
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/9E40D11CC9EC11EE9644540FC4F9AE02.roa
File: 9E40D11CC9EC11EE9644540FC4F9AE02.roa (raw, json)
Hash identifier: MtMRVhbm/GKcyIVSZCGW9MQoyNNx6WEtE4Sni66kFt0=
Subject key identifier: 33:C5:68:B3:FF:CF:F1:30:D1:0A:8D:6F:8C:C4:3C:6D:64:D5:BE:AB
Certificate issuer: /CN=A91A55C9/serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D
Certificate serial: 0190
Authority key identifier: EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/9E40D11CC9EC11EE9644540FC4F9AE02.roa
Signing time: Wed 11 Mar 2026 03:38:44 +0000
ROA not before: Wed 11 Mar 2026 03:38:44 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 59383
IP address blocks: 143.119.96.0/20 maxlen: 20
143.119.112.0/24 maxlen: 24
143.119.208.0/20 maxlen: 20
143.119.210.0/24 maxlen: 24
143.119.211.0/24 maxlen: 24
143.119.223.0/24 maxlen: 24
143.119.224.0/20 maxlen: 20
143.119.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl
rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55C9, serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D
Validity
Not Before: Mar 11 03:38:44 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69b0e3c4-11f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2e:fa:6b:fd:fd:d1:52:1a:63:7b:fa:79:4c:
8b:43:a8:f1:7b:68:e4:fd:16:0c:d7:46:f0:d5:33:
13:f6:8d:4e:ca:cc:53:cf:19:9a:54:1d:f8:9b:80:
75:91:a5:b5:57:55:be:e3:47:69:40:31:70:1c:ff:
23:4e:d5:4c:1c:9b:05:fb:ed:8f:b5:dd:5b:8e:a3:
4c:b2:ae:37:9a:ec:98:40:6b:eb:d5:b6:1e:b9:4e:
d9:4d:04:ec:e6:95:08:05:20:87:11:51:e3:a2:85:
59:73:c4:e1:31:b2:04:33:98:f6:5c:d7:7b:ea:45:
5e:d0:04:88:ea:f5:87:19:a3:5d:a4:ed:cb:c4:d8:
4f:65:62:4d:48:8c:95:cf:4e:83:3a:01:ac:84:5a:
79:9c:39:82:b8:57:c1:07:25:56:69:04:8f:01:dd:
6c:f7:5e:f5:05:6d:d5:b1:9b:ec:77:84:1b:a3:a0:
0c:29:eb:e5:e6:4d:20:91:2a:4a:e2:5e:87:0f:41:
ab:52:70:eb:4d:0f:e3:8b:8e:8a:70:93:31:4b:da:
00:62:c7:09:40:c5:a4:3f:5a:2e:c8:55:07:89:24:
ee:ce:7d:33:8e:a7:65:9f:cb:40:e8:ba:cb:6c:3d:
50:5f:a2:76:b4:69:55:e0:29:30:49:ca:9a:fd:96:
6f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C5:68:B3:FF:CF:F1:30:D1:0A:8D:6F:8C:C4:3C:6D:64:D5:BE:AB
X509v3 Authority Key Identifier:
keyid:EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/9E40D11CC9EC11EE9644540FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
143.119.96.0-143.119.112.255
143.119.208.0-143.119.239.255
Signature Algorithm: sha256WithRSAEncryption
86:3c:86:a7:73:b5:21:d2:70:32:22:07:d8:fa:0d:39:73:fa:
2c:a3:12:74:42:3b:f7:0a:27:93:d6:14:f1:9d:30:23:20:97:
5a:11:3d:3a:6f:66:0e:7f:82:eb:c6:0c:42:2b:cb:93:20:79:
14:d4:af:af:26:f1:77:13:91:9f:6b:30:8e:c9:6c:fb:d1:0f:
8d:bd:2c:f8:30:65:4e:82:d9:f4:55:44:48:f0:de:94:e9:d1:
2c:94:4f:c6:f1:62:f2:3a:a4:67:63:52:70:48:9f:98:00:78:
80:d7:59:b8:95:14:42:1a:87:d0:4d:3a:b9:13:fc:37:ef:37:
f6:e0:2b:13:ae:84:c1:94:dc:11:25:f0:d9:11:0a:54:6b:1b:
30:30:7d:d5:3d:75:7e:ae:42:d8:f3:90:22:72:4a:39:d1:e1:
56:b8:9e:8e:9c:6c:d4:41:fb:7c:cb:0a:c4:6a:88:68:ec:ec:
70:2e:4e:66:a0:7a:08:4c:72:c7:4f:9b:88:7d:64:c6:d3:9a:
0c:38:3f:bb:72:10:d4:42:3f:52:3a:48:68:e7:df:8d:37:cb:
10:ef:79:27:ad:5d:5a:48:c3:28:f2:10:be:c5:f9:2c:08:95:
86:35:4c:0d:92:54:b8:f5:3a:24:54:80:88:23:11:8a:b6:f8:
65:0f:e7:46
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU1QzkxMTAvBgNVBAUTKEVDNjc4REUwRDdCQ0Y4MzlEOTk4QTBGQ0U1QzlFQjc1
RkZDODY3M0QwHhcNMjYwMzExMDMzODQ0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWIwZTNjNC0xMWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6C76a/390VIaY3v6eUyLQ6jxe2jk/RYM10bw1TMT9o1OysxTzxmaVB34m4B1
kaW1V1W+40dpQDFwHP8jTtVMHJsF++2Ptd1bjqNMsq43muyYQGvr1bYeuU7ZTQTs
5pUIBSCHEVHjooVZc8ThMbIEM5j2XNd76kVe0ASI6vWHGaNdpO3LxNhPZWJNSIyV
z06DOgGshFp5nDmCuFfBByVWaQSPAd1s9171BW3VsZvsd4Qbo6AMKevl5k0gkSpK
4l6HD0GrUnDrTQ/ji46KcJMxS9oAYscJQMWkP1ouyFUHiSTuzn0zjqdln8tA6LrL
bD1QX6J2tGlV4CkwScqa/ZZvTwIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFDPFaLP/
z/Ew0QqNb4zEPG1k1b6rMB8GA1UdIwQYMBaAFOxnjeDXvPg52Zig/OXJ63X/yGc9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS83RTJGMTI2OEM5
RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1EblptS0Q4NWNucmRmX0la
ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzdHZU40TmU4LURuWm1LRDg1Y25yZGZfSVp6MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU1QzkvN0UyRjEyNjhDOUVCMTFFRThCODU3QjBDQzRGOUFFMDIvOUU0MEQxMUND
OUVDMTFFRTk2NDQ1NDBGQzRGOUFFMDIucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAi
BAIAATAcMAwDBAWPd2ADBACPd3AwDAMEBI930AMEBI934DANBgkqhkiG9w0BAQsF
AAOCAQEAhjyGp3O1IdJwMiIH2PoNOXP6LKMSdEI79wonk9YU8Z0wIyCXWhE9Om9m
Dn+C68YMQivLkyB5FNSvrybxdxORn2swjsls+9EPjb0s+DBlToLZ9FVESPDelOnR
LJRPxvFi8jqkZ2NScEifmAB4gNdZuJUUQhqH0E06uRP8N+839uArE66EwZTcESXw
2REKVGsbMDB91T11fq5C2POQInJKOdHhVriejpxs1EH7fMsKxGqIaOzscC5OZqB6
CExyx0+biH1kxtOaDDg/u3IQ1EI/UjpIaOffjTfLEO95J61dWkjDKPIQvsX5LAiV
hjVMDZJUuPU6JFSAiCMRirb4ZQ/nRg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:53:01 2026 by rpki-client