
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/7CCA423AFA4F11F096EBA00D446F56BC.roa
File: 7CCA423AFA4F11F096EBA00D446F56BC.roa (raw, json)
Hash identifier: 1z9D0a4F9GwVHahq1u+ZFbYfto99Z/m9lTo9Huch74g=
Subject key identifier: F1:6B:28:60:26:44:34:3F:52:B3:8A:10:BA:5F:90:EB:8A:33:AC:05
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3C37
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/7CCA423AFA4F11F096EBA00D446F56BC.roa
Signing time: Sun 01 Mar 2026 21:26:52 +0000
ROA not before: Mon 26 Jan 2026 00:39:35 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 136173
IP address blocks: 112.196.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15415 (0x3c37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Jan 26 00:39:35 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4af1c-5287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:db:43:f0:e7:4b:95:60:bf:af:e3:95:da:ba:
b8:8f:8c:2b:ea:62:69:88:38:7b:4e:94:1b:03:47:
0a:ae:6f:8a:52:19:ef:75:f4:1f:d4:e4:17:df:46:
ab:56:59:f3:9d:3c:69:a1:b6:a8:ef:40:66:fb:f9:
5b:3d:58:9e:57:70:19:53:23:51:8b:b2:3f:1c:80:
fa:bc:0e:d9:4c:ed:89:f8:36:76:0a:e0:0b:ec:6b:
39:90:16:a6:6d:54:2d:db:bc:e2:cc:7b:02:99:97:
bb:13:9b:5b:2c:3c:02:20:67:84:57:89:9b:7f:64:
2e:ed:51:4c:c5:0a:23:a1:59:8a:17:40:5e:a5:5b:
2c:33:f4:1d:87:23:51:f0:df:04:0e:ce:1f:b7:3a:
6e:73:c4:ff:38:0e:18:07:33:c2:97:56:65:3c:e6:
4d:72:41:b2:d9:7d:7d:02:98:94:55:39:78:d5:73:
4a:72:3c:e2:c5:e9:f2:c9:54:95:5b:11:f7:35:2d:
3c:61:18:5a:71:65:2e:16:5f:ec:f6:d8:92:e5:2d:
72:bf:30:ea:8a:02:cf:41:1b:0e:15:bd:00:0d:52:
91:8e:ed:7d:ed:9f:65:a3:97:7a:a2:0e:7c:39:4d:
12:9f:a7:b9:d2:1b:21:64:64:cd:6a:a3:78:5a:8a:
d2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6B:28:60:26:44:34:3F:52:B3:8A:10:BA:5F:90:EB:8A:33:AC:05
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/7CCA423AFA4F11F096EBA00D446F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
112.196.220.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:00:d5:11:35:52:21:53:b0:dc:dd:3b:85:e8:4a:6a:82:3a:
ab:5d:f9:87:db:e2:ad:13:b4:bd:6a:94:34:95:e5:af:e2:4b:
8f:0d:a1:40:95:66:fe:af:95:f6:d9:ba:b7:f4:05:22:ef:24:
19:2f:61:e5:b5:8d:bd:b1:1d:67:1c:3f:be:82:3f:76:5d:96:
69:65:58:44:c2:5a:61:2a:ce:25:4a:81:97:e1:6d:c2:18:4a:
d5:70:40:64:9a:59:d1:25:d9:cc:52:fb:1f:8f:66:95:cd:73:
61:97:ba:c6:9a:6c:38:c7:a9:0b:06:06:e0:3a:75:db:b4:23:
16:cd:54:4a:99:d8:11:b9:23:57:e5:15:5a:10:43:68:d2:a3:
b5:c7:4f:1d:b5:bb:cf:8f:21:9c:db:d0:23:2a:af:8a:79:48:
cd:47:47:12:f3:d3:b4:b4:50:81:a7:7b:b1:9e:48:ed:45:e8:
32:c2:a4:3e:44:82:6e:77:a7:06:e0:ea:1a:cf:e5:0d:b9:b5:
56:de:5c:c8:81:55:36:ce:55:d1:d3:d3:09:1b:6d:11:bb:64:
d0:59:e2:a3:d3:84:be:2e:80:4c:fe:23:65:d0:16:50:d3:41:
58:e8:6d:b0:d2:1a:d1:35:87:f4:2a:8e:8f:11:34:d1:ff:6d:
bf:3a:9c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:20:12 2026 by rpki-client