
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa
File: 3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa (raw, json)
Hash identifier: nrpfObAZcKTDKZdIw9w9nwvbk81SosdSjQRcLr8+6Q8=
Subject key identifier: D8:DD:4C:B3:22:52:65:4B:31:1D:09:D7:D5:21:DE:0B:DB:DB:FA:F0
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3C11
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:26:20 +0000
ROA not before: Fri 04 Jul 2025 14:50:26 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 133448
IP address blocks: 101.55.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15377 (0x3c11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Jul 4 14:50:26 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4aefc-3566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:f9:99:0d:51:31:a6:29:69:90:19:77:c4:
6a:eb:22:97:b2:dc:94:39:be:98:06:60:93:f3:1c:
26:40:a1:70:ac:07:b0:56:af:f6:3a:0d:15:16:4b:
b3:2f:3b:90:98:bb:2a:4c:01:e7:1f:ba:b2:10:c3:
b0:66:e0:dd:d0:53:d6:68:73:4c:93:50:34:19:3c:
51:98:6a:62:08:5a:bf:64:e2:09:67:21:60:b6:23:
c5:7c:f0:a9:9f:52:96:c0:f5:aa:62:3a:95:c2:e8:
65:de:03:cb:f9:8c:74:0d:fe:26:a9:3e:3e:4b:89:
44:25:89:22:02:e9:28:9c:26:3b:2a:71:43:6f:0f:
45:e7:da:3d:30:e1:56:e4:fd:8d:3a:5b:b6:62:a3:
70:ca:32:83:5d:d5:d7:49:86:41:53:35:e0:4e:b3:
2b:c1:c2:99:55:f4:76:ff:11:ce:3f:15:c7:50:c6:
e6:fc:ae:70:fa:dc:31:8d:06:24:37:f5:aa:f2:66:
6f:fe:28:ec:09:16:fb:a4:8e:02:33:e5:2e:33:41:
77:eb:f1:6f:68:9d:3f:7c:bd:2e:b8:57:f6:e3:d0:
ad:f4:e9:d7:4c:fc:36:c2:97:f9:09:74:fe:b2:8b:
9b:45:38:4d:3a:8e:c4:f0:7e:b2:f1:28:a0:1a:3e:
95:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DD:4C:B3:22:52:65:4B:31:1D:09:D7:D5:21:DE:0B:DB:DB:FA:F0
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
101.55.59.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:70:38:70:ca:22:45:36:5b:34:11:95:e7:7c:75:82:55:66:
c4:42:49:55:c2:0d:52:53:32:97:1f:2a:29:16:7c:2a:2e:b3:
ac:f0:59:be:18:5c:01:34:3b:03:87:ad:bf:26:ee:6b:ec:d1:
6e:4d:2e:be:da:2b:72:8e:bb:06:3e:44:69:4a:4c:78:05:fa:
32:39:ea:48:56:c4:45:17:ed:58:88:b7:87:4b:7f:80:16:7c:
00:14:38:13:4b:dd:72:c3:0e:2d:5b:e4:32:a6:1a:77:25:f5:
8e:17:a4:7d:a2:7e:c8:58:ca:4f:73:e9:5a:e5:c8:64:29:e5:
8f:c7:f5:6c:fb:0a:4a:1d:f6:28:37:d5:e4:1d:40:96:78:91:
67:6e:62:7e:a5:56:ce:01:96:04:67:dc:cb:02:a9:8f:3b:24:
4a:41:e3:aa:7d:7a:f4:83:e0:7f:58:ef:77:6e:c3:7b:3a:f4:
de:00:c9:14:55:38:83:77:58:08:30:68:82:75:20:eb:06:1f:
17:7e:dd:21:55:d8:60:9d:25:0a:04:24:1b:1b:03:ba:6d:04:
55:e8:ce:53:9b:ff:e4:53:0b:d0:8b:08:06:a9:ff:ed:7d:6a:
68:ce:05:7f:b1:e6:ce:91:5b:50:76:72:ac:8b:ce:db:57:01:
16:e3:16:95
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICPBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjUwNzA0MTQ1MDI2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YWVmYy0zNTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArHL5mQ1RMaYpaZAZd8Rq6yKXstyUOb6YBmCT8xwmQKFwrAewVq/2Og0VFkuz
LzuQmLsqTAHnH7qyEMOwZuDd0FPWaHNMk1A0GTxRmGpiCFq/ZOIJZyFgtiPFfPCp
n1KWwPWqYjqVwuhl3gPL+Yx0Df4mqT4+S4lEJYkiAukonCY7KnFDbw9F59o9MOFW
5P2NOlu2YqNwyjKDXdXXSYZBUzXgTrMrwcKZVfR2/xHOPxXHUMbm/K5w+twxjQYk
N/Wq8mZv/ijsCRb7pI4CM+UuM0F36/FvaJ0/fL0uuFf249Ct9OnXTPw2wpf5CXT+
soubRThNOo7E8H6y8SigGj6V3wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNjdTLMi
UmVLMR0J19Uh3gvb2/rwMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvM0RBQUU3M0Ex
QTJEMTFFRUJDMjBDMTFGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZTc7MA0GCSqGSIb3DQEBCwUAA4IBAQCfcDhwyiJFNls0EZXnfHWC
VWbEQklVwg1SUzKXHyopFnwqLrOs8Fm+GFwBNDsDh62/Ju5r7NFuTS6+2ityjrsG
PkRpSkx4BfoyOepIVsRFF+1YiLeHS3+AFnwAFDgTS91yww4tW+Qyphp3JfWOF6R9
on7IWMpPc+la5chkKeWPx/Vs+wpKHfYoN9XkHUCWeJFnbmJ+pVbOAZYEZ9zLAqmP
OyRKQeOqfXr0g+B/WO93bsN7OvTeAMkUVTiDd1gIMGiCdSDrBh8Xft0hVdhgnSUK
BCQbGwO6bQRV6M5Tm//kUwvQiwgGqf/tfWpozgV/sebOkVtQdnKsi87bVwEW4xaV
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:36 2026 by rpki-client