
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/E89AA63C3A3411EDA5928760C4F9AE02.roa
File: E89AA63C3A3411EDA5928760C4F9AE02.roa (raw, json)
Hash identifier: onsBo5Bz4rkJbVswoyhTU6gtfIuIlfG0ZfPWcTezyxQ=
Subject key identifier: 1B:E1:F4:93:24:4A:F7:62:C1:B7:ED:01:25:63:71:00:9D:8B:04:2B
Certificate issuer: /CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365
Certificate serial: 3534
Authority key identifier: 38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/E89AA63C3A3411EDA5928760C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:05:42 +0000
ROA not before: Tue 06 Jan 2026 10:58:49 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 17820
IP address blocks: 61.16.238.0/24 maxlen: 29
203.196.128.0/21 maxlen: 21
210.7.74.0/24 maxlen: 29
210.7.77.0/24 maxlen: 29
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl
rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13620 (0x3534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135EC4, serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365
Validity
Not Before: Jan 6 10:58:49 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a47ff6-1a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:a7:da:79:3e:b5:5a:2f:38:40:6c:1d:57:
be:b7:33:92:58:ac:72:51:6c:35:92:55:39:33:bd:
6b:66:27:d0:51:d5:80:e2:2e:23:4e:90:88:7a:82:
55:00:e7:13:8a:b7:9e:e9:b8:96:b4:e3:4c:e1:44:
c6:c6:b1:76:0a:62:fb:a7:22:c2:c9:5f:d0:ed:7f:
f6:49:88:a7:d5:14:6d:85:d7:46:02:7f:90:f0:25:
30:f9:68:a9:14:e8:a8:c5:52:d5:1c:21:6a:7a:01:
11:a5:48:38:6a:1f:1f:fd:48:de:4b:90:6d:c4:1a:
e8:81:ee:eb:12:0f:69:2b:75:35:e7:89:9a:46:e0:
16:ae:12:cc:53:bc:a7:aa:85:c9:92:a5:b1:af:0c:
ff:c7:20:35:13:b4:8d:b1:04:9a:56:13:e0:cb:b4:
2f:03:50:6f:35:d0:fe:ec:cc:d6:08:53:fc:82:a7:
a7:65:b2:cb:7c:25:8e:6f:79:d9:ab:78:10:09:60:
0d:6a:b0:22:f2:47:c3:52:f5:c1:de:86:95:af:17:
21:ea:46:43:01:d9:fb:46:ae:66:33:85:a9:a8:aa:
bb:7b:84:d5:ab:2b:e9:79:87:81:19:86:d0:e3:66:
06:00:e8:df:a6:8c:6b:50:fc:80:85:db:82:8c:08:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E1:F4:93:24:4A:F7:62:C1:B7:ED:01:25:63:71:00:9D:8B:04:2B
X509v3 Authority Key Identifier:
keyid:38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/E89AA63C3A3411EDA5928760C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.16.238.0/24
203.196.128.0/21
210.7.74.0/24
210.7.77.0/24
Signature Algorithm: sha256WithRSAEncryption
33:79:ff:f0:cc:d6:07:bc:a3:97:e8:dd:48:fa:d1:ac:33:d0:
6b:b7:3c:7a:cc:80:3a:7e:b7:97:ac:84:da:14:2f:b0:15:7a:
6e:a9:4c:ac:4b:10:d7:24:e8:df:84:c3:90:da:3a:fa:1c:af:
7f:cf:93:de:32:6b:ad:2e:75:9e:08:8a:0b:c5:a8:aa:4c:a1:
7d:be:6f:be:3c:03:2d:a3:79:f7:aa:03:ea:93:85:68:42:f6:
ec:b0:c0:5a:c7:48:6e:a0:1e:71:98:6d:de:30:90:40:cb:2f:
77:79:8e:47:22:a5:4e:15:a5:d9:22:40:52:85:0a:ed:af:a2:
96:97:86:b1:84:ae:51:41:65:74:02:27:78:11:ef:8b:ff:dc:
c0:e2:69:42:e6:8a:ba:58:d7:46:c2:d4:b0:d0:f3:48:95:82:
1a:74:28:ea:0e:96:0e:3c:50:66:21:ea:b6:56:a6:7a:f7:7a:
51:3a:cd:bc:c1:38:10:3f:eb:30:9a:de:00:5f:69:a8:57:e6:
49:0a:16:9d:1d:b9:5d:b2:7b:87:67:ac:5a:c9:33:aa:d2:e6:
31:1d:59:7b:db:66:74:1e:f9:92:c7:73:5f:7a:6b:3d:ef:b9:
66:35:5d:76:1d:4d:ad:87:2e:03:28:15:be:db:a9:bf:32:77:
7c:63:bd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:37 2026 by rpki-client