
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/5B3369383DC911EFAFD59635C4F9AE02.roa
File: 5B3369383DC911EFAFD59635C4F9AE02.roa (raw, json)
Hash identifier: EAWL9NZSuTju6NfVudhsfaA4jlo6nMFHcqC8fwI/PJY=
Subject key identifier: 93:2B:99:AD:E7:25:AC:54:E7:FD:FF:38:F9:8A:AA:C5:9C:C6:1C:2E
Certificate issuer: /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Certificate serial: 01B3
Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/5B3369383DC911EFAFD59635C4F9AE02.roa
Signing time: Fri 02 Oct 2026 21:41:29 +0000
ROA not before: Fri 02 Oct 2026 21:41:29 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 138995
IP address blocks: 185.203.36.0/24 maxlen: 24
185.203.37.0/24 maxlen: 24
185.203.38.0/24 maxlen: 24
185.203.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl
rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 21:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Validity
Not Before: Oct 2 21:41:29 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac02509-6ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:f0:14:45:a5:12:ed:00:6d:e1:ca:c5:66:
22:53:98:ae:49:ba:fc:07:dc:d8:15:37:d4:61:4c:
00:c7:c6:9f:e3:08:34:a2:58:2e:69:3b:b7:6e:82:
b2:21:59:44:ce:01:e7:2f:fe:b5:cf:93:80:75:c3:
9e:43:10:8e:7b:a2:ca:cf:cc:94:ad:d3:87:4b:f8:
9a:23:4d:31:84:eb:03:d0:58:00:2c:2f:20:07:4e:
77:a7:87:11:67:1c:ce:f4:bc:58:8c:c0:33:e0:84:
b9:a8:99:63:0d:bc:bf:01:2a:24:90:14:ef:65:1f:
6c:ab:f9:47:a4:54:70:ed:85:6f:d9:06:db:ee:7e:
bb:48:23:15:20:4e:83:25:13:b9:b7:23:ab:15:f4:
fe:38:a9:76:60:b7:f6:f1:c5:93:e7:69:cc:c1:54:
c2:22:91:04:e5:fd:4d:f1:9b:94:dd:e6:bd:9b:d6:
3f:f4:c5:80:ba:5d:b3:f4:49:70:06:1b:9b:d9:1d:
ef:d2:e9:5a:a6:6f:f1:8f:00:30:68:af:5a:4b:63:
e5:ee:f8:de:2a:d3:c4:2b:dd:ba:11:31:e4:4c:6a:
82:04:9d:56:d1:e0:c8:7c:2d:cf:5b:b2:49:79:8f:
f8:ae:2f:bc:1d:f3:07:db:a0:3d:52:03:e7:ff:3b:
c6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2B:99:AD:E7:25:AC:54:E7:FD:FF:38:F9:8A:AA:C5:9C:C6:1C:2E
X509v3 Authority Key Identifier:
keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/5B3369383DC911EFAFD59635C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
185.203.36.0/22
Signature Algorithm: sha256WithRSAEncryption
39:4c:47:1c:be:b1:8e:f4:fa:2d:e7:49:e7:57:e0:b1:2b:19:
25:fe:10:9c:62:72:46:cc:af:db:d4:33:bf:ba:d0:bf:89:b8:
26:a5:5d:69:6b:e8:5f:48:3d:ba:f6:b5:29:4d:ea:da:84:c9:
5b:a6:2c:fc:c3:a1:ef:47:5a:33:f9:54:f2:08:a1:96:11:78:
00:be:56:b6:a2:49:f4:86:34:d6:c8:da:e2:9a:6e:0e:bf:e2:
c8:ae:5c:76:bc:82:cd:5d:0e:3c:00:6d:2e:7d:03:e1:b8:f6:
cf:4c:70:20:15:ea:6b:b8:68:32:34:0c:ab:41:37:de:35:90:
58:d2:58:e0:5f:43:cc:8e:a9:98:a1:78:3b:c3:ae:1f:b9:d0:
ee:79:61:f8:1d:6f:21:e4:3c:d1:e8:93:fe:8f:d0:31:26:a9:
71:7c:cd:3b:45:b0:74:62:24:4d:7b:98:45:c8:55:27:40:e1:
b5:a4:fd:7a:f3:a7:9f:15:1a:a6:eb:ae:dd:b1:db:8c:78:fd:
d7:10:d2:b6:b4:1a:5d:a1:f5:22:78:fa:86:ce:23:94:21:f2:
b0:d9:ee:6a:27:71:18:30:24:22:40:8a:92:89:25:0b:8e:21:
58:9e:e4:65:80:57:8a:b5:fd:c8:9e:49:ae:34:e7:8d:f6:74:
0d:cb:62:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:46 2026 by rpki-client