
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/49433A68FF0C11F0A96F3AB880EE528E.roa
File: 49433A68FF0C11F0A96F3AB880EE528E.roa (raw, json)
Hash identifier: iBZ5bo+WPtywt0imQbQ1SwQwhbOsYFJiB/kR/yI4wUk=
Subject key identifier: 33:E4:75:69:10:7C:E9:3E:3E:16:24:C0:99:7F:CC:2F:D2:01:15:FA
Certificate issuer: /CN=A9119850/serialNumber=7F27A788DC0C12041702C796C6DD5A174401F347
Certificate serial: 0387
Authority key identifier: 7F:27:A7:88:DC:0C:12:04:17:02:C7:96:C6:DD:5A:17:44:01:F3:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fyeniNwMEgQXAseWxt1aF0QB80c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/49433A68FF0C11F0A96F3AB880EE528E.roa
Signing time: Mon 03 Aug 2026 01:50:13 +0000
ROA not before: Mon 03 Aug 2026 01:50:13 +0000
ROA not after: Wed 02 Dec 2026 00:00:00 +0000
asID: 58952
IP address blocks: 116.206.136.0/22 maxlen: 22
116.206.136.0/24 maxlen: 24
116.206.137.0/24 maxlen: 24
116.206.138.0/24 maxlen: 24
116.206.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/fyeniNwMEgQXAseWxt1aF0QB80c.crl
rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/fyeniNwMEgQXAseWxt1aF0QB80c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fyeniNwMEgQXAseWxt1aF0QB80c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 00:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 903 (0x387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119850, serialNumber=7F27A788DC0C12041702C796C6DD5A174401F347
Validity
Not Before: Aug 3 01:50:13 2026 GMT
Not After : Dec 2 00:00:00 2026 GMT
Subject: CN=6a6ff3d5-8cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:82:01:ca:81:23:7b:f2:fc:62:9c:4b:cd:
ce:84:eb:e6:3e:96:8b:2e:69:c6:50:ba:e7:91:c1:
a6:b8:25:c1:0f:ba:02:18:be:eb:04:11:e0:24:64:
b9:69:8c:04:87:77:dd:e4:b6:e1:2c:6f:19:b9:be:
54:2b:f8:9a:2a:cb:b8:01:54:db:77:26:a6:7a:66:
96:7d:e6:90:99:13:83:71:29:bc:1d:ba:f1:22:1f:
99:a1:57:1b:d2:21:4b:db:0c:32:b1:84:69:9c:f7:
95:ae:77:f1:a9:78:a7:12:67:fa:12:f4:76:1b:5b:
30:a8:9b:e0:b3:95:20:7d:96:42:29:b2:30:1f:eb:
5d:91:45:5b:be:7e:f4:e1:58:df:f0:63:81:0f:ce:
c4:80:5b:95:5c:4c:18:64:5a:28:c8:ef:21:cd:6f:
e7:b3:3e:30:76:9d:83:0a:41:2a:f7:eb:a9:0a:7c:
69:24:78:43:27:8a:7f:a6:45:7b:55:54:ec:4f:2d:
53:44:ca:e4:68:91:13:25:5e:26:f6:f9:05:e3:ab:
4c:98:d8:dd:87:ef:17:6c:f7:74:46:d0:05:ed:ab:
39:c3:5d:c0:6a:be:cf:7a:7a:56:65:1a:35:1f:0c:
46:c5:69:58:88:44:65:76:f1:c3:b6:9a:6f:3a:aa:
e2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E4:75:69:10:7C:E9:3E:3E:16:24:C0:99:7F:CC:2F:D2:01:15:FA
X509v3 Authority Key Identifier:
keyid:7F:27:A7:88:DC:0C:12:04:17:02:C7:96:C6:DD:5A:17:44:01:F3:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/fyeniNwMEgQXAseWxt1aF0QB80c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fyeniNwMEgQXAseWxt1aF0QB80c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119850/FE19EA6C072C11EDBD415E13C4F9AE02/49433A68FF0C11F0A96F3AB880EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
116.206.136.0/22
Signature Algorithm: sha256WithRSAEncryption
77:d9:18:14:63:f3:49:33:5d:c5:5f:0b:77:00:b2:43:b8:e9:
d1:d3:fd:93:34:fa:c0:7a:9e:f2:52:43:78:89:bf:42:03:ad:
8c:03:15:6f:22:60:0c:1c:0e:38:fd:56:f6:0d:51:b8:9a:62:
94:08:77:c7:dc:35:a8:f0:e2:71:e9:99:d6:56:68:f5:f7:6a:
85:9b:4d:56:b8:36:39:16:15:ce:1c:31:d3:7c:65:30:58:f9:
ab:ab:a2:3c:48:58:9c:bf:17:6e:f1:99:0f:01:58:6a:5a:19:
6d:7f:84:48:69:0f:54:34:22:38:2a:aa:3d:87:0d:77:fc:82:
02:9d:fd:ce:b1:0e:2f:26:72:00:ea:38:20:cd:21:ae:c7:9d:
87:83:a3:5d:58:6d:6e:44:8b:68:46:e8:5e:1f:6b:36:b0:68:
ce:0a:ad:51:aa:20:de:27:3c:ef:ae:6f:3b:84:f0:b7:14:dd:
eb:c9:ca:87:dc:a4:3b:a3:cd:2a:b2:fe:99:14:d0:98:a3:f0:
30:fc:72:2c:22:76:b5:2f:37:19:dc:1b:d6:a6:f9:62:71:ed:
0f:d3:fe:86:08:36:bc:16:89:9a:d0:82:39:71:f2:7d:e4:4a:
a2:c7:6b:c8:09:7b:55:60:f9:aa:42:4f:fa:b3:81:3f:08:d3:
92:fc:c6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:23:57 2026 by rpki-client