
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/9E3D544AFFFD11EF8D8A924EC4F9AE02.roa
File: 9E3D544AFFFD11EF8D8A924EC4F9AE02.roa (raw, json)
Hash identifier: 845Y2aA2itdhNFcJh2u6MWKd/R973iis1jKrvrdf6+g=
Subject key identifier: 1F:35:96:88:77:4A:8B:91:84:C7:EF:27:A1:0D:06:A3:35:36:51:FA
Certificate issuer: /CN=A912E53C/serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F
Certificate serial: 0109
Authority key identifier: 74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/9E3D544AFFFD11EF8D8A924EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:07:57 +0000
ROA not before: Mon 19 Jan 2026 03:23:14 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 152183
IP address blocks: 160.191.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl
rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E53C, serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F
Validity
Not Before: Jan 19 03:23:14 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a43a2d-88f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:b6:d9:a3:cf:eb:ae:a9:84:ca:71:0c:d6:
dc:99:96:12:be:ba:8a:f6:cc:79:97:1d:7f:06:56:
5b:7f:1e:ea:e3:f9:ca:7e:15:4d:e9:0d:26:ae:5c:
67:4d:36:47:05:2c:ca:ea:14:01:d3:45:04:71:f2:
34:d4:e6:27:09:05:70:00:da:e6:f5:63:9d:c4:ae:
6a:38:eb:61:82:60:84:05:ab:6d:f9:13:21:58:d7:
a1:ba:f8:59:5c:4a:4b:cd:49:78:95:8e:7e:7c:ec:
1b:ae:72:74:70:ce:6d:3a:5b:16:e7:03:43:14:16:
ca:34:e4:88:6d:42:99:3b:58:c7:5d:24:3d:43:c3:
ae:5f:4d:46:64:80:e2:41:3c:22:5b:2b:66:76:2e:
85:06:a2:23:08:0c:c5:93:1f:f6:fb:9e:6f:e9:e6:
49:7a:fd:b8:e5:f2:bc:99:c6:58:91:67:c0:66:9f:
63:50:01:48:4e:38:b3:7e:ee:d8:cb:e7:76:a9:63:
f9:43:67:c0:df:e7:86:1d:56:ae:dd:12:3c:f6:c9:
1e:a1:be:d6:e8:7c:f4:df:02:55:74:92:03:da:83:
b1:48:e2:de:db:a8:99:c1:03:ee:e6:ea:ed:24:b7:
48:1d:bd:72:02:1a:ea:aa:fc:4a:83:e7:5a:c7:e9:
3f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:35:96:88:77:4A:8B:91:84:C7:EF:27:A1:0D:06:A3:35:36:51:FA
X509v3 Authority Key Identifier:
keyid:74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/9E3D544AFFFD11EF8D8A924EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.57.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:35:f1:cc:3f:29:d3:0c:45:f8:f6:37:4b:83:3c:01:3e:b5:
39:30:8e:da:46:c7:53:d1:c8:34:f2:02:83:2e:e7:51:1b:3a:
42:c8:23:b5:b2:8b:9f:69:22:c4:e9:66:ad:b4:9d:e9:40:44:
bc:1b:c0:1f:96:b0:23:ad:10:55:a4:5d:58:3a:a2:7f:a9:9a:
25:d2:f4:06:98:f8:c1:c1:d6:f9:1f:8f:f7:56:71:0d:4e:32:
b8:98:88:4e:2f:c4:6e:ad:e4:13:37:ae:a5:20:1a:6c:78:12:
6e:75:f3:35:e9:b2:da:84:99:d7:98:3f:1c:a8:89:51:9f:41:
27:3f:f0:43:20:8e:fe:5d:c2:e8:8d:3e:4a:d2:1d:a4:3e:0c:
18:a4:32:38:f6:b9:41:34:ac:64:c2:d5:dc:dc:43:a4:a2:6d:
77:83:76:12:1f:b1:f2:b3:06:82:61:e4:f9:f1:b3:10:9c:a2:
73:34:03:e6:f7:28:bb:ec:51:b0:3c:16:de:74:74:20:9e:cf:
87:8b:e3:fc:7b:4f:60:2b:d5:44:b0:5a:17:43:ea:4d:7d:d4:
cd:b8:d9:cd:3a:ba:70:5a:5c:9a:d6:ea:8f:bd:4a:dc:7a:83:
80:34:0d:0f:27:7c:b4:3b:8b:01:9a:34:96:7b:06:64:dc:82:
0e:39:a7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:52 2026 by rpki-client