
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E5AA11C2974A11EFAE16EC38C4F9AE02.roa
File: E5AA11C2974A11EFAE16EC38C4F9AE02.roa (raw, json)
Hash identifier: iwi5rASnbSd0xknkXnEdhxuEaKl5RgdixutwraiVBM4=
Subject key identifier: 68:A9:58:94:3B:49:2D:76:FE:F9:EB:32:02:D6:63:1B:1F:37:E8:78
Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial: 2972
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E5AA11C2974A11EFAE16EC38C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:25:15 +0000
ROA not before: Tue 02 Sep 2025 16:03:49 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 38539
IP address blocks: 116.93.52.0/24 maxlen: 24
116.93.61.0/24 maxlen: 24
116.93.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10610 (0x2972)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Validity
Not Before: Sep 2 16:03:49 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4929b-4a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:16:ac:d2:b8:47:65:9c:4a:13:85:9f:2f:7e:
bc:5c:e0:39:94:1d:ab:99:7c:f2:b2:14:65:25:9c:
8f:7d:38:8c:89:6b:06:db:ff:80:55:60:39:60:ab:
7c:67:ca:c3:82:b4:c3:14:b0:99:2a:4d:01:60:55:
e1:13:ae:42:1f:a0:b3:67:24:7e:8f:6e:64:86:81:
7c:2c:2c:76:fb:f4:1c:f5:24:28:3a:01:42:32:a2:
47:26:0f:da:ad:ee:8e:36:4b:c0:e4:1a:a3:f3:7f:
96:59:cf:f7:37:8d:ae:76:ca:5b:7b:1b:83:4e:e9:
7a:35:6e:7c:a0:57:11:78:f3:bc:e2:b6:c7:98:7c:
91:8c:77:0d:23:71:45:9f:15:c2:a5:00:7b:75:33:
1b:0b:d8:0c:b7:e4:36:04:74:c0:c0:e2:bd:ba:7e:
90:58:01:49:7f:c7:77:49:e9:8c:8f:ce:5b:d0:ec:
a8:fb:ee:f2:aa:9d:f3:8e:b5:38:31:d7:2c:b9:96:
75:5a:d5:11:6d:c6:ea:e4:8a:8a:6a:e0:29:00:4e:
f7:f9:8c:dc:d1:6f:e0:e0:7f:c9:2d:36:a2:c5:65:
65:cf:6e:e4:18:76:79:23:28:ce:7c:63:dc:72:b4:
f1:fa:fd:b9:59:ac:9b:e0:89:2c:e6:71:bb:0a:ae:
c5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A9:58:94:3B:49:2D:76:FE:F9:EB:32:02:D6:63:1B:1F:37:E8:78
X509v3 Authority Key Identifier:
keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E5AA11C2974A11EFAE16EC38C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.93.52.0/24
116.93.61.0-116.93.62.255
Signature Algorithm: sha256WithRSAEncryption
72:3f:cc:79:a7:09:bf:56:78:2f:cf:c6:4e:d2:f9:cd:07:36:
4d:77:b5:3e:08:4e:8d:b0:82:1a:05:e6:71:8f:e7:79:02:6c:
75:57:c3:00:50:b9:5e:d1:8a:84:46:7e:f7:07:87:e4:b2:51:
1b:3d:9f:f6:d1:7b:82:d4:c3:86:2b:1c:34:a8:35:e5:f6:d5:
17:ec:3e:b4:65:09:d8:dc:a5:0f:06:31:81:03:a4:74:e9:77:
75:39:52:e5:6f:f2:18:ec:80:78:b2:ce:c7:89:7d:fe:ca:19:
4d:6e:d8:f8:e9:d4:10:6e:80:fe:d4:58:04:cc:28:3f:2b:63:
1f:fe:05:80:e9:67:23:19:d9:88:45:47:44:53:ae:38:61:c4:
1e:26:97:99:7c:e7:68:d4:e9:90:8a:70:2c:d4:02:d4:f3:da:
35:5a:82:ff:fe:1b:d4:4e:bb:ad:53:fa:ab:86:0a:4c:f3:37:
96:ee:23:8e:fb:e6:58:4a:b0:5c:9a:dd:ca:c4:95:3d:7a:85:
93:ae:05:d4:f5:bd:75:f7:4a:15:7a:90:35:c7:e4:2a:31:6c:
9a:64:05:43:ba:48:54:95:61:5d:33:cf:50:99:8d:e8:4f:08:
67:be:33:c3:86:e4:ed:0b:bc:a0:ba:ac:6f:f7:95:e3:f2:1c:
a2:99:06:c5
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICKXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU0NDYxMTAvBgNVBAUTKDdENjVFQkUxNEMzMDQ2RTczRTM5ODY5NTczMDJBMjZF
MDgxRjFBRjgwHhcNMjUwOTAyMTYwMzQ5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTI5Yi00YTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlBas0rhHZZxKE4WfL368XOA5lB2rmXzyshRlJZyPfTiMiWsG2/+AVWA5YKt8
Z8rDgrTDFLCZKk0BYFXhE65CH6CzZyR+j25khoF8LCx2+/Qc9SQoOgFCMqJHJg/a
re6ONkvA5Bqj83+WWc/3N42udspbexuDTul6NW58oFcRePO84rbHmHyRjHcNI3FF
nxXCpQB7dTMbC9gMt+Q2BHTAwOK9un6QWAFJf8d3SemMj85b0Oyo++7yqp3zjrU4
MdcsuZZ1WtURbcbq5IqKauApAE73+Yzc0W/g4H/JLTaixWVlz27kGHZ5IyjOfGPc
crTx+v25Wayb4Iks5nG7Cq7FJQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFGipWJQ7
SS12/vnrMgLWYxsfN+h4MB8GA1UdIwQYMBaAFH1l6+FMMEbnPjmGlXMCom4IHxr4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ0Ni9BQ0EyRTc1QzFG
QzUxMUU1QjQ1MERENjJDNEY5QUUwMi9mV1hyNFV3d1J1Yy1PWWFWY3dLaWJnZ2ZH
dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZXWHI0VXd3UnVjLU9ZYVZjd0tpYmdnZkd2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDU0NDYvQUNBMkU3NUMxRkM1MTFFNUI0NTBERDYyQzRGOUFFMDIvRTVBQTExQzI5
NzRBMTFFRkFFMTZFQzM4QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUAwQAdF00MAwDBAB0XT0DBAB0XT4wDQYJKoZIhvcNAQELBQADggEBAHI/
zHmnCb9WeC/Pxk7S+c0HNk13tT4ITo2wghoF5nGP53kCbHVXwwBQuV7RioRGfvcH
h+SyURs9n/bRe4LUw4YrHDSoNeX21RfsPrRlCdjcpQ8GMYEDpHTpd3U5UuVv8hjs
gHiyzseJff7KGU1u2Pjp1BBugP7UWATMKD8rYx/+BYDpZyMZ2YhFR0RTrjhhxB4m
l5l852jU6ZCKcCzUAtTz2jVagv/+G9ROu61T+quGCkzzN5buI4775lhKsFya3crE
lT16hZOuBdT1vXX3ShV6kDXH5CoxbJpkBUO6SFSVYV0zz1CZjehPCGe+M8OG5O0L
vKC6rG/3lePyHKKZBsU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:34 2026 by rpki-client