
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/EE23EF6E857B11ECA3F32D50C4F9AE02.roa
File: EE23EF6E857B11ECA3F32D50C4F9AE02.roa (raw, json)
Hash identifier: 2Drp2NUST+4Mxc9fvB99so6MZjFruiAkCYPMwsvvfnY=
Subject key identifier: 2C:A4:55:CE:38:82:69:D3:20:D2:98:17:56:FC:DF:64:DA:66:A6:A7
Certificate issuer: /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A
Certificate serial: 0475
Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/EE23EF6E857B11ECA3F32D50C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:22:33 +0000
ROA not before: Wed 07 Jan 2026 00:19:22 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 134802
IP address blocks: 103.13.184.0/23 maxlen: 23
103.13.184.0/24 maxlen: 24
103.13.185.0/24 maxlen: 24
203.17.12.0/24 maxlen: 24
2406:2dc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl
rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1141 (0x475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146F33, serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A
Validity
Not Before: Jan 7 00:19:22 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a44ba8-df55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e6:30:f2:e8:c5:4a:54:ad:c0:04:0d:a8:00:
d8:aa:d4:82:04:dc:4e:3d:60:08:ab:65:7d:3d:09:
54:f1:bc:95:ed:02:48:9a:92:2d:1d:a9:aa:3c:95:
f8:4b:31:3c:28:5a:71:24:04:1d:0b:d4:3f:56:49:
7c:3f:14:d5:b3:cb:c0:15:6d:7f:2d:6a:a8:b8:75:
db:03:08:4b:54:8f:d7:89:e3:18:af:c0:6a:09:20:
d9:8d:ef:6f:f9:eb:11:13:76:3e:6a:0d:b6:a0:29:
ee:5e:95:4e:16:bb:f5:34:93:fb:a1:3a:00:d6:4f:
0a:7a:47:58:fb:89:78:d7:9d:0f:26:c2:7e:e5:ab:
58:aa:30:1d:20:87:f5:ea:31:f5:c4:7d:21:57:32:
4c:45:a5:e5:86:d3:27:91:e9:48:0c:0e:32:7d:cf:
9e:1d:db:33:42:8c:e8:6c:4a:ca:2a:a5:12:63:84:
0a:33:67:59:52:06:da:bd:24:13:d5:ed:83:53:6c:
d4:67:2d:05:de:fe:f2:4a:51:18:a2:da:f9:f6:72:
90:09:23:ea:e4:da:72:3f:d1:f4:1c:d0:14:cb:bc:
98:b8:72:3f:09:58:fd:a7:56:10:64:af:17:92:13:
b4:44:ef:23:2e:08:87:28:31:c0:4a:57:95:7a:6c:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A4:55:CE:38:82:69:D3:20:D2:98:17:56:FC:DF:64:DA:66:A6:A7
X509v3 Authority Key Identifier:
keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/EE23EF6E857B11ECA3F32D50C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.13.184.0/23
203.17.12.0/24
IPv6:
2406:2dc0::/32
Signature Algorithm: sha256WithRSAEncryption
92:c4:e0:ad:34:06:c1:8f:1a:36:5a:59:86:1e:33:c3:38:46:
cc:78:90:04:57:c7:ed:b9:3d:ec:13:35:89:82:63:e0:01:70:
a0:dd:92:74:43:f3:5c:58:90:31:e2:71:32:0f:a5:ae:31:df:
6e:20:c8:5f:0a:38:e8:03:d6:74:23:c2:f1:61:35:4a:2d:0d:
26:5a:3b:02:81:0e:3d:18:99:c4:cf:bb:9f:61:f8:83:bc:62:
9c:82:36:a9:ef:5a:be:35:89:26:e4:44:81:27:26:2f:5b:b1:
fe:c5:d4:2d:ef:88:1b:63:8c:7f:0b:4f:97:16:76:5d:88:dd:
60:33:fd:42:6d:99:53:8a:fb:4c:ec:2f:0f:61:67:a9:ea:cb:
11:f3:dc:41:fa:09:dd:06:28:cf:bf:be:e1:89:ec:7f:52:d4:
56:0d:ad:0c:b8:b8:2c:bb:be:9c:c2:50:46:00:44:75:2e:e9:
b6:f8:ce:cb:60:f4:28:97:c9:60:1b:ef:48:ef:34:b5:ab:c8:
00:f2:ab:5b:7c:1b:e2:98:37:55:fa:54:2b:8b:92:e5:99:29:
17:ae:11:d1:b1:49:f8:c3:70:4d:cb:e3:f2:2e:c3:c0:80:21:
8f:a7:c3:2e:91:d4:d9:76:c0:e8:52:c3:12:62:dc:b8:85:e1:
e6:ae:19:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:19 2026 by rpki-client