
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa
File: AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa (raw, json)
Hash identifier: G4irpBG19slrulSAFYlR+PU5Eph/ynSR0m07o08AgsU=
Subject key identifier: C1:F7:E8:90:5A:DE:4C:42:88:27:34:BC:93:05:72:91:73:B9:63:01
Certificate issuer: /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
Certificate serial: 1768
Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:42:14 +0000
ROA not before: Mon 08 Dec 2025 16:25:31 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 18190
IP address blocks: 155.137.88.0/24 maxlen: 24
155.137.89.0/24 maxlen: 24
155.137.90.0/24 maxlen: 24
209.141.8.0/24 maxlen: 24
209.141.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl
rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5992 (0x1768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
Validity
Not Before: Dec 8 16:25:31 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a46c65-da8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c5:0b:a6:4f:ea:56:c6:83:4d:ab:b6:d5:ac:
e3:d0:86:4e:10:8e:91:42:65:9f:40:49:cd:49:14:
b9:e7:73:84:b3:38:54:35:ad:77:61:5f:62:27:45:
f3:bf:7b:ae:05:c6:19:7d:58:ab:49:e4:f2:5d:0c:
33:7e:67:4c:8b:64:58:4b:ad:79:f6:05:74:08:e1:
bc:98:c0:ec:e5:74:48:ef:38:70:1d:35:cb:0a:0d:
86:a0:dc:51:4a:6f:47:10:3e:1d:43:8d:3a:62:34:
13:7b:12:b7:5a:a6:11:3c:e0:42:b6:4a:5c:31:2b:
ad:fd:81:3b:83:6e:20:bd:d8:b6:dd:38:27:b6:12:
6e:e3:37:70:c1:b5:a7:8c:a3:9a:ec:e9:83:20:ca:
2e:a2:d6:54:79:7c:95:be:b5:9c:c6:da:7f:0d:96:
9e:2f:aa:4a:1b:e1:fe:50:40:eb:7b:2e:83:88:13:
91:b7:7e:5b:b2:9b:b2:87:ca:b5:59:d4:bb:87:c2:
35:cd:db:81:ef:86:67:ab:32:62:56:20:34:89:06:
22:01:ee:1f:1c:82:b7:ac:5a:f5:06:ad:ae:68:a5:
da:81:05:ad:3b:b1:a9:1a:f2:e8:07:86:db:67:23:
1a:0d:c2:25:26:7d:58:31:66:de:40:32:e8:5e:ca:
a7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F7:E8:90:5A:DE:4C:42:88:27:34:BC:93:05:72:91:73:B9:63:01
X509v3 Authority Key Identifier:
keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
155.137.88.0-155.137.90.255
209.141.8.0/24
209.141.12.0/23
Signature Algorithm: sha256WithRSAEncryption
98:ee:bb:e5:7e:7a:62:34:e7:d8:e0:fd:31:19:5b:f0:bb:1b:
58:6e:a6:aa:f6:39:db:51:02:b9:c4:f2:3d:aa:ff:c0:04:a2:
66:30:46:1d:69:c0:18:32:38:5d:e4:af:55:f5:2e:25:71:6e:
09:23:69:50:ab:ba:fb:bb:5f:85:ac:a9:9b:b6:b1:d8:a9:e6:
d1:5a:a8:66:c8:f1:a3:7b:9d:15:52:0e:90:1f:7f:37:af:b3:
87:51:97:6b:19:9d:30:34:c6:a9:73:c9:e5:84:d0:21:74:c9:
ea:df:59:63:50:2f:a9:e2:c0:ac:27:d4:5a:41:86:03:9c:8c:
9c:98:d5:2b:2e:96:3d:05:f8:a1:f7:97:2c:ba:f0:09:45:d5:
72:25:2b:cc:86:cf:ee:c7:f5:00:73:e2:80:64:77:00:d4:4a:
53:63:7e:75:1a:4d:57:49:a8:51:87:c2:80:ce:cd:0b:c6:d5:
ba:5b:66:75:4f:33:7f:d7:39:9a:54:1a:27:07:86:53:30:f4:
a0:82:49:5d:66:00:5d:4f:ba:a5:0c:15:cc:15:49:4d:1a:9a:
c9:3c:8e:98:17:62:f8:fc:ea:d8:f1:2a:ed:1d:ae:4e:c0:c8:
15:d5:da:01:17:70:fe:bf:f7:5b:ff:7c:6f:a0:9e:a5:3d:fa:
9a:f3:04:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:16 2026 by rpki-client