
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/E3565366082A11F19BFE93E8353D8C67.roa
File: E3565366082A11F19BFE93E8353D8C67.roa (raw, json)
Hash identifier: /aCKUkFizA70YgvpSSlO/F5nZ+3741gcJyJ2Mit8OBQ=
Subject key identifier: F4:DD:47:3F:F2:E6:A9:14:C6:C8:A8:B6:EF:BC:E9:9E:31:E3:18:A3
Certificate issuer: /CN=A9145CB7/serialNumber=AD755002B3FF0E7627C4A9DA877A505752E016F6
Certificate serial: 0C
Authority key identifier: AD:75:50:02:B3:FF:0E:76:27:C4:A9:DA:87:7A:50:57:52:E0:16:F6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/E3565366082A11F19BFE93E8353D8C67.roa
Signing time: Sun 01 Mar 2026 05:34:53 +0000
ROA not before: Thu 12 Feb 2026 15:52:53 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 131789
IP address blocks: 138.252.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.crl
rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:38:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145CB7, serialNumber=AD755002B3FF0E7627C4A9DA877A505752E016F6
Validity
Not Before: Feb 12 15:52:53 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a3cffd-a5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:02:d5:a9:05:5d:c3:38:f9:e1:dd:6f:35:
ee:29:8a:e2:4d:72:a7:3e:fc:26:00:93:0c:92:47:
35:f2:96:0e:21:da:4d:e9:63:c9:90:4c:c8:37:0c:
a6:34:70:70:f0:36:d7:63:ce:81:13:5f:83:9b:48:
07:b0:72:43:4c:bb:26:25:6f:78:d2:6f:ab:ee:20:
28:b9:95:8c:f9:ce:10:37:c2:e5:e1:29:12:36:d9:
70:31:94:9c:41:d8:69:50:94:6f:f0:9d:65:66:9f:
3a:65:ca:48:61:4a:72:14:4d:d0:b3:64:61:03:4d:
ca:69:df:90:04:a6:ad:39:19:de:95:51:bb:7e:9f:
21:69:a8:e6:27:6e:36:c2:0a:fb:7f:84:21:41:f4:
1c:00:86:a7:87:14:55:0c:15:57:bf:3f:13:9d:76:
13:66:3d:b2:fd:30:8c:55:dc:10:c7:ad:ca:41:28:
13:56:b4:56:8e:9c:e3:31:56:9f:d3:01:25:5c:44:
4a:9c:15:74:54:0a:06:b6:11:97:4c:1b:b5:ef:90:
a4:c0:1a:d2:b2:db:e3:5e:50:4b:1f:9d:7c:d0:de:
5e:2c:de:af:7d:83:d7:c9:7a:89:09:72:f5:13:e7:
07:32:f0:45:21:ae:c1:a7:22:85:40:8b:b0:d4:ca:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DD:47:3F:F2:E6:A9:14:C6:C8:A8:B6:EF:BC:E9:9E:31:E3:18:A3
X509v3 Authority Key Identifier:
keyid:AD:75:50:02:B3:FF:0E:76:27:C4:A9:DA:87:7A:50:57:52:E0:16:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/E3565366082A11F19BFE93E8353D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.146.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a2:22:d6:b6:53:9e:cc:00:3d:70:cd:f1:55:cf:6e:94:76:
0a:73:09:9f:34:f6:1c:b3:34:0e:f4:d5:b1:86:7d:dd:75:8b:
c4:3e:21:e2:ee:a8:db:89:06:d0:58:26:f8:fa:b1:c4:79:a6:
2e:59:20:bc:27:2a:08:71:dd:db:0c:aa:86:30:8c:96:73:55:
38:ec:af:ac:8d:52:d5:ec:85:af:e5:ad:12:8a:b4:49:a4:a5:
e1:45:48:54:69:88:5b:1d:01:55:07:64:f5:78:6a:92:14:61:
9c:c2:b8:47:76:10:90:05:aa:9f:30:9e:6f:f6:2a:74:eb:1c:
67:24:06:5d:82:91:09:7c:67:74:2c:78:c9:9d:02:93:36:c2:
ed:e0:92:63:01:3f:f6:fc:74:4f:91:70:fc:e8:5f:95:7c:67:
db:e8:e8:d0:8d:54:3a:90:52:42:3c:8b:cd:98:72:97:98:1c:
3d:03:c7:33:c2:88:6f:08:5d:ba:47:33:8d:b0:9a:dc:47:52:
69:aa:bb:72:6d:27:55:40:21:55:b1:f4:ce:c4:9b:25:72:0c:
d3:00:26:ff:13:41:9f:c3:ae:78:64:f0:c7:d6:1a:75:b3:f1:
5f:8d:2c:42:10:8f:a7:0a:08:6d:10:1f:ba:5f:b1:95:63:76:
ae:72:e7:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:52:48 2026 by rpki-client