
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/EB6E0EE8677811F08B1EA154C4F9AE02.roa
File: EB6E0EE8677811F08B1EA154C4F9AE02.roa (raw, json)
Hash identifier: MMOwPnwsVwQiBGtfRhC6fRE74wLsOmC1//fo0Gh9Pfw=
Subject key identifier: 0C:26:4B:6E:CC:7B:75:AA:7E:D3:B8:45:37:43:09:8C:63:94:62:3E
Certificate issuer: /CN=A9147150/serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
Certificate serial: 73
Authority key identifier: C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/EB6E0EE8677811F08B1EA154C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:12:23 +0000
ROA not before: Wed 23 Jul 2025 03:55:49 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 152565
IP address blocks: 165.101.250.0/23 maxlen: 23
165.101.250.0/24 maxlen: 24
165.101.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl
rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147150, serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
Validity
Not Before: Jul 23 03:55:49 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a3e6d7-7a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:46:9c:8d:5d:2e:5d:f2:67:64:ea:3e:6d:
3a:8f:f1:52:24:e3:23:6e:50:b5:98:2d:0d:97:95:
68:6b:c0:50:16:cd:83:f5:5b:82:2b:a0:5c:4b:da:
12:4b:9f:ea:b1:cf:e0:8c:3e:f9:cc:a8:57:f9:e3:
02:54:e7:e3:bc:f9:12:39:1c:ba:96:8b:3b:b1:97:
03:66:30:e4:50:f0:ea:85:6e:9d:ed:d4:70:2b:d2:
58:e5:67:5d:81:24:f1:66:80:6e:39:ed:63:f4:a9:
2f:c4:9a:00:99:76:bd:43:73:f2:61:f2:9a:59:0c:
7e:b3:ee:30:cf:7d:28:4e:6f:4f:81:f1:e3:65:83:
5a:24:18:ac:49:1e:cc:ba:ac:0f:3b:94:39:79:a4:
69:21:84:41:ac:4f:ac:dc:3d:7d:96:c4:84:25:00:
d9:33:c5:28:8f:16:cd:5a:4c:ef:03:6c:82:96:f9:
28:60:b6:63:a2:e6:6c:f6:b1:3c:23:f3:40:bf:b7:
60:b0:1c:8b:16:74:8f:6c:e6:c8:d5:a8:b7:cd:0d:
f4:f3:af:d6:70:76:cf:35:39:1d:ee:29:8d:a3:e5:
75:bc:e8:e3:b0:82:ed:a1:05:20:2a:3a:de:c8:96:
b6:f4:44:32:28:79:6f:25:ae:2b:c2:94:19:29:17:
ed:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:26:4B:6E:CC:7B:75:AA:7E:D3:B8:45:37:43:09:8C:63:94:62:3E
X509v3 Authority Key Identifier:
keyid:C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/EB6E0EE8677811F08B1EA154C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.250.0/23
Signature Algorithm: sha256WithRSAEncryption
56:36:a4:47:ec:2d:67:37:a0:cc:5d:10:a5:79:14:a1:e0:8c:
77:d0:36:4b:04:90:35:45:03:76:26:0e:20:3d:92:87:a6:56:
81:47:ae:0b:91:dc:a3:ff:62:54:92:a3:1a:b7:2a:5b:02:99:
de:ac:09:15:fb:a1:9b:1d:ba:09:7e:30:81:83:dc:84:3e:ca:
e3:62:31:51:77:eb:34:9c:f5:81:ee:12:01:fb:32:1e:64:d5:
39:43:ec:fc:bf:05:a5:d3:d4:e3:99:fe:1b:29:21:b7:f8:f0:
33:d3:e7:e1:d9:46:f2:fd:83:a9:a0:41:cb:c4:c2:04:ec:a0:
60:db:27:bf:9e:a3:a8:e8:f9:e9:7a:7a:ed:95:65:19:64:ae:
72:f0:ba:f8:23:cb:10:54:af:f4:21:b2:12:b0:13:fd:76:5a:
ff:b2:f3:aa:0a:b8:8a:8b:5b:f6:ff:9d:51:06:3d:9c:cd:b5:
f0:3e:a5:48:f8:58:16:eb:a9:ee:e5:18:0a:76:34:b1:1c:7f:
bd:a4:c4:1c:ee:15:4f:96:69:ea:a5:30:7e:e7:f6:47:ae:fb:
57:50:39:ee:35:37:57:fe:26:fd:0e:4a:9d:d9:2b:72:bf:0a:
78:ea:07:ec:01:92:0a:aa:fd:9d:40:ff:d1:9e:ed:88:84:7a:
51:40:82:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:38 2026 by rpki-client