
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/E89AA63C3A3411EDA5928760C4F9AE02.roa
File: E89AA63C3A3411EDA5928760C4F9AE02.roa (raw, json)
Hash identifier: EB69gBxTbFjvEnKaHoQTL2DrYegYF3Y1wxn2eUhyygQ=
Subject key identifier: 72:99:57:60:19:6C:34:97:1A:B8:B6:00:B2:70:06:A3:9C:BC:01:3B
Certificate issuer: /CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365
Certificate serial: 35A6
Authority key identifier: 38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/E89AA63C3A3411EDA5928760C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:14:32 +0000
ROA not before: Fri 02 Oct 2026 15:14:32 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 17820
IP address blocks: 61.16.238.0/24 maxlen: 29
203.196.128.0/21 maxlen: 21
210.7.74.0/24 maxlen: 29
210.7.77.0/24 maxlen: 29
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl
rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 14:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13734 (0x35a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135EC4, serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365
Validity
Not Before: Oct 2 15:14:32 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6abfca58-3a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:15:7d:14:97:63:ca:cd:23:b4:da:e3:58:
12:55:9d:d9:b3:3f:53:04:ad:fd:64:53:49:f9:61:
73:b3:e8:f5:cc:0d:90:55:eb:12:9a:2b:3e:89:49:
ac:0f:d4:6f:d8:e8:1e:4d:21:e5:3b:9f:8e:ea:9a:
51:92:df:1e:ae:71:ff:cb:13:8f:00:ae:9a:c6:21:
1b:a4:8a:0f:d0:82:1f:03:0d:8f:2d:67:99:12:f9:
0a:78:8c:1a:1d:4a:50:a2:10:d0:78:50:30:a7:14:
7c:b6:46:ab:4c:ba:65:ec:a6:a8:e9:d1:a9:f6:72:
86:c9:59:f7:52:1e:91:b0:40:41:40:d6:1c:5f:c9:
1f:90:97:af:bc:94:a0:b9:aa:e8:4a:47:c6:9b:ad:
c5:d6:b3:d0:c9:d8:51:85:55:16:f2:0c:5a:0c:ec:
46:af:c5:b1:54:62:8c:f4:c4:44:5c:a1:04:54:2e:
94:e1:76:d6:be:f2:9a:6a:51:55:d3:34:af:0b:28:
99:f7:45:72:2a:af:5a:38:99:22:51:ad:e4:33:79:
da:26:85:43:8e:6c:c3:55:9c:41:ad:ed:ae:6a:ba:
55:f6:fa:0f:91:23:cb:41:22:92:2f:c7:9c:ca:4c:
1e:bb:2f:1b:52:90:7d:b6:9f:6e:dc:03:58:6e:11:
46:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:99:57:60:19:6C:34:97:1A:B8:B6:00:B2:70:06:A3:9C:BC:01:3B
X509v3 Authority Key Identifier:
keyid:38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/E89AA63C3A3411EDA5928760C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.16.238.0/24
203.196.128.0/21
210.7.74.0/24
210.7.77.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:f4:3f:38:6d:63:1f:2f:df:99:dd:62:fb:da:90:ab:28:50:
0b:b7:39:2e:f9:e2:d5:c5:d4:ab:9f:c2:37:04:18:13:cc:3b:
5c:80:53:be:ca:52:b6:ed:88:3e:cf:bb:2f:52:94:80:27:7c:
86:bb:dd:cf:29:6a:50:aa:47:81:b0:ce:19:a7:9d:ed:83:df:
22:04:eb:b1:0f:73:03:2e:09:67:fd:9c:ec:63:98:91:01:54:
50:e0:ee:4e:b6:15:8c:0a:08:85:9c:05:7d:af:18:68:65:a4:
09:ba:a7:7a:c8:38:24:ef:ed:5c:a8:00:6a:6d:82:36:6e:6c:
b3:54:eb:38:58:bd:4b:2b:c2:98:81:54:c4:bf:83:a8:85:c9:
2e:79:fa:c0:81:a0:a9:2d:72:69:cb:a5:3b:84:c0:12:61:0a:
aa:2a:1f:38:ec:69:a3:d9:05:6a:68:1c:fb:71:fe:75:31:0b:
18:88:7f:05:6b:ec:98:a0:0c:e0:b7:a0:52:5f:c5:e2:6e:d1:
ca:7c:fa:6c:0e:22:85:50:55:aa:c6:9f:d4:5a:8e:33:12:96:
15:4a:37:c3:86:c0:80:de:55:12:9e:8c:ea:c5:01:67:38:62:
c1:90:00:eb:70:8e:ec:18:a6:67:b9:ab:d2:40:22:64:e1:17:
f8:39:d0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:27:10 2026 by rpki-client