
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E206DF40E79011E699B81D0FC4F9AE02.roa
File: E206DF40E79011E699B81D0FC4F9AE02.roa (raw, json)
Hash identifier: HgJ0n+v739OZ1tLGuS29SCSO5u9C8UIQn4oKvIqQoV8=
Subject key identifier: 2A:A0:95:15:07:66:BB:F1:6A:45:32:AE:EB:32:4A:34:B9:AB:8B:86
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1D99
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E206DF40E79011E699B81D0FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:27:18 +0000
ROA not before: Tue 04 Nov 2025 15:00:37 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 9387
IP address blocks: 119.73.14.0/24 maxlen: 24
119.73.15.0/24 maxlen: 24
119.73.32.0/24 maxlen: 24
119.73.33.0/24 maxlen: 24
119.73.34.0/24 maxlen: 24
119.73.35.0/24 maxlen: 24
119.73.36.0/24 maxlen: 24
119.73.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:08:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7577 (0x1d99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Nov 4 15:00:37 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a48506-043d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:5b:c7:de:c0:41:a1:04:c7:f4:9f:92:e5:
61:a4:87:20:14:37:bf:3c:da:4b:78:49:2e:e1:52:
df:60:62:05:c8:bc:cd:22:0a:c5:ce:5d:aa:95:14:
7f:38:c7:6d:b8:0c:b9:4e:c1:d3:10:9b:95:2e:5a:
66:a4:9c:d8:02:c2:6d:57:a9:69:03:57:32:c5:b3:
f7:2b:57:19:f0:03:b2:92:9d:69:51:b0:a3:1f:7d:
5b:29:31:2c:69:0e:f1:4e:cd:55:63:a7:fb:e0:7e:
cc:1b:ca:34:3b:db:00:1e:af:f6:de:17:dc:d3:8d:
ea:09:a2:41:d1:38:33:00:ea:cc:24:3e:30:46:c4:
de:d5:84:d1:96:8f:44:cf:16:8f:8e:90:2a:8b:e2:
6f:cf:08:6b:48:d7:05:6a:da:9b:83:de:92:51:0e:
b2:ac:cc:f3:ac:14:27:17:3d:0d:bc:00:d3:42:c2:
88:38:82:66:11:54:fb:3a:a1:8b:96:b3:dd:ac:a5:
51:23:71:66:d3:8d:7d:1a:88:3c:99:5b:37:cf:a7:
8c:f0:42:6e:96:07:37:04:2e:43:27:02:cf:1f:be:
10:bd:75:fc:af:de:b0:32:49:3f:8d:07:88:fc:38:
35:5e:3f:6e:02:07:4e:df:a1:ea:4c:ad:65:15:fd:
24:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A0:95:15:07:66:BB:F1:6A:45:32:AE:EB:32:4A:34:B9:AB:8B:86
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E206DF40E79011E699B81D0FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.73.14.0/23
119.73.32.0-119.73.37.255
Signature Algorithm: sha256WithRSAEncryption
84:1b:1b:53:60:bd:be:47:4b:a8:48:d3:02:04:eb:95:da:45:
55:67:66:b9:45:78:7b:9a:31:49:9c:8e:82:25:a0:54:76:12:
c0:3c:b9:f5:95:d3:a7:3b:15:9a:48:06:b6:32:88:5d:4d:8d:
fa:67:3d:84:48:c1:2d:7b:a9:2a:a5:7c:d6:4a:52:51:99:6c:
7c:ca:60:25:f6:c8:35:d1:1c:09:5a:15:31:91:28:4d:32:da:
9f:86:6c:7c:13:8f:b6:86:dc:45:8e:fd:4e:95:fb:83:29:c9:
07:40:65:5f:a5:1a:1d:2e:6f:95:a9:16:1d:a4:f6:b9:21:f2:
88:4a:c5:22:9d:19:5a:fd:f6:b0:59:ee:e7:c3:e4:fb:6a:22:
96:a1:47:3a:ed:46:af:54:58:5c:b9:63:42:d8:76:c7:32:ce:
cb:40:b7:30:b5:1b:1a:36:4f:ef:62:e5:45:7c:a6:fe:74:a1:
96:25:c0:41:4f:1a:a2:da:75:dc:f3:07:f5:d1:79:a1:e2:28:
8d:df:76:06:f6:c5:a7:39:ed:9b:06:1d:d9:a1:c4:3e:8a:e8:
0d:69:fa:85:87:ce:38:a3:53:98:b4:dc:df:31:b1:62:18:43:
3a:27:88:5d:8a:3f:cb:ea:53:9a:8d:9b:42:70:1e:31:87:90:
f1:75:fd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:00:50 2026 by rpki-client