
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/2C4F5466E47A11F08671F3E23F6F56BC.roa
File: 2C4F5466E47A11F08671F3E23F6F56BC.roa (raw, json)
Hash identifier: WsN1f6wwbcJF5RdtqWey/DtwlYfMt1ay7aj7fD7eCJk=
Subject key identifier: 7F:70:BA:9B:8D:55:B1:5B:A5:78:C9:8E:CC:8B:FE:D9:4C:3C:0B:1D
Certificate issuer: /CN=A9193C07/serialNumber=ED3C1BDEA37EFDC4EACB554EB88B10C15402E83A
Certificate serial: 3A
Authority key identifier: ED:3C:1B:DE:A3:7E:FD:C4:EA:CB:55:4E:B8:8B:10:C1:54:02:E8:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/2C4F5466E47A11F08671F3E23F6F56BC.roa
Signing time: Mon 02 Mar 2026 14:24:31 +0000
ROA not before: Mon 29 Dec 2025 05:49:43 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 154462
IP address blocks: 144.79.220.0/23 maxlen: 23
144.79.220.0/24 maxlen: 24
144.79.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.crl
rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:24:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193C07, serialNumber=ED3C1BDEA37EFDC4EACB554EB88B10C15402E83A
Validity
Not Before: Dec 29 05:49:43 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a59d9f-4cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:ce:3d:50:16:fe:b7:35:c6:56:12:d6:63:
8f:80:6e:da:87:2f:bd:b6:7d:5f:1c:10:fc:98:47:
0e:a5:13:1c:07:b5:bc:17:a4:e6:54:96:f6:62:e3:
87:3a:06:9a:41:a9:0e:a9:e6:ba:fe:fc:80:46:43:
ad:e5:f0:93:fd:18:42:53:f2:2f:01:41:2a:ff:61:
49:64:b9:9a:50:9a:53:05:64:50:07:c8:11:aa:db:
81:f3:6d:2c:04:d6:53:1c:54:f8:14:1a:0d:42:88:
6d:f9:44:00:4d:ff:fe:70:d6:f9:ee:79:0b:62:2b:
c8:31:79:2c:1b:4a:c8:b7:79:36:04:fb:89:32:8e:
f6:ad:56:ae:ce:f4:11:74:d3:70:5f:79:c0:e7:1a:
04:2f:c0:04:6c:44:d1:b2:dd:f1:87:0f:c1:7a:b4:
c8:7f:0c:64:7b:2d:5a:6c:7f:92:d6:17:95:51:4f:
4c:80:72:ec:88:40:8e:3e:72:95:5e:a6:ad:1d:52:
27:83:f3:75:6a:b1:5c:f2:95:3a:b2:62:88:3a:d7:
6a:b9:26:7f:e4:d7:de:66:c1:b8:3d:b7:dd:9a:c7:
a0:c5:b8:37:aa:6f:e2:50:a5:c4:91:a4:02:1e:98:
9b:e9:49:e7:64:77:5e:71:11:a7:eb:70:11:95:6e:
ee:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:70:BA:9B:8D:55:B1:5B:A5:78:C9:8E:CC:8B:FE:D9:4C:3C:0B:1D
X509v3 Authority Key Identifier:
keyid:ED:3C:1B:DE:A3:7E:FD:C4:EA:CB:55:4E:B8:8B:10:C1:54:02:E8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/2C4F5466E47A11F08671F3E23F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.220.0/23
Signature Algorithm: sha256WithRSAEncryption
38:44:e5:b5:97:d8:97:c2:51:0a:f3:84:d7:ba:24:a4:e3:37:
ff:e8:41:8d:87:cf:08:46:db:af:80:7e:59:9b:df:fb:df:49:
26:2d:d3:29:10:cd:bd:9b:bd:5a:84:24:4a:4d:7e:c8:36:c3:
3d:e1:09:75:1c:6f:bc:73:75:e8:ed:bc:2c:dd:e8:30:67:d1:
83:02:e2:02:a1:8c:72:7f:df:00:47:19:50:df:b6:68:d3:83:
4f:41:aa:66:ec:70:fc:b9:f8:ec:79:61:32:09:38:60:aa:44:
ac:a3:99:2d:81:d7:bf:aa:c3:b6:61:a8:a1:97:c2:b4:10:ea:
d5:00:25:8d:e2:d7:f6:4e:ab:1e:35:1c:f8:89:ac:e3:e4:b9:
02:34:78:87:14:95:88:85:9e:88:7b:2d:47:8e:97:44:4a:3d:
35:7d:18:87:09:4e:18:61:8e:4e:91:9c:2b:32:df:b4:e7:49:
7d:a9:cc:3a:35:64:8c:df:68:2b:66:d5:04:31:fb:2f:14:d1:
0c:49:10:c1:cb:7b:c7:d7:d7:37:8c:54:ce:37:7a:df:27:5c:
5c:c2:6a:61:06:0b:2a:64:35:4e:d2:b6:c7:46:af:5b:3b:0c:
17:81:5c:ea:6d:c0:cb:28:67:53:80:d0:44:16:bd:bc:57:c3:
35:78:b5:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:07:35 2026 by rpki-client