
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/01C299E0662611ED94A8DA42C4F9AE02.roa
File: 01C299E0662611ED94A8DA42C4F9AE02.roa (raw, json)
Hash identifier: Ebcz0szc+qJ7hYkDqsXxSwbk8Yhl04m2PX1xj7QFIzk=
Subject key identifier: 9D:FC:74:45:64:22:F2:6E:9F:BC:DC:99:24:28:3C:CA:29:A9:46:C6
Certificate issuer: /CN=A9131359/serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
Certificate serial: 02CD
Authority key identifier: E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/01C299E0662611ED94A8DA42C4F9AE02.roa
Signing time: Thu 03 Sep 2026 01:51:30 +0000
ROA not before: Thu 03 Sep 2026 01:51:30 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 4764
IP address blocks: 192.150.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl
rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 01:05:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717 (0x2cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131359, serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
Validity
Not Before: Sep 3 01:51:30 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a98d2a1-a721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:56:5a:69:2d:f6:fe:19:5c:67:41:a0:79:
b1:31:e9:e8:ef:ea:ff:89:54:d2:24:25:ab:a2:16:
af:94:cc:75:e6:29:80:1e:78:29:31:06:5c:5e:4d:
fc:0d:8e:87:e7:56:a0:2a:4a:f6:02:bc:e4:ba:92:
b3:4f:43:78:5e:6c:63:68:ac:3c:17:73:ae:7c:42:
08:01:be:be:63:ff:ce:88:3d:e9:5e:f7:3c:e9:23:
22:b8:a1:51:1e:d4:40:5e:fe:09:92:bc:5b:0a:4f:
98:bf:58:02:cf:19:17:cc:9c:27:8a:73:56:af:de:
7a:7c:21:09:91:d3:79:cc:72:a7:94:d5:f5:bd:1f:
fa:39:3f:e3:07:eb:c8:77:02:78:7f:a1:49:cd:55:
9f:9e:c4:ab:f8:d9:12:0c:ac:7d:5d:0c:c2:d4:d8:
63:8e:32:b3:85:4c:0a:a3:e0:29:b5:29:d9:9d:c2:
a0:6e:b6:0b:96:f6:d2:41:04:b5:e3:36:d1:7c:53:
fd:f8:9f:c4:77:86:90:ab:cf:03:07:e1:34:f7:50:
f7:f4:61:18:dc:24:1b:71:dc:85:12:e9:09:a1:1a:
ba:37:62:8e:81:d3:75:9e:05:24:40:2a:67:43:05:
c2:a0:34:f5:d9:25:c7:06:47:fc:ff:81:ef:71:b9:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FC:74:45:64:22:F2:6E:9F:BC:DC:99:24:28:3C:CA:29:A9:46:C6
X509v3 Authority Key Identifier:
keyid:E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/01C299E0662611ED94A8DA42C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.150.107.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d9:cf:6c:f1:9a:63:98:1b:6a:4f:13:94:f8:e6:65:57:9f:
74:46:ac:02:68:ad:b6:79:53:ac:21:33:27:5c:0d:a7:f3:49:
49:a4:07:6b:cc:41:2a:7c:2c:5c:1e:09:d0:1e:33:1a:dc:74:
03:d5:3d:16:25:ce:c6:03:f3:a9:a3:2c:53:d0:c6:bb:cc:75:
d5:59:f9:8a:50:4b:05:f9:f7:84:a6:b4:d3:7f:42:96:9e:8d:
e3:66:f0:22:1c:af:32:79:b0:94:45:42:6b:ec:a0:9d:fa:9b:
11:0f:d6:3c:61:0c:43:f1:dc:6b:43:05:37:6e:cd:0e:c8:01:
91:e9:28:d7:57:75:64:7e:33:cc:2d:d7:e2:f5:9a:cc:77:5d:
70:c5:e4:d0:cd:b9:e6:1d:28:a3:77:28:9b:d4:7b:f0:62:37:
c4:c0:8d:69:1d:a8:e3:91:21:dc:27:cd:f7:dd:dd:d9:38:36:
c0:41:7a:7f:ae:ef:16:ea:99:19:a2:06:f4:c8:34:09:e7:1e:
32:8a:97:3e:4c:d0:a7:2c:76:f0:49:55:b6:a8:14:8c:3c:1f:
03:ad:3c:4b:71:99:2b:3c:90:c9:77:53:5f:4d:66:18:39:c6:
9c:29:ff:a1:27:ab:4d:6a:10:6d:7d:ce:3b:de:b7:a6:53:1c:
10:92:43:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:01:44 2026 by rpki-client