
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/38F9C792948F11EEAE636E0FC4F9AE02.roa
File: 38F9C792948F11EEAE636E0FC4F9AE02.roa (raw, json)
Hash identifier: R+cgAiGLFnxqgUaeTBzigI0telk5/iO6S+thcp6pkZI=
Subject key identifier: 11:FB:13:69:C2:24:9A:91:67:FF:17:36:6D:3D:6E:2B:22:79:30:C9
Certificate issuer: /CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25
Certificate serial: 01A9
Authority key identifier: 90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/38F9C792948F11EEAE636E0FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:40:29 +0000
ROA not before: Sat 31 May 2025 04:34:14 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 45207
IP address blocks: 203.189.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl
rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157378, serialNumber=90B9BABD742B275743FB715E135975638E9C2F25
Validity
Not Before: May 31 04:34:14 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3df5d-3d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:d3:c4:4d:45:bf:dc:04:5a:6c:00:89:99:
e7:e3:d9:c8:4a:7b:dd:df:34:3f:68:79:3e:d5:3b:
5e:f9:7a:ab:c0:c0:9e:0c:b3:4a:50:63:90:05:24:
c3:9c:2a:46:0a:0a:b4:1c:fb:41:2c:e2:85:57:75:
37:1f:94:4f:5e:bc:bd:e7:0b:4c:42:02:0e:c5:62:
47:7b:04:31:0b:16:05:6b:61:6f:7f:74:fe:9e:fe:
76:d3:7e:a0:02:c2:3e:51:46:17:fe:3c:c3:7c:cb:
38:7c:9c:c0:cf:1f:fb:f5:6b:f4:35:4a:64:6c:3d:
10:66:76:99:e0:ee:45:65:77:0e:07:4d:9c:0a:64:
fd:3d:74:1f:48:c2:9f:53:dd:51:9d:71:8e:d7:47:
eb:1b:62:6a:bc:04:41:f5:0e:92:69:4c:90:66:5e:
d9:6d:51:cc:37:bb:2d:5e:a9:8e:c2:7e:0b:84:91:
f0:26:d9:34:9e:6d:f2:43:3b:5f:3a:6c:48:8e:1d:
c6:fb:3b:75:30:7a:6c:12:4b:7a:5d:cf:ea:66:ab:
3f:a7:86:50:1f:0c:2a:2f:0a:0a:a9:b4:76:50:75:
f6:da:39:84:00:c3:c7:c7:ce:07:3b:75:ac:9a:a3:
1f:5a:34:1f:f8:ac:d8:e2:95:3b:cc:a6:33:62:d3:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FB:13:69:C2:24:9A:91:67:FF:17:36:6D:3D:6E:2B:22:79:30:C9
X509v3 Authority Key Identifier:
keyid:90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/38F9C792948F11EEAE636E0FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.189.93.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:71:8e:1e:78:29:ee:03:a8:bf:df:ed:b5:3f:52:f1:02:b1:
b7:4a:b7:1a:aa:dc:76:fd:5a:94:e1:70:08:29:ee:d3:0b:a0:
a6:b5:76:bd:16:ac:7a:04:ca:41:8e:0a:be:05:ae:c3:54:3a:
3b:9a:61:f8:39:8f:3d:f8:8e:c6:ac:21:71:ab:00:90:c4:98:
e9:2e:18:0d:65:61:bf:f4:eb:b5:30:1c:cd:de:b3:87:a0:83:
17:45:5b:ea:b0:df:78:43:2a:db:4a:cd:77:f2:79:6f:ba:11:
68:bd:33:7e:0f:9d:3a:3e:70:2d:66:8f:46:49:03:63:64:4e:
0c:b2:93:d8:9c:04:42:60:2a:3b:fd:f2:51:b3:df:fc:88:22:
f6:50:2c:b5:d0:e3:a4:c4:e2:00:b3:1d:f9:1b:8f:70:eb:92:
4b:54:a5:fb:a7:fd:22:c1:60:2a:c8:e5:f4:ee:7d:24:de:1f:
f2:ac:81:30:ca:f7:83:c4:c9:d2:de:e7:30:ef:c3:e3:8d:e1:
25:f9:e9:99:1e:57:b8:a6:51:6e:0e:78:65:30:a5:c2:bd:d7:
1b:57:39:70:a0:22:05:d5:44:87:dd:9b:f0:e0:20:68:c7:f9:
a6:cd:d0:ea:a4:4c:41:90:cc:4c:ac:3a:2a:fa:2d:f0:23:b1:
c4:47:9b:ff
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTczNzgxMTAvBgNVBAUTKDkwQjlCQUJENzQyQjI3NTc0M0ZCNzE1RTEzNTk3NTYz
OEU5QzJGMjUwHhcNMjUwNTMxMDQzNDE0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZGY1ZC0zZDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqs3TxE1Fv9wEWmwAiZnn49nISnvd3zQ/aHk+1Tte+XqrwMCeDLNKUGOQBSTD
nCpGCgq0HPtBLOKFV3U3H5RPXry95wtMQgIOxWJHewQxCxYFa2Fvf3T+nv52036g
AsI+UUYX/jzDfMs4fJzAzx/79Wv0NUpkbD0QZnaZ4O5FZXcOB02cCmT9PXQfSMKf
U91RnXGO10frG2JqvARB9Q6SaUyQZl7ZbVHMN7stXqmOwn4LhJHwJtk0nm3yQztf
OmxIjh3G+zt1MHpsEkt6Xc/qZqs/p4ZQHwwqLwoKqbR2UHX22jmEAMPHx84HO3Ws
mqMfWjQf+KzY4pU7zKYzYtMjJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBH7E2nC
JJqRZ/8XNm09bisieTDJMB8GA1UdIwQYMBaAFJC5ur10KydXQ/txXhNZdWOOnC8l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzM3OC8wQTg4QzdGMjkz
RTMxMUVFOTNDOEU1ODJDNEY5QUUwMi9rTG02dlhRckoxZEQtM0ZlRTFsMVk0NmNM
eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tMbTZ2WFFySjFkRC0zRmVFMWwxWTQ2Y0x5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTczNzgvMEE4OEM3RjI5M0UzMTFFRTkzQzhFNTgyQzRGOUFFMDIvMzhGOUM3OTI5
NDhGMTFFRUFFNjM2RTBGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy71dMA0GCSqGSIb3DQEBCwUAA4IBAQB7cY4eeCnuA6i/3+21P1Lx
ArG3Srcaqtx2/VqU4XAIKe7TC6CmtXa9Fqx6BMpBjgq+Ba7DVDo7mmH4OY89+I7G
rCFxqwCQxJjpLhgNZWG/9Ou1MBzN3rOHoIMXRVvqsN94QyrbSs138nlvuhFovTN+
D506PnAtZo9GSQNjZE4MspPYnARCYCo7/fJRs9/8iCL2UCy10OOkxOIAsx35G49w
65JLVKX7p/0iwWAqyOX07n0k3h/yrIEwyveDxMnS3ucw78PjjeEl+emZHle4plFu
DnhlMKXCvdcbVzlwoCIF1USH3Zvw4CBox/mmzdDqpExBkMxMrDoq+i3wI7HER5v/
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:27 2026 by rpki-client