
$ rpki-client -vvf rpki.apnic.net/member_repository/A91843C3/7928DCDCD90B11F0A47591C87CD3641D/E9A2F64A1D1811F181A394B60F3D8C67.roa
File: E9A2F64A1D1811F181A394B60F3D8C67.roa (raw, json)
Hash identifier: nvtn/iQyBiHbQPt/Amr4jEUOISyFBGFXP4EEi+PEZ4k=
Subject key identifier: 9C:71:DE:15:A4:A5:EF:60:5B:EC:10:F2:2D:61:3B:3F:A3:EF:06:3A
Certificate issuer: /CN=A91843C3/serialNumber=BAFA22FFB8E9B22592955C299A9B19CB4EACFA6E
Certificate serial: 36
Authority key identifier: BA:FA:22:FF:B8:E9:B2:25:92:95:5C:29:9A:9B:19:CB:4E:AC:FA:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvoi_7jpsiWSlVwpmpsZy06s-m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91843C3/7928DCDCD90B11F0A47591C87CD3641D/E9A2F64A1D1811F181A394B60F3D8C67.roa
Signing time: Wed 11 Mar 2026 07:07:44 +0000
ROA not before: Wed 11 Mar 2026 07:07:44 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 152194
IP address blocks: 43.226.124.0/22 maxlen: 24
103.254.108.0/22 maxlen: 24
2400:6c80::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91843C3/7928DCDCD90B11F0A47591C87CD3641D/uvoi_7jpsiWSlVwpmpsZy06s-m4.crl
rsync://rpki.apnic.net/member_repository/A91843C3/7928DCDCD90B11F0A47591C87CD3641D/uvoi_7jpsiWSlVwpmpsZy06s-m4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvoi_7jpsiWSlVwpmpsZy06s-m4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:45:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91843C3, serialNumber=BAFA22FFB8E9B22592955C299A9B19CB4EACFA6E
Validity
Not Before: Mar 11 07:07:44 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69b114c0-7b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:aa:e5:4d:79:a8:b4:13:b8:94:9f:61:54:
51:a5:36:cd:21:78:05:97:d1:56:be:44:51:eb:e6:
cd:09:9c:df:e2:eb:fd:48:b1:03:5a:62:27:02:ff:
d5:64:32:76:d1:f0:99:13:c0:12:38:1d:ab:ca:9d:
1a:a4:a0:2d:3d:fc:77:6e:23:0d:4c:f4:ce:8f:6f:
d3:e4:e0:c6:a5:2f:df:fb:49:1b:6f:d0:d0:3c:6f:
ef:77:7a:3e:42:d5:89:34:e3:18:60:34:b8:13:65:
0d:17:cc:3f:6c:d5:11:31:48:08:db:66:1d:1b:bd:
43:49:e2:2e:83:88:e8:ce:46:98:41:d1:f9:da:75:
bd:a5:e0:d5:5d:ab:13:54:9a:92:14:d4:cb:5e:c2:
a4:27:b6:5a:c4:ea:1c:2e:fd:6d:36:f4:db:9b:fa:
fe:04:7c:4c:cc:d7:cc:4c:fe:dd:6b:a0:eb:24:6f:
11:af:cb:08:e1:f2:c1:29:88:45:0a:84:ed:6a:eb:
26:c6:9d:8e:04:38:85:9a:09:b0:ad:49:a5:02:ce:
e2:a2:ac:59:71:fb:fe:38:94:15:ef:eb:3e:53:e9:
de:cf:7b:35:8b:9d:27:f7:e1:fd:44:5c:95:28:e0:
16:be:42:d1:ea:ae:b0:f9:83:20:57:a2:b1:f8:70:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:71:DE:15:A4:A5:EF:60:5B:EC:10:F2:2D:61:3B:3F:A3:EF:06:3A
X509v3 Authority Key Identifier:
keyid:BA:FA:22:FF:B8:E9:B2:25:92:95:5C:29:9A:9B:19:CB:4E:AC:FA:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91843C3/7928DCDCD90B11F0A47591C87CD3641D/uvoi_7jpsiWSlVwpmpsZy06s-m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvoi_7jpsiWSlVwpmpsZy06s-m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91843C3/7928DCDCD90B11F0A47591C87CD3641D/E9A2F64A1D1811F181A394B60F3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
43.226.124.0/22
103.254.108.0/22
IPv6:
2400:6c80::/32
Signature Algorithm: sha256WithRSAEncryption
16:cf:c8:b4:0e:7c:c2:24:d6:2d:a3:67:e1:43:0f:e5:1a:99:
4d:38:8e:9c:4a:1e:dd:b8:e9:ec:33:a0:05:30:38:c1:55:b7:
dd:d8:87:71:62:a2:f0:ab:7d:d5:26:27:56:ff:37:42:61:09:
95:60:9f:a7:0d:07:a0:15:e7:9c:ef:6e:3e:69:59:ed:9e:f1:
fc:d2:67:6d:35:ad:d9:0d:fa:f8:05:82:5b:e3:73:82:21:fe:
aa:17:35:4d:5f:a9:df:de:6c:24:87:a9:d3:d3:4c:cd:df:04:
1b:5a:28:a5:ee:a2:55:b6:f6:91:0c:2a:7d:58:b2:85:d3:b3:
9a:53:40:d3:a0:b2:27:ef:02:c3:5f:bc:b0:7a:4c:e5:39:9b:
f8:c0:c1:bf:f6:81:40:78:24:11:ef:3f:1c:38:d3:f9:a9:df:
95:46:a6:a3:27:c9:10:30:4c:fd:05:3b:c2:ad:84:fb:10:f8:
0b:71:66:ee:1c:df:4e:0f:b9:1b:c9:c7:59:4a:07:d6:f9:33:
93:fc:38:b0:66:99:8b:7e:35:b4:48:46:e1:57:a1:1e:1f:7f:
05:4c:f7:55:7b:17:c8:8f:91:5f:7e:2d:6b:73:a9:b8:b8:d3:
49:7b:8c:2a:bd:ec:54:fb:46:49:39:f1:47:13:e8:2a:5e:57:
2d:18:7b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:07 2026 by rpki-client