
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/E8D991EAA2B311F09C429E36C4F9AE02.roa
File: E8D991EAA2B311F09C429E36C4F9AE02.roa (raw, json)
Hash identifier: 7Nz08dDyFaiyXyaRG47k8xQgh89h8nQMPXHHiTOBsIQ=
Subject key identifier: C0:03:A9:76:A2:D0:84:2C:EF:BD:4D:26:2D:90:E8:B2:30:C8:72:56
Certificate issuer: /CN=A9193F42/serialNumber=B41D3600AF2609930E82F09600C7AF98F2DD6C9F
Certificate serial: 7B
Authority key identifier: B4:1D:36:00:AF:26:09:93:0E:82:F0:96:00:C7:AF:98:F2:DD:6C:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/E8D991EAA2B311F09C429E36C4F9AE02.roa
Signing time: Sun 17 May 2026 08:43:53 +0000
ROA not before: Sun 17 May 2026 08:43:53 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 24443
IP address blocks: 202.72.32.0/24 maxlen: 24
202.72.33.0/24 maxlen: 24
202.72.34.0/24 maxlen: 24
202.72.35.0/24 maxlen: 24
202.72.36.0/24 maxlen: 24
202.72.37.0/24 maxlen: 24
202.72.38.0/24 maxlen: 24
202.72.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.crl
rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193F42, serialNumber=B41D3600AF2609930E82F09600C7AF98F2DD6C9F
Validity
Not Before: May 17 08:43:53 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a097fc9-4233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bd:64:0f:fc:9a:26:82:f4:be:64:cd:e2:ff:
25:56:c5:4a:f4:f0:02:ce:1c:16:e1:19:61:9b:0a:
e9:b6:68:e3:e5:b3:9c:ce:fb:ed:c9:1e:ee:e5:77:
74:44:88:61:2c:45:ae:31:c8:b8:9d:a7:41:bd:fd:
fe:f5:60:46:62:22:b5:b4:4f:c1:64:9f:9d:9e:d1:
3b:62:46:a8:e2:92:27:3a:25:b7:43:14:39:92:ff:
46:15:bc:8e:a4:29:fa:6e:66:d1:ff:59:8e:68:db:
81:de:c3:a1:cb:2f:4f:33:2c:f6:99:a0:45:a9:46:
cf:01:60:24:3a:f1:1f:de:a6:6c:da:b8:61:af:db:
2a:8e:c2:c0:9b:c7:05:92:0d:30:2d:13:33:e3:a5:
72:3d:f1:2d:54:11:ee:00:99:ca:93:f7:86:af:77:
be:46:ba:9d:08:14:73:5e:f8:09:d1:a9:11:d7:63:
2b:86:e1:69:94:37:dc:5c:69:b3:2a:aa:f7:0b:ca:
78:5c:11:fd:5b:91:62:fe:f4:1f:ed:79:d4:79:b2:
a2:30:1e:fe:d9:8b:3a:37:e8:ca:68:68:20:a3:ac:
74:5c:0d:64:bc:52:d6:7a:f2:71:a8:2a:e4:14:37:
02:a4:03:e9:1f:0b:09:58:1b:6a:8f:ea:e9:f9:e1:
10:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:03:A9:76:A2:D0:84:2C:EF:BD:4D:26:2D:90:E8:B2:30:C8:72:56
X509v3 Authority Key Identifier:
keyid:B4:1D:36:00:AF:26:09:93:0E:82:F0:96:00:C7:AF:98:F2:DD:6C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/E8D991EAA2B311F09C429E36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.72.32.0/21
Signature Algorithm: sha256WithRSAEncryption
01:ba:f1:fc:bf:97:38:9d:a2:f4:1a:2a:6d:4c:4b:87:0b:34:
d8:d9:64:f1:73:8f:1c:94:ed:f7:df:45:e6:d8:92:c6:9d:3d:
22:9c:ab:1e:35:da:b4:b1:66:6a:3a:5c:25:dd:e7:46:1c:1b:
b8:67:e8:e1:09:3b:ec:2a:9d:e3:9a:44:1e:43:61:37:a9:3d:
cf:24:15:66:04:96:e3:88:cb:44:62:92:c6:1d:32:ee:bd:53:
a8:78:61:bb:21:39:a9:88:20:90:10:4b:5a:55:90:0a:80:ca:
a1:80:6d:c6:06:12:e6:3a:49:d8:ac:54:f4:de:74:d4:8c:14:
4a:35:6c:62:cb:c3:18:24:bc:54:ef:cf:f4:82:cb:b3:db:a3:
51:a8:dc:e5:d4:fa:95:21:52:b5:b1:6b:25:ba:dc:54:af:ed:
1d:05:a8:2f:1b:77:35:b8:9e:c8:07:69:ba:37:f8:68:de:7b:
86:22:e1:f6:59:1a:48:c0:c7:89:59:49:0f:f0:4f:b5:4d:55:
8d:a9:01:66:37:d5:99:54:ef:f3:17:e2:ca:f7:76:91:68:b0:
0f:4f:c1:27:2d:cd:42:14:63:83:be:6e:c1:26:61:03:90:a7:
4b:19:a8:c3:6f:97:a0:40:6d:86:30:b8:76:c6:33:2b:4a:17:
4c:52:bc:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:11:02 2026 by rpki-client