
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/FBC7C3BC24DB11F18E6B9B14AD833773.roa
File: FBC7C3BC24DB11F18E6B9B14AD833773.roa (raw, json)
Hash identifier: CNgjlNVv/jV/7iU+TGlplY+mVP3hIDOm1DQAw08tvXI=
Subject key identifier: 78:A4:43:2C:28:5D:62:0C:16:43:DC:AC:02:F2:AE:5E:A7:9C:12:C4
Certificate issuer: /CN=A9189D79/serialNumber=9FBBD23056168D1A517E996DC56F664A6EE52EA5
Certificate serial: 04
Authority key identifier: 9F:BB:D2:30:56:16:8D:1A:51:7E:99:6D:C5:6F:66:4A:6E:E5:2E:A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/FBC7C3BC24DB11F18E6B9B14AD833773.roa
Signing time: Sat 21 Mar 2026 04:11:35 +0000
ROA not before: Sat 21 Mar 2026 04:11:35 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 133139
IP address blocks: 146.88.85.0/24 maxlen: 24
146.88.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.crl
rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:25:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189D79, serialNumber=9FBBD23056168D1A517E996DC56F664A6EE52EA5
Validity
Not Before: Mar 21 04:11:35 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69be1a77-c0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a1:24:37:1a:2c:77:69:26:6b:58:59:7a:98:
fa:13:55:18:4d:20:c7:f9:04:2e:4b:69:7c:02:c4:
d7:f4:b6:de:8f:fc:e9:e2:ac:b6:8c:e5:c3:5b:00:
7f:24:33:fc:a8:d7:ba:76:bf:49:8a:4c:a5:80:88:
6d:54:eb:45:11:16:ae:e6:d0:f5:dd:48:72:f6:0d:
62:f7:47:04:78:02:4a:16:80:0e:b5:1c:d4:4c:09:
24:5d:f0:9e:56:26:dc:01:70:ee:74:da:1c:62:3f:
74:f1:87:e4:77:28:e5:aa:1b:a3:9c:9a:e2:2e:47:
0a:10:f6:90:8f:a5:53:ea:34:00:7f:04:eb:d6:cd:
a1:50:ca:0e:b3:57:ce:b8:35:ea:49:55:3a:4a:8f:
b0:90:e2:9c:ee:e9:9d:2c:cd:0d:67:10:01:79:c2:
3f:ac:1f:55:bb:2d:cc:a6:97:da:49:37:59:18:9e:
72:38:1a:59:d4:d4:02:64:75:4a:38:ff:96:24:66:
90:f9:80:81:a3:a5:67:d6:3b:5d:50:6b:e3:88:2a:
65:b9:bf:f7:d7:56:63:3c:97:33:b6:e5:ec:a9:58:
7e:e4:f9:f2:cc:cd:44:69:23:01:af:9d:a6:7d:ee:
3e:a4:bb:33:f9:33:54:c9:f5:5b:c7:ec:23:0e:dc:
b1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A4:43:2C:28:5D:62:0C:16:43:DC:AC:02:F2:AE:5E:A7:9C:12:C4
X509v3 Authority Key Identifier:
keyid:9F:BB:D2:30:56:16:8D:1A:51:7E:99:6D:C5:6F:66:4A:6E:E5:2E:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/FBC7C3BC24DB11F18E6B9B14AD833773.roa
sbgp-ipAddrBlock: critical
IPv4:
146.88.85.0-146.88.86.255
Signature Algorithm: sha256WithRSAEncryption
2e:ce:9b:d4:5a:24:7a:5f:e4:5f:9a:4b:bb:64:14:ae:41:17:
b5:d4:cc:1c:c5:68:e0:b9:b2:91:c1:ff:53:c2:46:6f:fd:55:
db:c4:17:ab:c0:c1:59:35:1d:ef:a6:bb:d6:9f:df:d8:bc:96:
b2:98:7e:c0:d8:c5:36:93:1a:1c:45:0b:03:16:05:2d:c0:a4:
ae:fb:ff:73:88:4e:d1:d3:01:cf:73:1d:a6:d3:93:1d:69:53:
65:4e:4e:49:2f:b6:e1:6d:e1:f5:31:10:d7:d1:c3:5f:b1:5d:
42:91:a5:2d:4c:69:18:80:64:1b:0d:dd:61:d9:7c:30:a8:4c:
da:e6:ab:d2:60:96:0e:6f:c2:a9:91:2a:c7:39:ab:a5:af:6b:
a8:5d:35:3a:34:24:dd:91:0c:03:3b:bf:fe:54:72:6c:60:d6:
46:ad:77:92:76:86:82:1a:1d:87:a2:bf:27:94:62:f4:b3:df:
d3:de:8e:6a:93:4f:93:ed:a4:8f:fb:f5:55:b6:b3:f2:e7:64:
fd:05:5c:2e:a3:0a:a5:4f:61:2c:ae:bc:78:1a:a2:6d:0e:33:
e2:cc:5d:5a:68:b6:28:dc:96:69:22:77:49:dd:7e:0f:58:d5:
b5:44:04:65:59:36:7d:2e:40:88:45:cc:e8:7a:31:76:d2:5e:
31:a8:86:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:55:41 2026 by rpki-client