
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa
File: E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa (raw, json)
Hash identifier: hdlYLSviqdsjiISi2RWRWAEZ34QocD0U9ocvGaJFxhI=
Subject key identifier: 70:1D:C8:AF:E1:4D:8D:12:75:6A:01:C3:D3:DD:5E:AB:FA:19:1A:30
Certificate issuer: /CN=A9196DCA/serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
Certificate serial: E1
Authority key identifier: AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:14:22 +0000
ROA not before: Mon 19 Jan 2026 05:25:13 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 133213
IP address blocks: 160.250.230.0/23 maxlen: 23
160.250.230.0/24 maxlen: 24
160.250.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl
rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196DCA, serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
Validity
Not Before: Jan 19 05:25:13 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a41f8e-9314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:0f:e6:82:fb:56:c1:aa:70:ad:bb:e8:08:
c5:7c:66:b3:59:73:57:f7:d7:ea:c5:e0:1b:4d:2c:
62:b3:e3:c3:a5:22:9e:13:99:80:66:c9:00:78:72:
2b:90:50:05:03:31:29:7f:67:79:6f:64:48:95:73:
80:69:db:f2:33:bf:26:76:d8:40:8d:a3:bd:25:c5:
0c:50:e2:17:b8:73:47:d4:db:65:a9:69:b1:d3:13:
9b:41:ef:aa:4a:86:06:51:84:93:33:0a:0f:7d:f5:
82:8e:38:5a:15:a6:08:c9:d1:25:ef:c9:f9:0a:0f:
f0:a5:8c:29:88:2e:76:28:e7:f4:45:71:cf:7b:8d:
04:a3:b8:eb:3b:9a:21:75:61:4c:66:99:7d:7f:8e:
22:81:bc:43:77:93:34:5b:e3:0e:39:35:58:01:da:
0e:a8:3f:a3:ba:ee:13:66:4e:cf:3f:15:a6:8a:43:
22:40:1d:54:f9:4a:a7:6e:b2:bf:85:dc:2e:fc:fc:
0a:c0:fd:df:9f:59:98:8e:77:ef:bc:96:1b:80:af:
a8:bd:83:05:fd:2a:de:dc:b5:01:89:ef:1b:fe:05:
2f:0f:1d:ed:31:ff:6c:b9:50:62:91:d7:3e:80:10:
ba:7a:37:60:09:f3:b0:f0:f6:b8:45:3d:31:f3:31:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1D:C8:AF:E1:4D:8D:12:75:6A:01:C3:D3:DD:5E:AB:FA:19:1A:30
X509v3 Authority Key Identifier:
keyid:AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.230.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:ea:e4:df:32:4a:fd:04:2b:99:c2:b5:e8:84:99:53:87:da:
f6:56:a4:1b:0f:56:e3:88:19:07:d5:48:5f:ee:1c:83:1b:32:
83:9d:8b:2c:ff:02:c5:69:63:38:0c:8f:3c:13:c4:89:44:da:
4a:4d:54:cf:79:46:17:21:d7:8f:97:41:f7:a2:e9:dc:e9:04:
02:53:dd:9d:c1:01:a9:e0:7c:dc:e2:b7:50:9b:67:21:5d:d7:
89:a3:0e:b6:57:16:94:2b:f4:16:30:f0:01:52:53:07:4c:b1:
b3:18:87:eb:43:ab:82:4b:b6:60:67:0c:c7:9f:a9:fc:36:11:
98:f3:60:2a:2e:80:23:99:2d:07:cc:20:91:c7:ae:2a:0c:42:
c9:da:07:42:79:3e:a9:8b:36:d5:ac:f6:33:d0:94:8a:5a:36:
6f:95:85:1d:28:1d:f0:d1:72:f2:ba:a8:42:9f:04:67:28:8d:
3f:a5:87:2f:1d:ed:3c:be:9f:cf:da:74:f8:b9:06:d3:ba:70:
ff:50:ed:dc:28:34:bd:c6:19:4a:9a:94:1e:1a:06:d6:dd:72:
c4:35:3c:fa:e4:d7:92:96:a0:94:6d:38:ec:f1:f7:43:6a:49:
1c:96:1b:01:f6:fd:6a:fd:32:78:53:9f:ea:c0:65:bb:0c:89:
87:da:9d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:35 2026 by rpki-client