
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/7A1D009C0EB611ECB5408277C4F9AE02.roa
File: 7A1D009C0EB611ECB5408277C4F9AE02.roa (raw, json)
Hash identifier: O5gqS4NNOI05UQqMR9lNiHVk+hGRQCkED61BdghCLKA=
Subject key identifier: 21:E4:17:32:87:59:03:B7:59:8A:3F:AF:25:FF:76:18:02:5D:25:3D
Certificate issuer: /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Certificate serial: 1B35
Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/7A1D009C0EB611ECB5408277C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:13:21 +0000
ROA not before: Sat 24 May 2025 15:43:38 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 9541
IP address blocks: 72.255.0.0/18 maxlen: 24
139.135.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl
rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6965 (0x1b35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150F66, serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Validity
Not Before: May 24 15:43:38 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a42d61-f8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:a4:2a:d8:ad:5a:66:80:54:8d:47:13:c0:
75:16:3c:c5:ce:e6:5c:f0:55:77:9c:f9:9d:af:e4:
cb:17:46:43:48:52:d6:58:77:14:24:3d:32:93:09:
e0:2a:8b:d1:36:42:71:56:06:37:79:70:cf:d6:c6:
f1:75:e6:53:00:60:68:29:bc:94:8f:94:98:bc:80:
f0:0e:63:73:d8:d4:3e:9f:24:93:23:81:12:a2:de:
0a:17:36:12:a2:47:b7:c5:16:b3:72:08:ae:07:ed:
42:62:e8:50:1b:a4:71:7e:38:be:ed:b5:0f:71:94:
01:df:ae:b6:ae:07:c8:5a:fa:bd:42:cd:1d:fb:d1:
d2:b2:0a:45:38:57:04:14:e6:a1:f5:39:2c:b6:0b:
39:a8:cd:c9:4e:e5:b8:90:44:f9:ac:01:1f:be:8c:
dd:af:49:9c:f1:fe:b0:fa:19:1c:c0:f7:3c:c9:78:
01:86:41:4a:a6:60:79:59:a8:16:6b:e1:d0:b7:a2:
1f:f2:b8:22:39:f2:da:1a:5f:56:c5:56:ab:78:41:
f2:3a:41:1c:29:d9:d6:f5:5b:48:5d:1d:81:a6:f4:
2d:55:8a:01:37:6c:7b:1d:da:aa:70:a4:09:84:4a:
90:ca:a1:8a:85:8c:26:a2:4b:a8:b6:81:59:94:d9:
49:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E4:17:32:87:59:03:B7:59:8A:3F:AF:25:FF:76:18:02:5D:25:3D
X509v3 Authority Key Identifier:
keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/7A1D009C0EB611ECB5408277C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
72.255.0.0/18
139.135.32.0/19
Signature Algorithm: sha256WithRSAEncryption
71:99:d2:0b:60:a9:b2:0e:8f:9c:da:db:32:6b:a1:b0:75:4d:
90:b4:d0:26:5c:9c:45:dd:63:3f:94:30:ef:49:79:ce:6b:eb:
c5:36:a7:67:2f:96:df:01:f4:71:c9:c9:26:c3:d0:ad:73:3c:
8f:f9:f2:93:33:93:22:b4:b9:1e:9c:bc:3a:06:45:82:e5:97:
4d:ae:85:f7:7d:9f:8f:5e:7f:08:b1:f5:94:a7:83:56:20:e6:
23:db:b0:fd:a8:66:36:76:eb:47:9a:3b:5c:1f:b9:3c:25:63:
e2:e5:07:e2:bb:3b:75:c1:a9:d9:a1:29:a9:5d:41:04:68:c2:
3e:de:69:3e:34:c8:a1:31:88:51:b7:cf:8b:9f:84:18:cb:95:
7a:dd:de:2b:31:37:ae:83:16:45:3d:e6:f5:f3:de:61:77:7d:
b0:ac:c3:8f:7e:27:77:40:f0:4d:1d:e3:8e:1b:15:fb:57:dd:
10:91:fe:00:05:fb:aa:c7:f7:d2:cf:db:13:7a:3d:ec:7f:ac:
86:7e:83:bb:23:d4:82:12:61:ca:19:c6:60:b6:dc:73:92:c5:
33:4f:dd:69:c8:af:ac:c6:8a:b8:f7:dc:f7:57:39:4d:3a:ef:
06:a1:a9:36:f4:31:14:e8:87:ef:83:a7:31:60:e0:12:34:25:
0e:7f:c1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:53 2026 by rpki-client