
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/9D379516E54D11F092458985756F56BC.roa
File: 9D379516E54D11F092458985756F56BC.roa (raw, json)
Hash identifier: Hhwlbhyj8xIcBqU3mSebItjPxuaiWJe6Fv2dlfosEMw=
Subject key identifier: 9D:A3:44:BA:0F:2D:4D:47:2E:4F:69:1E:5D:FD:43:92:3E:78:99:90
Certificate issuer: /CN=A914D3B0/serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD
Certificate serial: 25
Authority key identifier: BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/9D379516E54D11F092458985756F56BC.roa
Signing time: Sun 01 Mar 2026 05:49:25 +0000
ROA not before: Tue 30 Dec 2025 07:03:16 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 154348
IP address blocks: 138.252.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.crl
rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D3B0, serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD
Validity
Not Before: Dec 30 07:03:16 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a3d364-e5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:2b:1f:ea:22:39:3c:54:86:ba:ca:92:16:
24:a8:91:d2:0e:6f:7b:60:64:e0:f2:42:d7:82:89:
88:77:72:ea:0a:7f:30:13:4f:28:0f:bb:af:5a:71:
51:62:78:c4:a5:a1:95:f8:40:92:e5:58:52:56:b6:
c1:88:f7:71:c7:38:66:3c:44:82:48:e3:3f:bb:bc:
4b:a3:71:0e:17:5f:c9:74:3b:27:d9:c2:1d:57:b1:
49:1a:fc:20:ac:e1:17:d2:e3:00:1c:1d:68:0b:f0:
98:c6:5b:9d:77:b3:bb:fa:a4:e2:03:39:bb:01:f5:
ec:33:57:43:65:a2:3a:a9:ce:26:28:1d:1a:d7:15:
38:48:22:6f:df:f5:1b:d7:82:61:07:c1:61:37:12:
73:7b:b9:e3:6e:c6:0e:48:5b:3b:03:5d:08:68:ff:
b5:fd:de:11:f5:cd:81:55:ef:ab:58:59:a8:1a:97:
f9:33:2c:68:5b:05:60:45:12:04:4c:82:4c:a3:61:
cf:26:34:e5:c2:89:10:81:5d:6d:9e:c7:6f:aa:e6:
02:0a:d3:b1:5d:c1:59:66:05:10:b0:54:14:0d:2d:
94:dd:6b:b5:9c:e9:e8:e3:cb:b5:4c:52:90:bb:5d:
20:33:a6:72:e0:84:e4:9b:b3:fd:b6:f0:75:50:7d:
9b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A3:44:BA:0F:2D:4D:47:2E:4F:69:1E:5D:FD:43:92:3E:78:99:90
X509v3 Authority Key Identifier:
keyid:BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/9D379516E54D11F092458985756F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.174.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:d9:e3:50:4c:3b:60:3d:38:62:f8:4d:27:da:a6:8c:be:d6:
60:5a:36:17:40:86:c9:95:24:7a:6f:70:41:1c:29:e2:45:df:
16:01:94:80:e4:3a:80:7b:41:15:a4:b3:7b:57:a4:83:3a:da:
11:1e:d0:d8:d5:10:79:9c:5a:0b:05:24:11:80:58:55:19:3b:
72:59:0a:69:fe:b0:88:e3:5d:92:38:d7:b8:d1:fc:8f:38:18:
8a:e5:a6:53:2b:1b:b1:9a:23:d4:6c:23:26:42:f1:50:d1:0b:
42:1e:77:ef:c4:4f:30:26:50:ea:9b:dd:af:fb:e2:bb:7d:f8:
1b:15:42:fc:58:3b:28:a3:31:3a:1a:af:a0:da:38:ee:14:87:
eb:a6:7e:fa:4c:5d:7d:df:60:9a:d9:27:79:f8:6c:b4:b2:7c:
4f:22:47:0a:32:a1:0d:0e:44:3d:94:a3:34:12:c2:a0:d7:c2:
bb:f2:d1:ff:c9:66:25:e4:04:76:55:bd:88:72:9b:bf:5d:81:
a2:e5:80:9b:69:9e:3a:f3:67:74:b7:c1:3a:cb:83:a6:2d:3c:
89:8a:94:49:be:19:de:4a:c7:a7:76:dc:f3:33:c5:c7:89:c0:
c6:e4:73:6c:6f:24:29:b7:b8:df:90:ec:ab:cd:26:03:a9:e5:
78:bb:7b:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:27:42 2026 by rpki-client