
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa
File: 3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa (raw, json)
Hash identifier: yp2GNRBW0NjoaaOZb8eQwby83Uf2YcRRk6siCmApIlM=
Subject key identifier: 81:26:98:14:40:91:9D:A9:3D:DB:DD:22:E6:1A:24:71:31:F7:55:00
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3D9E
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa
Signing time: Thu 06 Aug 2026 15:11:11 +0000
ROA not before: Thu 06 Aug 2026 15:11:11 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 133448
IP address blocks: 101.55.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 14:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15774 (0x3d9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Aug 6 15:11:11 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a74a40f-446f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:d1:ca:a8:87:8e:54:ab:64:5d:79:c0:87:
8b:a6:07:88:bd:8a:b2:27:d6:25:7e:f9:87:6a:86:
fe:9c:75:ab:6c:ce:2f:83:28:6b:0d:53:2c:aa:78:
0e:e3:6c:8c:60:4b:26:0f:73:73:4b:85:4b:d1:db:
98:c2:fa:d2:17:9c:0b:97:cf:62:4a:72:9c:8a:95:
7d:28:e7:81:35:27:7e:8a:af:cc:e5:ae:40:20:07:
69:46:49:ff:1f:39:21:15:16:99:39:e7:41:c2:f3:
0d:89:4d:a2:6d:14:c3:89:4e:18:8a:5a:e5:95:e4:
0d:ec:4d:00:1d:0e:a3:c3:3d:b6:0a:e3:39:38:e2:
74:7b:04:4c:85:e4:ed:f6:c2:4d:d3:36:85:04:ef:
82:67:7c:b4:0f:5e:cc:9d:43:7a:5e:70:ef:58:7c:
74:56:49:6c:42:eb:71:12:b3:1c:7d:b7:34:c2:f0:
47:37:8f:97:eb:f1:93:12:b4:0c:e7:80:a4:c6:fd:
09:61:76:38:6c:30:b3:ed:d4:85:25:bb:9a:52:b1:
33:92:e8:11:63:74:49:af:89:32:1e:1c:a2:b3:24:
78:07:60:5f:d7:64:5a:a6:59:ee:07:67:7c:bd:f8:
97:63:d2:93:69:4e:8d:a1:4d:01:7e:5d:fc:e8:13:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:26:98:14:40:91:9D:A9:3D:DB:DD:22:E6:1A:24:71:31:F7:55:00
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
101.55.59.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:57:c4:4c:0f:41:ab:af:f5:58:1a:00:e2:f8:59:00:25:3e:
82:58:d5:f2:b0:77:ad:bc:5a:dc:76:4a:6c:68:65:b0:96:98:
f9:5d:35:2c:cd:83:4c:3c:bb:dd:d9:82:e0:06:8d:cf:06:fc:
c7:b1:7f:d5:e4:57:1b:a0:ef:8b:34:64:1b:e9:40:06:92:c5:
1a:ce:9e:26:ea:be:75:f2:fc:4f:4f:68:08:fb:55:3a:da:c7:
28:83:98:32:3b:44:ab:e5:e4:93:89:4f:cb:a4:9e:c7:5c:53:
2c:86:40:71:44:08:37:e3:4b:e9:b3:af:f0:73:bd:91:8f:f7:
21:87:6d:82:be:d8:70:23:05:15:32:21:a7:cc:7d:03:19:5e:
88:7f:ac:01:0d:ca:75:4b:43:9d:7f:be:64:bb:88:51:e5:95:
83:28:62:ff:e8:6d:1f:ba:e6:38:9d:82:b7:8f:3f:2d:e2:96:
3a:c9:af:49:8f:64:04:4d:db:34:1d:1c:83:c6:a7:1f:27:33:
f9:79:4f:18:e5:8f:0c:6f:36:d0:44:4b:ab:94:c7:3a:b2:3d:
8f:8e:62:94:c3:20:ac:27:cb:60:f9:02:b7:75:30:20:b2:71:
2f:83:b4:2e:29:8d:b3:65:c2:31:33:4b:72:60:a0:e3:c0:61:
4f:3a:e1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:12:43 2026 by rpki-client