
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/E0147FC48AB811EB92252D18C4F9AE02.roa
File: E0147FC48AB811EB92252D18C4F9AE02.roa (raw, json)
Hash identifier: 8HuI6yxWa1nS2qzAi58P3BL+IKSitnw2yYjxmsq1lXM=
Subject key identifier: 5B:FD:99:E5:41:D1:85:BF:B7:CE:16:25:B1:01:93:57:BF:E9:08:0C
Certificate issuer: /CN=A91B9B0D/serialNumber=D9C66B0E420B9134173D553D16AA0B146B774773
Certificate serial: 06E5
Authority key identifier: D9:C6:6B:0E:42:0B:91:34:17:3D:55:3D:16:AA:0B:14:6B:77:47:73
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cZrDkILkTQXPVU9FqoLFGt3R3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/E0147FC48AB811EB92252D18C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:45:14 +0000
ROA not before: Tue 02 Sep 2025 22:43:35 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 24390
IP address blocks: 144.120.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.crl
rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cZrDkILkTQXPVU9FqoLFGt3R3M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1765 (0x6e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9B0D, serialNumber=D9C66B0E420B9134173D553D16AA0B146B774773
Validity
Not Before: Sep 2 22:43:35 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a40aaa-2e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:60:4a:58:68:22:a6:ba:eb:00:d6:06:e4:0f:
8b:2c:db:65:41:02:2e:4b:55:9c:da:26:e6:c4:90:
21:f3:23:89:bd:34:66:93:f2:a9:de:0d:7b:66:15:
24:40:20:ca:50:92:90:77:10:9a:75:f1:9a:ab:4f:
17:ae:53:bd:11:3f:9d:d8:19:71:c6:b4:36:d8:c8:
36:51:08:c3:02:a3:6a:d8:a4:25:f5:60:f0:1f:da:
9c:a1:93:69:12:74:94:2e:fd:d4:2c:b4:99:50:95:
72:45:db:84:df:a8:ce:d5:4b:86:44:01:dd:d2:0f:
a1:4b:a3:d8:b9:aa:9f:58:63:5b:a2:5d:92:1c:ce:
bc:f9:73:e9:30:86:cc:25:6b:ee:e4:20:a8:b6:a2:
eb:ef:d7:b3:fb:0b:f8:40:47:d0:6f:49:a8:33:6f:
0e:ef:05:50:47:de:da:1f:ec:d3:6d:a8:fc:7c:34:
6f:a6:bf:07:91:27:1a:43:d7:0a:31:c1:61:c3:1e:
90:44:25:5c:25:5f:a9:07:a4:54:cf:e8:7b:ed:dd:
4e:e1:3f:a0:f2:3f:55:39:e0:d4:eb:d2:31:20:37:
d6:ee:da:99:ce:15:e4:d4:28:97:61:72:8e:70:92:
4c:0c:33:9d:b2:3e:ad:29:27:43:ee:39:6e:a6:65:
5c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FD:99:E5:41:D1:85:BF:B7:CE:16:25:B1:01:93:57:BF:E9:08:0C
X509v3 Authority Key Identifier:
keyid:D9:C6:6B:0E:42:0B:91:34:17:3D:55:3D:16:AA:0B:14:6B:77:47:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/2cZrDkILkTQXPVU9FqoLFGt3R3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cZrDkILkTQXPVU9FqoLFGt3R3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B0D/98B7280E8AB611EB8237D414C4F9AE02/E0147FC48AB811EB92252D18C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
144.120.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:d7:f4:0d:07:3b:47:d7:3b:00:d8:66:0a:9c:85:76:a9:7d:
21:58:d1:5b:d0:4e:6a:f0:10:89:fa:c2:dc:15:44:fe:50:36:
7d:22:e8:c4:07:cd:f6:96:f7:9a:71:1e:cf:00:8e:dd:33:3a:
9a:31:19:6c:90:49:a7:35:17:88:44:9e:22:9d:d6:b9:b9:67:
9b:39:ee:06:9c:f9:d7:18:d0:8d:c2:65:1d:b0:46:f1:5e:ab:
fb:01:0c:21:1c:17:51:6b:70:d8:65:86:43:32:70:89:65:5c:
8b:a9:f0:5c:af:1f:b3:12:e6:9a:06:e8:93:10:01:bb:aa:75:
d4:5f:08:34:da:d9:b4:a5:6d:b0:d2:69:6e:9a:34:c7:5c:4d:
79:2e:2e:c0:12:10:4b:b7:f6:d8:ce:ec:12:40:f8:9c:22:98:
74:0a:23:2c:dc:2b:a5:72:d7:fe:e8:d9:12:56:15:d6:ca:ef:
6a:d3:2e:5b:35:76:b2:ea:0f:86:0f:96:a5:59:7e:a2:8f:83:
68:ca:99:72:bd:37:c1:01:5f:25:e4:71:7f:ed:89:f7:5a:38:
91:0d:63:8b:f2:a6:1d:6e:03:da:7f:ee:eb:67:e1:43:e4:87:
e6:d4:a8:0b:42:a3:b2:47:e6:47:34:96:d7:00:fd:19:51:54:
5f:b0:9e:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:58:54 2026 by rpki-client