
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa
File: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (raw, json)
Hash identifier: YDCHKzV19Ubj3YzIiUsWRoQfZaKPPY3EdfIFom647Eg=
Subject key identifier: 9F:5D:44:20:16:12:55:92:D9:8E:B0:CC:DE:BA:29:69:29:2B:FD:6B
Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Certificate serial: 018C
Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa
Signing time: Tue 03 Mar 2026 04:40:17 +0000
ROA not before: Tue 03 Mar 2026 04:40:17 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 139623
IP address blocks: 2401:7f20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:45:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396 (0x18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Validity
Not Before: Mar 3 04:40:17 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a66631-17df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c1:52:6e:96:f5:8b:86:be:8e:db:5d:fe:f4:
31:c8:69:b2:a9:41:56:2d:1b:60:fb:90:5c:3c:33:
21:c7:4c:bb:f3:b6:40:db:8f:cc:f4:8c:c5:2a:df:
da:d4:a7:2c:57:f1:37:b8:85:f9:98:2c:29:5d:66:
ba:2a:90:37:a2:bd:10:a7:03:79:a2:5a:aa:f7:e7:
9d:f0:e9:c1:0a:f8:01:bc:50:2b:d3:ae:2a:e0:48:
57:67:a2:75:ff:dd:12:af:d9:72:41:b3:71:af:dd:
d6:d3:99:ee:78:9f:58:92:6a:67:d0:3e:cb:80:13:
ea:f2:e5:28:fc:1c:48:a4:15:03:9d:25:78:7c:e6:
68:f7:0d:73:cb:47:13:98:63:21:eb:28:a0:b6:27:
da:09:b3:a9:8d:ec:ae:52:9a:bf:f5:55:a7:b4:ab:
56:90:cb:a5:18:ef:5d:1c:af:da:64:37:70:4b:e9:
e2:ee:56:79:14:00:7e:f2:eb:6c:ac:7d:d4:e4:99:
f6:d7:e1:0c:57:3d:81:bc:14:49:dc:f0:6d:09:e5:
c3:a0:99:1f:4e:4e:de:4f:8c:17:03:81:8b:66:b2:
42:2b:66:17:16:77:56:58:4e:2d:2f:41:ab:ae:e7:
94:39:9e:4c:0f:20:c1:3f:8a:ce:ed:88:d0:9b:ef:
43:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5D:44:20:16:12:55:92:D9:8E:B0:CC:DE:BA:29:69:29:2B:FD:6B
X509v3 Authority Key Identifier:
keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:7f20::/32
Signature Algorithm: sha256WithRSAEncryption
41:66:22:93:66:38:d4:b9:b4:fd:f2:26:c6:31:9c:33:36:70:
07:81:e7:90:76:35:27:61:65:1f:20:24:23:3e:02:6e:bc:8f:
a7:b7:95:dc:d7:46:36:21:3d:df:a3:9b:0e:c5:82:25:6b:eb:
3e:50:fa:2a:fd:b8:8e:78:b0:50:bf:3f:e6:d4:52:09:3d:19:
2d:9d:6b:41:55:a0:50:f5:cb:8c:23:8c:3c:e1:be:61:47:52:
6b:d8:1b:ec:ec:2d:fa:72:de:74:11:70:d6:29:71:be:36:3e:
e0:99:31:a5:d8:2a:16:e2:ab:2d:66:b4:38:19:58:f4:e8:51:
7e:7e:a1:9a:23:81:f0:13:4b:dd:25:36:d0:cc:96:1e:bf:5d:
01:8f:f3:5e:24:33:45:08:dd:c2:76:d1:0f:85:11:5c:52:6c:
27:23:dd:46:50:61:30:21:1f:25:13:7c:cc:df:c7:b3:33:70:
65:6b:4e:9e:ea:e0:84:36:b2:9e:dd:fd:fc:2a:17:3f:21:b4:
83:be:2d:99:22:43:72:2e:ee:08:10:7c:83:59:eb:9f:8a:4a:
20:06:13:47:04:85:af:c2:2c:58:f0:2a:f5:4a:62:a4:fd:8e:
ff:d1:1d:8c:e4:7e:5f:9f:b8:56:bf:de:d8:5e:69:e3:9e:a4:
8f:fb:b1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:34 2026 by rpki-client