
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/332F710683A611F0948BAE55C4F9AE02.roa
File: 332F710683A611F0948BAE55C4F9AE02.roa (raw, json)
Hash identifier: ldK/BDkDgRxHi4MDnsZ2LkY06VoydeIKChkdwvaMUes=
Subject key identifier: 21:BF:9B:4F:71:84:E7:27:59:0F:5F:6B:C4:3C:0D:60:8B:6B:93:21
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3C33
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/332F710683A611F0948BAE55C4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:26:48 +0000
ROA not before: Mon 29 Dec 2025 00:21:30 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 202736
IP address blocks: 61.251.182.0/24 maxlen: 24
101.53.73.0/24 maxlen: 24
175.176.130.0/24 maxlen: 24
203.173.98.0/24 maxlen: 24
203.173.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15411 (0x3c33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Dec 29 00:21:30 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4af18-9bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3b:7d:2c:a3:7a:a0:0d:78:93:0e:04:33:d7:
35:32:92:5c:02:d3:d4:0e:0c:41:ac:00:67:ff:66:
94:6e:43:c2:00:7e:fb:a2:a0:56:ac:68:e0:9f:47:
f7:b4:aa:a8:24:11:5c:36:cc:e4:e8:7e:07:74:c9:
03:f9:46:e5:f7:49:4c:02:0f:07:30:95:63:c1:15:
02:16:44:ff:79:e6:2a:73:80:03:b2:a5:d7:7f:47:
69:35:83:95:cb:2f:b0:50:8f:46:95:8e:03:01:c2:
5e:1c:f2:b8:32:0d:93:a1:2c:41:48:4d:07:a9:f6:
4d:31:4e:b8:a7:d8:44:25:97:d4:23:bc:40:64:fd:
aa:67:a5:ef:17:6c:b9:c2:2b:94:79:31:ac:90:1c:
29:44:c4:78:bc:20:8b:74:ac:37:57:38:61:fd:4d:
d4:55:82:3a:79:76:7a:97:0c:66:0f:02:ff:d5:a4:
41:46:92:92:b5:93:4a:76:e3:a4:58:dc:d3:96:b2:
71:4d:70:9f:0a:4e:3f:51:bc:0a:9a:d3:fd:df:5d:
2f:b4:93:02:b9:dd:3f:5e:aa:96:39:29:6a:f5:de:
e6:25:54:f3:1d:db:42:24:b2:8d:05:6e:52:9d:9d:
fe:1f:4c:3c:09:16:8f:37:67:ba:0f:a2:65:15:61:
eb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BF:9B:4F:71:84:E7:27:59:0F:5F:6B:C4:3C:0D:60:8B:6B:93:21
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/332F710683A611F0948BAE55C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.251.182.0/24
101.53.73.0/24
175.176.130.0/24
203.173.98.0/24
203.173.115.0/24
Signature Algorithm: sha256WithRSAEncryption
07:02:a8:4a:ce:6b:85:da:2d:14:39:57:f9:6d:36:31:fd:45:
3f:67:bc:98:38:43:39:3d:11:f6:a6:f4:f6:db:74:e2:fd:d5:
0b:38:8e:e1:a4:1e:f7:de:6e:02:ec:7d:c2:7e:fd:e6:0b:c8:
f1:a3:04:99:06:1a:65:46:6c:9f:27:e2:3d:32:24:52:d7:5c:
ea:8c:52:fc:02:31:b2:b8:b9:6a:59:3f:80:af:3d:d5:9e:62:
5e:1c:81:29:37:db:11:57:a2:4d:a6:8a:11:9c:ca:43:b2:f2:
f9:bc:0a:6c:70:e4:b3:e7:43:3d:cf:be:d7:a7:4a:d7:9d:f8:
d3:79:1c:77:11:2f:6f:6b:7b:83:80:64:82:18:d6:b2:f3:f6:
ba:64:bf:52:4f:96:f7:9c:9c:c8:97:08:d9:db:36:dd:42:a7:
de:1d:1a:dc:e0:c9:b5:49:2a:ab:34:64:9a:94:26:5d:bd:ce:
a9:cf:60:ef:71:d7:ab:bf:b6:62:df:d8:2f:7c:5f:6c:ac:9b:
92:1e:02:28:09:33:0d:40:26:b8:ad:35:80:37:35:7d:66:dd:
a7:b4:22:ec:61:98:be:5a:d4:3f:37:14:2b:76:05:7a:f1:3b:
82:45:0f:b4:52:f8:1e:00:64:9f:2e:7a:12:57:ea:7e:98:3f:
4b:89:94:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:22 2026 by rpki-client