
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/94DAF6C241DE11F1A57436B1B5833773.roa
File: 94DAF6C241DE11F1A57436B1B5833773.roa (raw, json)
Hash identifier: 9AeXOOMXpBY5Hw+qh02itkG4wf9hqR+y5ENFHPEiYrI=
Subject key identifier: CD:B1:9E:08:D6:C3:C6:DE:B4:4B:6F:60:AD:72:7A:20:A6:54:A8:84
Certificate issuer: /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Certificate serial: 022C
Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/94DAF6C241DE11F1A57436B1B5833773.roa
Signing time: Fri 31 Jul 2026 16:20:11 +0000
ROA not before: Fri 31 Jul 2026 16:20:11 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 24434
IP address blocks: 137.219.0.0/16 maxlen: 16
137.219.0.0/18 maxlen: 18
137.219.64.0/18 maxlen: 18
137.219.128.0/18 maxlen: 18
137.219.192.0/22 maxlen: 22
137.219.196.0/22 maxlen: 22
137.219.200.0/22 maxlen: 22
137.219.204.0/22 maxlen: 22
137.219.208.0/22 maxlen: 22
137.219.218.0/24 maxlen: 24
137.219.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Validity
Not Before: Jul 31 16:20:11 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6ccb3b-a3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f5:6e:e2:2f:3f:8d:f1:9a:89:3f:35:eb:9b:
c8:63:7f:b8:70:30:4c:c8:9c:48:36:6a:94:bf:57:
dd:b5:6a:a5:3c:85:eb:59:d1:a3:0d:8d:b5:c4:a1:
46:98:65:41:6f:7d:f2:c0:fb:7a:30:33:27:96:59:
e3:a9:1d:2e:4a:ea:70:da:b6:aa:55:8b:a4:f1:78:
52:a7:d4:d6:44:61:d2:96:49:52:4f:2b:86:91:20:
e3:16:b5:fc:ec:bf:aa:25:57:f9:0b:e1:5a:fc:4c:
5e:1a:5e:0e:0c:61:ab:a2:2f:b6:ed:92:21:63:70:
bc:8a:a8:fe:29:cd:ab:1c:69:74:7f:9a:fa:a0:cf:
15:7d:bf:0f:28:f5:45:8e:6a:f6:08:04:f9:36:ad:
2d:08:f1:ca:d8:fe:94:77:b6:16:05:e9:72:2f:92:
f3:bf:da:77:fc:c7:db:25:c9:d5:9d:90:c4:90:82:
c2:e6:af:de:36:fe:2b:3c:f6:60:13:37:26:95:ac:
6a:85:51:2c:0d:f4:e4:db:a2:bc:d8:97:c5:be:c4:
2f:bf:23:26:85:ed:c6:66:a6:09:31:bd:1d:a1:c7:
62:30:fe:94:44:b1:96:44:6e:7d:0a:ad:e8:db:7e:
4b:fd:59:55:8a:9e:6e:8e:99:5f:a9:4a:26:11:ce:
97:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B1:9E:08:D6:C3:C6:DE:B4:4B:6F:60:AD:72:7A:20:A6:54:A8:84
X509v3 Authority Key Identifier:
keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/94DAF6C241DE11F1A57436B1B5833773.roa
sbgp-ipAddrBlock: critical
IPv4:
137.219.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c1:d3:60:f3:e1:ce:ca:87:d0:10:c0:54:3a:cb:2d:44:0e:59:
a6:0c:3f:b0:a2:b3:2c:a1:1d:e2:86:a2:d9:6b:c6:82:2f:81:
84:93:a5:9b:fa:0c:dd:30:dc:8b:17:d6:29:ae:ca:fc:c5:0d:
56:d2:bc:b2:e6:7f:86:36:39:0f:33:cb:be:c9:61:74:ce:f2:
76:9b:89:b1:08:19:3a:89:e7:01:f9:f5:cc:f5:30:be:c5:88:
46:5e:6e:6b:97:28:98:fd:aa:9f:73:29:b4:00:cc:4d:dd:59:
3d:f4:05:ab:17:3f:aa:6c:c6:52:51:e2:0c:69:68:f3:6c:b7:
27:20:c5:da:6c:68:e7:7c:95:a9:08:11:b8:3d:51:65:59:0a:
b0:2c:67:fe:1a:73:f2:24:ae:d4:17:9b:48:85:5e:4c:2e:86:
55:dc:8a:dc:fe:4b:24:05:1c:cb:cc:b2:e4:05:3d:f8:9f:47:
c5:6e:0e:fe:5e:a1:d7:94:0d:02:61:f2:f8:7d:28:2b:3e:19:
9a:5d:ae:26:8e:28:22:41:1a:18:6b:dc:16:2f:3a:b0:23:24:
75:33:cd:7b:d9:db:ae:ef:97:74:f9:94:e0:21:f5:00:09:34:
ec:78:67:34:8b:39:81:89:2d:a6:b2:ac:32:88:4b:b7:78:c7:
38:18:68:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:23 2026 by rpki-client