
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/E1FACBC0B10D11E5894F4D1CC4F9AE02.roa
File: E1FACBC0B10D11E5894F4D1CC4F9AE02.roa (raw, json)
Hash identifier: xPwsKwL7UMt7l1oT80YMCI87GVus5Det22vCaaPYrAE=
Subject key identifier: FD:E2:0A:10:A9:44:1C:9E:74:7E:9E:01:5C:D0:20:41:C1:2E:15:F7
Certificate issuer: /CN=A9160244/serialNumber=0434017186DB84CA89477570DDA10AD731597FF1
Certificate serial: 254E
Authority key identifier: 04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/E1FACBC0B10D11E5894F4D1CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:13:23 +0000
ROA not before: Mon 02 Jun 2025 16:14:20 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 58921
IP address blocks: 43.225.176.0/24 maxlen: 24
43.225.179.0/24 maxlen: 24
103.248.4.0/24 maxlen: 24
103.248.5.0/24 maxlen: 24
103.248.6.0/24 maxlen: 24
103.248.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl
rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9550 (0x254e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160244, serialNumber=0434017186DB84CA89477570DDA10AD731597FF1
Validity
Not Before: Jun 2 16:14:20 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a40333-447b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:98:6e:12:db:17:87:a6:9f:cf:7c:51:00:
13:9f:0e:71:47:29:f6:54:df:f0:00:86:4f:18:0a:
35:82:ea:ae:82:4e:ab:f8:29:9d:22:bc:bb:89:53:
fb:da:aa:ce:94:33:0f:77:c3:e4:a1:b1:7b:29:9e:
8b:52:62:b9:71:3b:db:a6:54:e0:f5:5f:60:87:e9:
e2:79:5d:d7:dc:3c:50:da:21:21:b2:76:e2:3b:95:
53:4c:7f:89:11:bb:4d:57:8c:96:9e:61:5c:7f:f4:
91:01:66:de:e3:de:8b:15:7a:85:44:4b:39:a7:81:
eb:a8:20:9f:4e:f2:81:e4:1d:2b:7e:fe:9a:d6:2e:
19:c4:d9:ee:8f:d6:3d:22:fd:d2:31:b6:cb:ac:46:
a3:da:fa:c8:05:33:6f:16:f7:77:3a:1e:a4:73:42:
60:77:f9:f2:53:f5:3f:d9:31:b8:01:a4:78:37:6c:
06:48:bc:df:4d:d2:6d:61:76:b4:81:08:14:17:14:
23:49:64:da:e2:b7:0b:88:3c:fa:45:d7:8d:e5:ed:
53:67:89:46:fb:7c:73:e6:1c:29:4e:48:2b:bf:39:
48:75:f9:3d:8f:4b:6d:ff:93:81:95:b2:4e:80:bc:
d6:89:4c:ef:0f:4c:75:33:a6:f2:a1:d9:19:33:24:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E2:0A:10:A9:44:1C:9E:74:7E:9E:01:5C:D0:20:41:C1:2E:15:F7
X509v3 Authority Key Identifier:
keyid:04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/E1FACBC0B10D11E5894F4D1CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.176.0/24
43.225.179.0/24
103.248.4.0/22
Signature Algorithm: sha256WithRSAEncryption
93:3a:9e:44:23:52:b3:15:68:e1:b6:13:01:ad:a9:d8:03:0f:
18:bb:31:7f:14:b2:b4:96:bf:b8:36:cd:3f:52:34:e9:f9:fc:
42:e4:b9:0e:ed:1a:28:9a:32:45:a3:69:c7:03:1d:68:e1:d1:
0a:af:96:2d:a7:ed:6e:b1:e8:da:45:5a:c5:b7:13:b9:32:47:
1e:38:77:88:f4:76:68:fe:8a:da:b7:6c:01:69:e8:83:e1:85:
56:b9:ba:59:c8:db:4e:75:c7:42:1c:07:22:58:a7:d2:84:f4:
81:5e:f5:9b:65:71:53:3a:c0:f6:a0:d8:81:e8:ec:52:84:49:
89:08:43:2f:54:c3:78:1b:08:69:7b:c5:c6:06:a4:05:e5:f1:
d3:89:da:02:ec:4b:c4:e1:a3:51:08:b2:e9:36:02:d3:e3:95:
a3:57:8f:b6:e8:22:73:13:b4:c7:ec:54:1f:8f:88:f1:d9:06:
90:6b:5b:5b:4f:51:a3:de:8f:a3:3e:e2:e4:be:a2:f2:6a:70:
ae:e4:15:de:06:fe:b7:bd:f6:16:51:46:e1:d9:c3:9a:ca:c0:
61:06:46:79:fa:ba:c9:ab:8b:19:a3:c8:f3:2e:bd:dc:ad:01:
9a:4f:e0:8e:2d:a1:4a:ce:d4:db:97:1d:d5:8a:0b:e6:44:f1:
d7:6f:54:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:56 2026 by rpki-client