
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/76DDA85AFE5211EC8F4A4F16C4F9AE02.roa
File: 76DDA85AFE5211EC8F4A4F16C4F9AE02.roa (raw, json)
Hash identifier: FsIfjE1hCId4WZSmCGZi8B4pcoqpgzCAhgnEUj6OePM=
Subject key identifier: 72:6E:01:CD:D7:A2:75:5F:F0:E6:CE:25:2A:B9:A0:90:11:64:5D:59
Certificate issuer: /CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
Certificate serial: 068F
Authority key identifier: BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/76DDA85AFE5211EC8F4A4F16C4F9AE02.roa
Signing time: Wed 04 Mar 2026 22:30:19 +0000
ROA not before: Wed 04 Mar 2026 22:30:19 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 8075
IP address blocks: 113.197.64.0/24 maxlen: 24
113.197.65.0/24 maxlen: 24
113.197.66.0/24 maxlen: 24
113.197.67.0/24 maxlen: 24
203.84.134.0/24 maxlen: 24
203.84.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl
rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:15:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1679 (0x68f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151F3B, serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
Validity
Not Before: Mar 4 22:30:19 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a8b27b-ae79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:78:db:80:4b:42:09:23:74:8d:ea:fe:c6:
6f:81:76:1d:74:9a:fa:ff:8e:ae:ac:75:73:39:d4:
d6:49:23:4e:c1:b2:0c:0a:59:df:51:cf:31:aa:33:
cc:1d:9f:6b:5e:3e:a0:ca:db:77:81:75:ab:c3:ff:
5a:96:b6:91:49:e0:b9:e2:cc:8e:d5:f9:1a:6e:4f:
9b:43:3f:ee:80:b4:2c:79:d5:4f:66:b8:24:9a:e6:
71:48:1b:5a:3e:11:10:c0:09:ae:57:9f:85:c3:ad:
34:ab:b2:79:da:0e:84:6f:d5:cc:05:e8:47:7f:78:
6f:28:2a:69:c4:7a:7e:ce:a3:97:a1:64:b5:1d:cd:
5b:cc:4f:2e:bf:b3:60:bc:66:8e:44:6c:b3:20:13:
66:58:22:49:92:04:a5:3b:f9:62:20:c9:44:93:ae:
f0:f5:ae:70:2a:c2:4b:38:7f:52:40:6b:b1:f9:e0:
cd:f9:9d:0f:f1:8d:0a:e9:a2:e5:54:af:8e:83:65:
08:b9:39:c6:fd:df:b3:71:9c:75:9b:ee:10:66:0d:
42:50:71:b8:47:6a:c0:f3:2d:67:5e:43:42:5d:9c:
63:25:2d:fd:15:a2:8f:cc:13:0e:d2:a1:38:54:71:
d0:39:57:85:f6:42:82:5b:63:ed:67:f5:75:cb:1e:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6E:01:CD:D7:A2:75:5F:F0:E6:CE:25:2A:B9:A0:90:11:64:5D:59
X509v3 Authority Key Identifier:
keyid:BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/76DDA85AFE5211EC8F4A4F16C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
113.197.64.0/22
203.84.134.0/23
Signature Algorithm: sha256WithRSAEncryption
00:b3:f8:0b:46:2f:29:b8:96:7f:53:0c:50:c8:70:bc:20:f1:
05:da:b6:09:c0:bc:3f:12:92:26:0c:ea:3b:48:6a:fc:68:53:
ca:71:d8:fc:e3:cc:1b:67:9d:8a:d7:e5:78:d3:7a:ac:f7:61:
46:93:ad:61:cc:42:07:ce:7d:73:f6:7d:50:72:b7:d1:af:e4:
a3:62:82:dc:ba:fc:fe:9c:dd:7e:2d:0b:e3:b6:5d:74:d0:9d:
a5:8f:41:49:c0:1c:84:a7:ff:99:e4:eb:14:55:72:15:ff:7b:
31:45:84:69:18:a0:c3:82:b6:51:0e:62:9b:d1:cb:b8:fd:fd:
5b:7c:54:f6:87:a3:bf:25:9b:c2:fb:8d:fa:28:96:30:e8:ec:
ce:f1:26:72:e5:95:95:ff:8b:7f:e1:80:c0:e3:db:c8:44:91:
29:d4:3e:5a:97:c7:f8:b6:cd:b5:a5:54:b9:98:b3:1f:89:cc:
c6:91:55:9f:84:30:31:9e:a8:29:b8:22:87:c2:34:fe:e0:ee:
b0:cd:e2:1c:e2:8d:8f:74:a7:27:1a:f4:f3:23:e6:6d:bf:54:
95:8e:df:8b:45:e4:6a:f9:a8:dc:5d:2c:2a:68:fb:48:d4:71:
f2:4b:c8:93:74:ac:b5:74:42:8e:5d:89:bc:a6:e8:75:3b:37:
99:8a:ac:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:10 2026 by rpki-client