
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/E3239FCAD48C11EFA27EEC37C4F9AE02.roa
File: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (raw, json)
Hash identifier: yjuBkaQ9iRKgMQ7a+4P/BtzlYCvqc8B89mQbeBjPRXM=
Subject key identifier: 69:F6:35:3F:5B:80:31:E9:4E:36:65:C5:81:B7:88:76:B4:3E:A3:89
Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Certificate serial: 010A
Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/E3239FCAD48C11EFA27EEC37C4F9AE02.roa
Signing time: Tue 03 Mar 2026 06:42:07 +0000
ROA not before: Tue 03 Mar 2026 06:42:07 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 152565
IP address blocks: 161.248.162.0/23 maxlen: 23
161.248.162.0/24 maxlen: 24
161.248.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Validity
Not Before: Mar 3 06:42:07 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a682bf-109c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:1d:f0:c3:d4:fd:5f:de:96:14:93:7f:70:
36:6c:2b:25:1d:1d:52:59:36:7d:08:1a:bb:70:3f:
93:6e:8b:43:af:92:a1:ad:9f:7e:82:1a:70:90:41:
cd:c5:7e:34:da:64:c5:bf:df:97:31:73:c2:95:4e:
12:c9:48:96:5d:e6:83:09:46:17:08:95:3e:cb:b1:
e6:18:54:b7:5a:65:3e:78:4d:15:82:fd:16:0e:31:
46:fc:65:85:f8:4a:29:d4:01:56:1e:2b:25:e6:e0:
66:1d:91:77:15:85:ed:85:a1:c3:b6:4e:c0:c7:8a:
c8:a6:81:27:63:5f:81:3f:9c:28:89:4e:82:f4:05:
14:7f:fe:b1:89:ed:d1:28:76:54:a1:5d:46:68:21:
d4:0c:12:a2:a9:4d:3c:0d:0a:5e:d0:4d:69:05:8b:
68:65:0c:e0:0a:a1:bb:0f:96:a0:0b:5a:66:55:48:
eb:67:54:5f:57:e7:c9:83:f8:0e:ec:0d:27:66:6e:
e0:98:e6:7b:4b:21:78:35:db:a9:d3:d4:a3:96:c5:
58:f9:1c:ae:9c:3e:af:17:b5:4d:89:09:46:17:ac:
c4:9c:b6:f1:83:6e:65:51:b5:62:b4:02:10:3b:d7:
c0:88:b6:8b:9b:9f:51:0d:8b:9f:c1:77:c0:e2:85:
86:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F6:35:3F:5B:80:31:E9:4E:36:65:C5:81:B7:88:76:B4:3E:A3:89
X509v3 Authority Key Identifier:
keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/E3239FCAD48C11EFA27EEC37C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.162.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:64:ed:34:2a:a0:72:8c:fd:db:10:a0:03:68:26:a3:fa:e5:
dc:90:8c:32:ca:a8:22:53:b3:a2:34:28:61:a9:8f:b0:e0:a9:
5f:ec:3d:7f:00:b3:97:50:81:04:d9:af:1f:e3:04:46:f6:b0:
87:11:7c:f1:eb:37:5d:60:eb:e9:ea:fa:6f:b7:f6:30:49:14:
c9:da:66:a6:af:71:b2:1c:c9:19:ff:7a:22:6f:9d:93:78:9d:
67:7b:42:d6:a4:28:0e:e7:1d:77:84:6a:d5:d4:88:1a:0f:72:
6f:f9:6a:d1:2a:ae:cb:c1:16:72:44:61:f2:d9:a5:8f:63:38:
a4:8d:4d:6d:dd:b1:a1:dc:1b:21:b8:05:6e:07:1a:db:1e:fc:
2f:87:41:95:42:8e:d8:e8:21:16:96:9b:5a:5f:6d:f3:3e:af:
c3:f2:2e:67:09:f4:46:15:81:9e:85:0b:2a:68:d9:b8:80:8c:
c6:37:f4:af:d9:18:7d:4d:e6:12:fb:d7:09:6d:ed:c9:c7:5c:
92:81:03:5c:de:1b:b8:46:e5:e1:e0:39:f8:7a:ea:4d:40:8b:
f2:97:71:b1:ab:2c:5c:ff:64:ef:95:3f:3b:7f:d9:bc:48:9a:
a9:fc:2d:f0:8f:96:7a:00:bf:ee:98:38:c6:be:56:05:15:22:
11:31:d3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:25:55 2026 by rpki-client