IP address blocks: 165.99.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl
rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148CCE, serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098
Validity
Not Before: Mar 19 06:44:33 2026 GMT
Not After : Jul 30 00:00:00 2028 GMT
Subject: CN=69bb9b51-fea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a5:b2:48:53:b7:95:f7:d9:26:f8:be:45:3f:
b4:1e:30:bd:8a:93:ce:03:f9:11:2b:9a:37:d9:42:
34:c8:11:f1:7b:56:84:70:6a:79:d9:85:5d:ef:2a:
e9:6b:d0:32:bc:05:7f:71:68:96:a8:94:b6:98:f6:
ab:9b:f7:b5:14:2d:db:bd:ca:c7:17:5a:fd:3f:9e:
7b:53:a3:14:61:34:af:03:17:0a:b8:0d:0d:32:7f:
30:c6:cb:a6:7c:39:36:f1:6b:d3:8e:1d:7e:bb:f3:
6d:47:bf:b6:ec:76:47:0e:1f:93:4a:85:a3:8a:32:
03:f4:95:a4:e3:b6:75:01:00:00:8e:56:61:81:08:
d3:08:3c:f9:78:b2:1b:ac:f2:96:f9:96:5f:4e:33:
6d:a1:bd:59:f5:b8:f1:70:a4:42:a1:8d:e9:cd:94:
79:a9:86:7c:11:79:54:d3:b4:53:a0:ca:04:ef:ff:
60:da:d9:24:22:8f:cd:a8:c9:e8:3a:10:d8:21:d0:
d6:2a:c7:bb:52:86:ec:71:9c:f3:6d:3f:d1:a5:a2:
49:7a:1e:3b:4b:c3:bf:fa:bc:ee:71:19:93:96:b8:
04:20:fb:c6:02:d6:7f:6c:58:a8:b1:cf:82:f1:90:
be:a4:cd:41:7b:28:cb:cb:90:18:8a:1f:fc:b0:a4:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5F:79:68:94:09:01:DE:9B:6F:26:3D:96:78:3A:21:CA:6A:F2:2B
X509v3 Authority Key Identifier:
keyid:4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/8FD5A938522911F0AECD911AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.36.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:69:5d:9b:36:c3:5e:fb:6b:6d:ed:5f:24:0e:2a:6c:24:81:
fb:9b:c7:cd:8c:26:59:9f:7c:33:73:6e:98:c0:ea:92:5b:d7:
f9:b5:1c:78:da:b7:93:2d:06:c0:5c:a7:91:e0:56:fa:3b:0e:
0b:66:ba:d4:d1:36:03:43:1e:94:57:7e:fe:27:c9:e5:f8:d7:
a9:a3:b5:c2:33:c8:72:9f:9c:68:27:77:1b:ed:77:ac:4a:c5:
67:ea:59:98:3a:43:2f:d8:19:7c:66:f9:b1:53:b6:4c:43:fa:
a9:41:13:e5:bf:1c:2e:23:53:d7:11:45:42:19:9f:cd:04:06:
4b:5b:ab:c7:b6:69:31:5d:34:9b:65:8a:29:cf:29:a4:10:a4:
a0:29:0b:02:e7:3b:6c:22:db:c1:32:ec:2e:a5:26:d4:07:ab:
7c:c6:47:e3:17:0f:11:3d:b5:24:f8:95:40:87:0a:09:e7:c4:
5c:29:3e:3d:0e:8e:bb:45:ce:74:5c:1c:b7:21:ee:ab:61:e1:
1a:df:83:f4:1f:1d:d1:3b:52:d6:67:27:80:67:0b:35:3f:cc:
63:b5:fc:b3:34:67:a7:cd:68:92:56:2b:b2:3b:f1:79:21:89:
95:02:29:90:e3:fa:3a:1b:c4:02:d1:e3:53:ce:39:7c:af:c5:
e3:68:0f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:45:50 2026 by rpki-client