
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/E7C4738EF69011F0944A82D5396F56BC.roa
File: E7C4738EF69011F0944A82D5396F56BC.roa (raw, json)
Hash identifier: tF/131xYyHzc8gJFmhoa0rwUFdP5Jq9YjbacChX+Fa8=
Subject key identifier: 48:CD:E1:77:B0:E0:F1:69:AF:A6:7C:2B:5E:A4:09:1E:EF:21:AD:5D
Certificate issuer: /CN=A9134639/serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
Certificate serial: 35
Authority key identifier: 40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/E7C4738EF69011F0944A82D5396F56BC.roa
Signing time: Sun 01 Mar 2026 05:59:51 +0000
ROA not before: Tue 17 Feb 2026 06:52:36 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 45432
IP address blocks: 119.151.124.0/23 maxlen: 24
119.151.126.0/23 maxlen: 24
119.151.140.0/23 maxlen: 24
119.151.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl
rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:09:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134639, serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
Validity
Not Before: Feb 17 06:52:36 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3d5d7-0c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:d6:6d:91:b9:99:67:b1:cc:f2:2c:02:58:
84:25:83:91:80:37:99:30:61:08:30:85:41:e0:90:
53:c7:98:54:bc:57:5c:a4:25:bf:1e:65:25:d2:a4:
a9:bf:66:9c:55:41:2c:06:57:12:91:99:be:24:3b:
96:84:1c:0f:ea:66:c8:42:7a:f2:13:12:3f:b6:71:
21:2d:2b:39:e0:71:9c:98:d4:46:e3:3b:f4:92:1a:
77:cf:d2:d3:2f:3b:09:82:20:70:43:0c:c3:f9:14:
81:78:d7:50:18:57:8e:4e:be:22:fa:bd:20:fd:9c:
7e:ae:7f:59:1f:ac:61:fb:cc:41:19:7f:0f:9b:06:
40:d1:46:be:f1:d2:59:0d:3d:27:1b:75:52:47:dd:
d6:73:d7:69:83:67:da:74:cc:0f:41:34:14:4a:fa:
da:22:e9:2f:47:91:7a:9a:1c:0f:e2:a3:d5:ff:5d:
fb:00:4a:3e:bf:c1:d5:08:85:d1:7f:87:59:62:b3:
84:55:c9:78:74:e2:5b:ca:a2:c7:a2:e7:83:06:50:
9d:23:ff:e3:b7:96:69:67:be:fa:10:e8:c8:98:bb:
6a:4c:a5:d9:79:43:6d:d9:d0:ea:e4:5d:16:46:05:
5f:ba:14:bb:19:4c:8d:64:eb:b7:ae:dc:a8:dd:8a:
2d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CD:E1:77:B0:E0:F1:69:AF:A6:7C:2B:5E:A4:09:1E:EF:21:AD:5D
X509v3 Authority Key Identifier:
keyid:40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/E7C4738EF69011F0944A82D5396F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
119.151.124.0/22
119.151.140.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:fb:4a:91:42:94:dd:b8:b9:e5:d8:35:e0:b9:a2:2f:2d:bb:
9d:25:38:1f:e1:de:92:c7:99:9e:94:82:3f:1e:9f:a0:71:db:
dc:67:cd:f7:f7:6c:fd:0c:f8:82:52:12:b6:3f:e4:40:8c:49:
5d:8d:cd:24:16:aa:84:94:83:36:03:0c:a8:95:20:74:bb:76:
b8:10:61:77:59:e0:2e:48:22:1e:7d:d2:ed:05:ae:d0:3a:62:
c6:4b:08:69:3a:56:58:82:92:5f:80:4e:71:76:39:68:ae:69:
b1:d2:60:5d:dd:4c:35:6c:8b:f2:15:14:c7:12:5b:8c:d5:51:
81:84:0b:29:6f:d2:5e:c9:85:5b:fe:3e:cb:ea:40:0f:60:e4:
73:ff:a1:37:0e:b5:1a:7e:a1:16:c6:96:c9:8b:65:36:e8:8e:
e3:b7:43:c8:04:56:30:8c:e4:4c:df:99:5a:dd:ef:33:b4:ab:
6c:69:c5:16:fc:7a:3f:11:3c:42:55:68:82:ad:69:6c:94:d2:
16:b9:5c:c1:4e:30:b9:17:8c:90:c2:5d:78:c0:47:18:3e:ae:
e9:54:61:84:64:c6:49:1a:49:c1:83:ae:ce:4a:4e:07:d9:ea:
b5:bf:5d:e6:dc:4b:1a:e9:fe:e2:09:3d:e2:ae:bb:77:4c:db:
23:20:82:54
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NDYzOTExMC8GA1UEBRMoNDA1RTVBQjA3NTAwN0JBM0Q4NTI2MkQ2OEIyNTE5ODZD
NkU5REQ1RDAeFw0yNjAyMTcwNjUyMzZaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkNWQ3LTBjNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpYNZtkbmZZ7HM8iwCWIQlg5GAN5kwYQgwhUHgkFPHmFS8V1ykJb8eZSXSpKm/
ZpxVQSwGVxKRmb4kO5aEHA/qZshCevITEj+2cSEtKzngcZyY1EbjO/SSGnfP0tMv
OwmCIHBDDMP5FIF411AYV45OviL6vSD9nH6uf1kfrGH7zEEZfw+bBkDRRr7x0lkN
PScbdVJH3dZz12mDZ9p0zA9BNBRK+toi6S9HkXqaHA/io9X/XfsASj6/wdUIhdF/
h1lis4RVyXh04lvKosei54MGUJ0j/+O3lmlnvvoQ6MiYu2pMpdl5Q23Z0OrkXRZG
BV+6FLsZTI1k67eu3Kjdii11AgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUSM3hd7Dg
8WmvpnwrXqQJHu8hrV0wHwYDVR0jBBgwFoAUQF5asHUAe6PYUmLWiyUZhsbp3V0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0NjM5LzJCQTIzQzhDRDVC
RjExRjA4REJDN0MzMUM0RjlBRTAyL1FGNWFzSFVBZTZQWVVtTFdpeVVaaHNicDNW
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUUY1YXNIVUFlNlBZVW1MV2l5VVpoc2JwM1YwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDYzOS8yQkEyM0M4Q0Q1QkYxMUYwOERCQzdDMzFDNEY5QUUwMi9FN0M0NzM4RUY2
OTAxMUYwOTQ0QTgyRDUzOTZGNTZCQy5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBAJ3l3wDBAJ3l4wwDQYJKoZIhvcNAQELBQADggEBAJr7SpFClN24ueXY
NeC5oi8tu50lOB/h3pLHmZ6Ugj8en6Bx29xnzff3bP0M+IJSErY/5ECMSV2NzSQW
qoSUgzYDDKiVIHS7drgQYXdZ4C5IIh590u0FrtA6YsZLCGk6VliCkl+ATnF2OWiu
abHSYF3dTDVsi/IVFMcSW4zVUYGECylv0l7JhVv+PsvqQA9g5HP/oTcOtRp+oRbG
lsmLZTbojuO3Q8gEVjCM5EzfmVrd7zO0q2xpxRb8ej8RPEJVaIKtaWyU0ha5XMFO
MLkXjJDCXXjARxg+rulUYYRkxkkaScGDrs5KTgfZ6rW/XebcSxrp/uIJPeKuu3dM
2yMgglQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:29:34 2026 by rpki-client