
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/9DBB8670790211EC9EE24885C4F9AE02.roa
File: 9DBB8670790211EC9EE24885C4F9AE02.roa (raw, json)
Hash identifier: 8YUEuPh3TxbLBkrRsi2o2BfYfS5T4DERKvY1wpAF8Lg=
Subject key identifier: 4D:7F:D7:34:42:F3:03:68:0B:7C:49:2E:4E:0C:A0:B9:30:5B:BF:C1
Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360
Certificate serial: 2701
Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/9DBB8670790211EC9EE24885C4F9AE02.roa
Signing time: Mon 02 Mar 2026 05:16:36 +0000
ROA not before: Fri 04 Jul 2025 16:22:57 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 140929
IP address blocks: 58.146.144.0/21 maxlen: 24
222.165.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl
rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9985 (0x2701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360
Validity
Not Before: Jul 4 16:22:57 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a51d33-c140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:b6:42:01:8b:40:6b:33:06:1e:2e:9f:0b:
b1:40:1b:31:a2:0a:06:33:09:ec:60:d9:af:3a:a6:
ba:cb:2f:de:89:13:ff:00:73:33:db:f0:a1:eb:42:
ac:61:7a:02:29:16:4f:2d:de:5a:64:1a:8f:33:ed:
5e:c8:af:5c:cd:db:be:fb:ca:39:d9:2e:05:61:68:
74:9f:23:2d:76:05:ba:b3:9e:bc:e1:68:a1:6d:67:
c8:b4:a0:5e:fb:0a:4c:ad:d3:56:ff:46:47:84:71:
88:80:16:8f:35:63:8f:d8:bc:94:73:a1:39:e9:fe:
ed:b1:09:03:84:41:f7:fc:de:88:af:68:7f:53:50:
17:ed:84:d8:d7:d5:51:51:c6:8e:60:dd:d7:89:84:
65:77:96:b5:77:2d:f7:02:b9:91:30:9c:95:42:b0:
1b:e0:33:0f:7d:2f:13:33:cb:4c:b3:e3:15:0d:00:
a6:89:0f:4d:87:6a:bb:fb:e4:62:07:e1:ef:53:56:
c5:59:d5:e0:85:2a:03:1a:58:8a:4f:c4:db:fe:da:
d7:74:f5:e8:40:90:25:db:b9:35:88:2c:bf:74:f6:
2d:8e:9b:3e:f2:b5:d9:a1:de:6b:f6:bf:a1:35:83:
2f:8b:02:12:4e:ab:f9:e6:c0:2c:76:49:9f:19:d1:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7F:D7:34:42:F3:03:68:0B:7C:49:2E:4E:0C:A0:B9:30:5B:BF:C1
X509v3 Authority Key Identifier:
keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/9DBB8670790211EC9EE24885C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.146.144.0/21
222.165.0.0/17
Signature Algorithm: sha256WithRSAEncryption
9b:34:a1:3b:c2:af:7d:39:4b:a2:31:5e:77:01:35:3f:b5:15:
01:63:da:7a:dc:fc:09:f3:0d:eb:bc:01:88:1c:77:54:6e:13:
c7:21:e9:11:c6:52:a6:cc:f9:2c:8d:0c:d4:32:ae:11:99:5d:
37:75:fe:05:a1:82:00:c9:20:69:b1:65:ea:c1:9a:b5:18:b6:
6c:b1:1b:51:90:39:fc:53:79:4f:70:7a:64:f5:11:8d:41:c2:
36:6e:f8:db:95:59:50:87:f6:3e:d4:f1:c2:b5:3f:99:90:ce:
4a:1b:0d:5d:fd:d4:96:8a:dd:29:67:fd:f3:11:fa:3c:4d:7a:
1c:05:b2:dc:87:5a:de:15:fd:ed:1d:da:bd:95:fe:77:13:4b:
44:16:7b:e1:bc:f5:bf:69:a8:00:57:49:e3:1e:72:17:53:a8:
d1:fe:5a:57:6a:cb:12:1a:6f:c6:d6:af:0a:07:59:8b:1d:fc:
fd:e7:a1:e5:59:8d:6e:91:58:1c:05:81:35:74:ac:04:a3:b6:
c0:78:1d:86:63:e1:d9:d1:92:6b:8b:7a:3e:2a:44:96:e0:08:
84:0b:3d:4c:6e:53:1f:52:c3:54:d1:61:55:04:fc:9a:15:4a:
92:34:82:e4:04:90:b9:6e:a9:3d:3c:02:cc:3d:11:99:b5:24:
70:4c:93:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:09 2026 by rpki-client