
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/E1FACBC0B10D11E5894F4D1CC4F9AE02.roa
File: E1FACBC0B10D11E5894F4D1CC4F9AE02.roa (raw, json)
Hash identifier: EfCaGCtcrH8N6gwKDqZgf5tZ2F02vPFMjaNcZrTJZPE=
Subject key identifier: 0F:0D:27:22:FF:5A:C2:AF:C5:E8:3C:C7:64:07:B2:98:46:38:9D:DC
Certificate issuer: /CN=A9160244/serialNumber=0434017186DB84CA89477570DDA10AD731597FF1
Certificate serial: 2580
Authority key identifier: 04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/E1FACBC0B10D11E5894F4D1CC4F9AE02.roa
Signing time: Sat 30 May 2026 16:18:40 +0000
ROA not before: Sat 30 May 2026 16:18:40 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 58921
IP address blocks: 43.225.176.0/24 maxlen: 24
43.225.179.0/24 maxlen: 24
103.248.4.0/24 maxlen: 24
103.248.5.0/24 maxlen: 24
103.248.6.0/24 maxlen: 24
103.248.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl
rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9600 (0x2580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160244, serialNumber=0434017186DB84CA89477570DDA10AD731597FF1
Validity
Not Before: May 30 16:18:40 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a1b0de0-7668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:15:21:94:8c:8d:60:4f:2b:04:15:d3:55:
b9:32:19:06:bd:2a:43:a3:03:ef:8a:98:12:5d:f6:
84:0b:49:e2:f1:b3:e4:d3:a3:03:22:7c:43:16:05:
db:90:51:f1:f8:fd:8e:ca:e7:42:ec:0f:af:df:ab:
3f:39:cc:a3:f1:48:b3:10:66:ce:d8:1b:2a:c6:f5:
b7:47:2c:db:ea:a5:d2:e1:0c:6f:fd:be:0b:a3:a5:
b2:05:04:65:4b:24:31:53:f2:6a:0c:05:61:50:9f:
0a:a7:91:d5:23:5a:52:96:77:be:4e:0d:1d:7b:24:
b6:1d:99:e9:be:fd:8c:6c:65:59:1b:7f:83:2f:67:
0b:a1:34:38:44:e7:1a:7d:c7:12:99:47:1f:80:e4:
a4:8e:c9:00:45:f2:dc:de:38:cf:81:87:3d:eb:ce:
00:d2:25:04:c2:06:46:71:3c:b5:30:b4:ca:63:8c:
37:2b:35:c9:66:ee:cb:2e:86:7f:e1:90:5d:40:28:
fb:9c:66:18:b1:6c:9e:06:d4:b0:b5:92:28:c5:53:
97:d1:fa:1d:85:e6:0e:9d:61:16:e1:7a:d7:c6:de:
fa:ab:ec:93:1e:2f:c9:d9:ee:87:67:b5:5e:45:cb:
a1:0e:85:8f:f9:b6:8e:b8:8f:40:cb:03:43:7d:be:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0D:27:22:FF:5A:C2:AF:C5:E8:3C:C7:64:07:B2:98:46:38:9D:DC
X509v3 Authority Key Identifier:
keyid:04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/E1FACBC0B10D11E5894F4D1CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.176.0/24
43.225.179.0/24
103.248.4.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:a1:11:14:95:5e:a9:ec:05:dd:54:a4:15:f6:a9:a0:d2:3e:
86:41:f0:7e:ac:dd:f3:0a:c6:2e:69:bf:d1:59:d5:34:39:01:
9d:ba:4b:d8:48:7d:de:1e:b0:2f:8a:a5:9f:1d:6e:76:6f:0b:
9f:7d:d2:e2:35:cb:bd:53:99:6e:48:51:62:3b:51:7a:73:c2:
5f:43:85:9c:fa:0a:bb:59:28:5e:78:ef:cf:b9:f5:4d:36:12:
c3:b0:b9:67:3c:05:74:20:78:f8:de:7e:c5:c0:08:df:29:4e:
fb:d9:ab:49:f7:7d:2c:a3:49:f9:61:ee:72:5d:7d:4d:14:a9:
49:7a:fe:28:9c:2c:52:35:8c:d7:0f:0a:87:a4:88:22:64:a6:
02:6d:0d:5e:86:a8:2a:d4:6b:44:34:13:43:ba:98:37:c8:22:
e9:ca:ac:d3:68:1b:f3:8b:5b:cf:1b:e2:f3:90:3c:61:43:90:
8a:5f:25:4c:2e:e5:89:6d:27:22:73:84:19:3d:a5:82:09:c1:
9d:13:45:ad:fb:fc:f3:75:6e:a1:85:0a:c6:b0:53:12:cc:e0:
a0:4b:2e:47:54:97:a7:22:b8:97:27:f0:2a:68:83:79:25:39:
2f:e3:76:a4:38:f1:df:d0:81:a5:e6:fd:f0:4a:6b:f7:9c:87:
48:b2:ba:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:33:08 2026 by rpki-client