
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/0043BE8AD1E511F1B88320F3FD65CEF9.roa
File: 0043BE8AD1E511F1B88320F3FD65CEF9.roa (raw, json)
Hash identifier: 2JxPTMDxmbc6+vVFhe/GQVEXzZnEQFnTeHM2nFvqqgY=
Subject key identifier: FC:87:2B:29:CF:42:04:C3:68:95:BE:12:CC:D2:4E:5D:63:07:66:9B
Certificate issuer: /CN=A9119D72/serialNumber=61E1DC65FD6AC4DBEA6AFA3001812AB1CEA1DB8F
Certificate serial: 4F
Authority key identifier: 61:E1:DC:65:FD:6A:C4:DB:EA:6A:FA:30:01:81:2A:B1:CE:A1:DB:8F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YeHcZf1qxNvqavowAYEqsc6h248.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/0043BE8AD1E511F1B88320F3FD65CEF9.roa
Signing time: Tue 27 Oct 2026 09:01:31 +0000
ROA not before: Tue 27 Oct 2026 09:01:31 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 155018
IP address blocks: 144.79.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.crl
rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YeHcZf1qxNvqavowAYEqsc6h248.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119D72, serialNumber=61E1DC65FD6AC4DBEA6AFA3001812AB1CEA1DB8F
Validity
Not Before: Oct 27 09:01:31 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6ae0686b-6450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e1:55:93:d0:e2:a8:9f:8e:37:e3:05:01:c4:
26:e5:a6:35:06:2b:27:cd:3a:1e:be:11:53:94:fc:
92:89:c7:79:59:07:45:72:70:c5:95:58:ac:9d:7a:
8a:c2:97:76:bc:84:e5:ea:48:71:e0:e2:33:f5:38:
f1:29:f3:0e:1b:58:2b:01:47:ab:df:84:ce:f9:c8:
12:95:45:f3:95:6d:ae:7f:f1:68:3d:6a:72:ef:5c:
eb:4b:a3:45:a2:69:d0:c4:dc:41:7a:fb:85:3d:48:
28:1c:f2:ff:1e:46:34:3a:44:3e:3d:90:fb:4e:6c:
a0:e6:a7:fe:9c:dc:17:a1:c4:e9:92:22:a9:92:1e:
aa:18:bb:e0:57:c4:03:1a:b0:9c:56:a3:ec:2e:fc:
00:10:60:6a:01:5d:ed:94:ae:73:0b:29:eb:08:b6:
2c:ce:b3:f2:e2:10:3e:f7:11:af:81:29:c6:46:20:
fc:b0:d4:5b:df:cd:a5:9f:56:2a:a2:12:c7:57:61:
c2:f3:71:80:68:39:69:e8:7a:37:44:27:08:36:e8:
a6:78:35:b4:d3:8c:82:92:40:cb:53:c6:ff:b2:cb:
c1:d8:ae:c0:76:1d:80:8f:0e:cd:3e:45:47:c4:54:
e2:7b:6d:ad:a1:7c:e8:e1:63:88:c9:55:eb:ce:92:
24:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:87:2B:29:CF:42:04:C3:68:95:BE:12:CC:D2:4E:5D:63:07:66:9B
X509v3 Authority Key Identifier:
keyid:61:E1:DC:65:FD:6A:C4:DB:EA:6A:FA:30:01:81:2A:B1:CE:A1:DB:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YeHcZf1qxNvqavowAYEqsc6h248.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/0043BE8AD1E511F1B88320F3FD65CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.191.0/24
Signature Algorithm: sha256WithRSAEncryption
40:7b:06:4a:a3:6e:5b:37:d7:b2:13:ef:90:22:e7:19:ad:bd:
75:90:5d:80:98:ff:24:64:aa:b3:13:c0:b6:99:e8:ad:d7:71:
05:fd:58:5f:a0:51:04:e0:0e:56:fd:6b:15:87:83:79:99:de:
2a:84:2d:e1:24:da:51:e2:c5:dc:81:75:59:3e:57:b3:f8:a1:
55:12:1e:6e:38:0e:a6:95:e1:a2:66:bc:45:3d:8c:50:59:ed:
3d:8e:1d:58:ed:1d:85:7d:7e:bc:ce:71:46:d2:d5:c7:c2:6b:
38:3f:9d:62:a8:a5:f0:61:3c:6d:8f:ef:77:2f:7f:ba:e7:78:
c0:8e:83:21:37:64:bd:8e:fd:37:16:57:a7:88:70:bb:2a:c4:
14:16:c4:db:ce:81:10:66:02:7a:0a:81:fc:d2:44:f7:83:20:
73:3d:21:40:5f:cc:d7:66:0c:c0:81:ba:53:b4:77:dd:04:bb:
df:15:32:c5:43:f8:49:77:01:43:52:c5:e6:43:ba:31:62:49:
2f:80:a3:07:78:9e:f6:c2:15:ca:a9:2c:78:e3:ed:7a:51:4f:
a5:23:0f:c2:f7:37:5c:41:72:22:87:16:8a:85:8a:b0:1d:4d:
2d:8f:21:c1:c2:71:ff:7d:a6:b3:ab:ed:ba:87:09:ca:45:e4:
43:18:54:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 28 13:02:49 2026 by rpki-client