
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/23331070F9FB11EB8CFF5E7DC4F9AE02.roa
File: 23331070F9FB11EB8CFF5E7DC4F9AE02.roa (raw, json)
Hash identifier: kPK7zJauxEBIJQiRWoL6aPE9Vm4oLwSK9rxZTIpt8Ro=
Subject key identifier: 46:CF:4A:5D:29:43:0A:D8:B8:F7:0D:C9:CF:18:C1:39:00:1E:C8:69
Certificate issuer: /CN=A9185D6E/serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D
Certificate serial: 067E
Authority key identifier: 1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/23331070F9FB11EB8CFF5E7DC4F9AE02.roa
Signing time: Fri 04 Sep 2026 22:44:00 +0000
ROA not before: Fri 04 Sep 2026 22:44:00 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 14340
IP address blocks: 101.53.160.0/19 maxlen: 24
182.50.76.0/22 maxlen: 24
202.129.242.0/23 maxlen: 24
2401:ce80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.crl
rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1662 (0x67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D6E, serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D
Validity
Not Before: Sep 4 22:44:00 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9b49b0-d823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d4:53:9f:85:a3:9e:4d:4c:6e:bb:2a:fa:05:
c3:57:ec:10:d6:d5:5d:f0:2b:ff:5e:d9:d1:f9:73:
91:9c:14:dc:94:01:af:d7:49:02:f2:88:1d:a8:87:
cc:c7:23:43:2a:85:ca:b3:d3:fd:17:40:dc:91:8f:
15:48:bf:ba:99:5c:02:b9:da:cf:ae:b0:92:52:8b:
d6:0d:fc:d4:a0:6c:70:2a:80:40:c3:27:4a:82:ba:
f8:95:03:44:b3:90:fb:93:95:20:26:2b:6c:bd:52:
36:47:4f:27:d9:ef:5b:9e:0d:2f:1c:aa:5d:b0:b8:
03:d1:f5:c1:46:88:8a:eb:5c:b5:d3:a1:a2:a9:04:
74:ab:4b:12:50:15:cb:2a:d0:24:9a:56:7f:8b:7f:
5e:1f:98:e7:65:70:61:c6:6b:72:ce:ed:74:1c:68:
75:cf:ec:e9:1e:e4:06:c4:b5:42:a6:1c:00:cc:1a:
57:a1:63:86:91:74:70:a4:f8:95:ab:89:94:93:8f:
b7:88:c6:fe:02:b6:6a:97:ef:36:97:d8:41:01:af:
a7:c9:78:d5:79:2f:3d:a5:dd:34:b1:2a:e9:c0:57:
68:50:3f:f2:e5:ac:b2:54:0e:f2:68:19:11:46:86:
aa:9e:be:2c:35:7b:94:44:da:70:c5:d8:c3:05:aa:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CF:4A:5D:29:43:0A:D8:B8:F7:0D:C9:CF:18:C1:39:00:1E:C8:69
X509v3 Authority Key Identifier:
keyid:1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/23331070F9FB11EB8CFF5E7DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
101.53.160.0/19
182.50.76.0/22
202.129.242.0/23
IPv6:
2401:ce80::/32
Signature Algorithm: sha256WithRSAEncryption
55:bc:ba:57:8a:18:75:7a:b9:ba:5b:df:88:d4:ba:b8:05:ea:
5e:48:6f:0e:bd:c8:f9:c8:48:bf:39:8a:40:43:01:cd:48:df:
06:cc:64:f2:79:80:e0:ef:62:24:b8:c9:78:84:ad:05:f5:12:
21:a7:74:ad:9b:a2:18:ef:95:2f:98:e5:ef:c5:c9:fd:f5:74:
3f:52:d1:a7:e2:fb:6c:c1:4f:24:d4:2d:a7:d8:67:dd:9e:ce:
4b:04:7a:c0:1a:70:83:76:19:9b:b9:56:c7:70:11:17:50:2c:
ae:5e:d0:a9:7f:62:b6:7e:9b:5e:8a:9b:3b:4a:44:2d:10:bc:
51:7d:77:da:45:17:e2:5a:29:44:2a:5c:05:0e:0a:be:bd:72:
72:7c:fc:d3:93:51:b1:b5:22:2d:c1:00:f9:84:25:30:a7:97:
9e:74:79:64:ef:cf:fe:b2:c9:7b:87:59:4d:9e:da:15:09:db:
71:d4:d2:aa:bd:c3:aa:8f:15:fb:e0:29:a9:93:0a:89:2d:c1:
e6:ea:9f:ea:26:bc:9c:6d:83:dc:d8:57:67:64:9c:39:46:c7:
e3:a2:b3:db:67:9a:c3:5b:94:bc:cf:da:a2:5b:e0:ac:7a:3f:
9b:9c:91:59:70:e5:06:ce:9b:72:21:44:23:df:78:e4:9f:88:
4a:57:18:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:03:39 2026 by rpki-client