
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/EB9160CCDFD811F08F00FF64536F56BC.roa
File: EB9160CCDFD811F08F00FF64536F56BC.roa (raw, json)
Hash identifier: YTlnm9rDPylDUuGAClEVDDAUaDaWReTmoLXU/3mvg8c=
Subject key identifier: A0:AB:6A:F0:55:9D:06:34:5D:24:9D:81:5A:4C:30:D2:AF:38:68:45
Certificate issuer: /CN=A917C81C/serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF
Certificate serial: 2A
Authority key identifier: 1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/EB9160CCDFD811F08F00FF64536F56BC.roa
Signing time: Sun 01 Mar 2026 05:52:49 +0000
ROA not before: Tue 23 Dec 2025 08:25:21 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 141727
IP address blocks: 144.79.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl
rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:45:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C81C, serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF
Validity
Not Before: Dec 23 08:25:21 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3d431-ccff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:96:51:1e:83:51:c3:d7:41:7b:16:5f:d5:e0:
aa:55:a6:f8:91:71:9e:36:92:da:24:f3:21:a2:0d:
10:ec:dc:e2:e3:28:b2:82:a6:70:81:59:38:5f:95:
be:4f:1a:8a:6d:b8:8a:14:3b:f5:7c:db:77:50:c4:
f4:4e:62:75:7f:8d:f9:fe:bf:10:de:d8:7b:bb:2c:
b3:9a:d5:01:8a:45:a4:ff:2d:74:9c:8d:4d:6c:81:
22:3c:99:50:ee:54:bc:56:89:c2:9a:85:74:91:29:
a4:d6:04:d5:ad:35:75:13:87:3d:00:e1:c5:b9:43:
8f:f9:68:5c:18:fb:90:42:ce:f8:1e:46:37:59:e9:
ae:69:a1:7a:1c:17:18:14:9a:db:29:ab:18:23:80:
32:be:6e:9c:9a:07:62:57:3f:45:3f:59:06:d0:73:
a5:df:87:c6:8d:25:3a:6c:97:1c:9a:6d:71:f6:78:
8e:4a:ad:89:51:d9:71:bb:44:78:1e:a6:07:b9:0c:
4b:24:98:cb:5b:07:c0:cf:92:df:03:38:3a:9c:f9:
94:71:61:0e:bb:d3:20:fa:95:cd:51:45:af:9d:63:
ed:a8:b1:08:25:f6:a8:0d:58:41:56:b1:5e:2f:c9:
00:f5:e7:d1:55:b9:12:65:ff:9f:01:29:34:c8:a1:
92:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AB:6A:F0:55:9D:06:34:5D:24:9D:81:5A:4C:30:D2:AF:38:68:45
X509v3 Authority Key Identifier:
keyid:1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/EB9160CCDFD811F08F00FF64536F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.194.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c4:08:a3:17:8d:ab:10:e5:c7:ac:76:c7:da:45:6f:9e:28:
99:31:ab:ee:54:d6:ff:4c:c8:15:5b:8e:a6:6a:b9:29:ad:66:
51:33:3b:f4:87:05:41:60:80:fc:dc:4f:9a:0a:8f:65:52:fd:
66:f6:22:27:0f:52:77:65:23:f4:6f:81:89:61:90:93:4e:ff:
02:97:5c:22:97:92:26:5b:04:f4:f1:2e:23:34:07:6f:70:fc:
fd:97:f0:5b:63:12:f9:89:20:78:05:59:25:28:a9:c3:cc:a9:
bf:2e:a2:2c:8a:55:ec:39:07:5e:dc:9e:22:e7:49:87:21:cc:
98:8b:aa:65:8f:24:ee:60:73:be:80:19:2a:28:bc:91:c7:f7:
67:ec:7b:46:61:d8:f8:63:2a:dd:69:c6:77:7b:38:c6:56:cb:
df:c8:3e:4a:bb:db:3b:ef:d4:03:1b:3d:b5:b6:c0:54:78:19:
cc:53:b9:6c:ae:dd:48:83:ac:78:97:a6:97:08:ec:06:c9:4b:
3c:72:4c:28:4d:5e:8c:66:32:c7:02:b0:a7:d9:f1:1f:15:67:
fb:2a:3b:f9:44:f2:81:71:4b:65:4e:de:c1:72:86:f1:49:ab:
26:e6:17:66:b6:88:58:86:11:9f:d0:47:e8:38:55:7f:4a:5b:
9e:2d:dc:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:46 2026 by rpki-client