
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/64541796EA9411F0ABDAFDB7536F56BC.roa
File: 64541796EA9411F0ABDAFDB7536F56BC.roa (raw, json)
Hash identifier: ZEXbmxehPsUZcrBPIPWpMzQ3OYezMrFp7156JyvBZqM=
Subject key identifier: E3:71:31:F9:61:67:42:4C:01:91:9D:30:1D:45:C9:8A:15:CA:96:11
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3DA3
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/64541796EA9411F0ABDAFDB7536F56BC.roa
Signing time: Thu 06 Aug 2026 15:11:22 +0000
ROA not before: Thu 06 Aug 2026 15:11:21 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 139648
IP address blocks: 61.107.196.0/22 maxlen: 24
61.107.200.0/22 maxlen: 24
101.53.82.0/24 maxlen: 24
101.53.83.0/24 maxlen: 24
119.59.0.0/20 maxlen: 20
119.59.0.0/24 maxlen: 24
119.59.1.0/24 maxlen: 24
119.59.2.0/24 maxlen: 24
119.59.3.0/24 maxlen: 24
119.59.4.0/24 maxlen: 24
119.59.5.0/24 maxlen: 24
119.59.6.0/24 maxlen: 24
119.59.7.0/24 maxlen: 24
119.59.8.0/24 maxlen: 24
119.59.9.0/24 maxlen: 24
119.59.10.0/24 maxlen: 24
119.59.11.0/24 maxlen: 24
119.59.12.0/24 maxlen: 24
119.59.13.0/24 maxlen: 24
119.59.14.0/24 maxlen: 24
119.59.15.0/24 maxlen: 24
119.59.16.0/24 maxlen: 24
119.59.17.0/24 maxlen: 24
119.59.19.0/24 maxlen: 24
119.59.20.0/24 maxlen: 24
119.59.21.0/24 maxlen: 24
119.59.22.0/24 maxlen: 24
119.59.23.0/24 maxlen: 24
182.237.50.0/24 maxlen: 24
182.237.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 23:42:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15779 (0x3da3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Aug 6 15:11:21 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a74a419-e862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:74:0d:85:fa:dc:13:81:c6:6d:cd:9b:b4:
5f:d3:ac:d8:e5:94:d5:24:11:18:57:82:41:4f:ad:
80:2c:a3:f0:3d:ae:43:99:69:e1:e6:54:68:4e:b1:
8b:b2:a7:18:8d:ec:cc:72:1d:8d:b7:5b:74:d2:f4:
9a:32:90:29:36:d5:95:5c:d5:ca:8e:10:13:77:5d:
e9:2d:b8:34:1f:96:ce:6e:5b:bb:49:0c:24:17:16:
f7:7d:e6:c7:39:fe:2d:11:0a:b0:d7:10:9e:4a:7e:
d0:40:8c:6b:ad:09:26:74:a0:9d:8e:63:cb:9d:d0:
c1:34:ff:b6:cc:cc:d1:f8:19:3a:26:45:13:fd:06:
dd:92:8c:6b:ad:38:8d:da:a9:84:8f:f0:0c:44:d5:
e5:3e:c3:ba:3c:92:b9:63:b3:be:27:71:30:f3:27:
02:a8:08:bd:5c:28:80:d6:e9:e8:2e:83:3b:e6:9a:
15:5a:10:a0:74:11:51:37:ed:3f:fb:9c:8e:4f:66:
1e:ce:12:67:73:63:6c:0b:72:45:b2:3e:de:2b:7a:
33:1c:79:3b:3e:99:d1:51:f2:c9:c3:db:bf:6a:60:
4e:9a:3c:6b:fa:0a:7d:ba:57:ce:24:ae:90:72:db:
d7:58:d7:99:8d:10:36:da:f7:d0:9b:5a:a0:2a:ae:
35:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:71:31:F9:61:67:42:4C:01:91:9D:30:1D:45:C9:8A:15:CA:96:11
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/64541796EA9411F0ABDAFDB7536F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
61.107.196.0-61.107.203.255
101.53.82.0/23
119.59.0.0-119.59.17.255
119.59.19.0-119.59.23.255
182.237.50.0/23
Signature Algorithm: sha256WithRSAEncryption
68:7e:38:09:3c:9e:84:d8:6f:0d:4b:b3:22:4a:30:08:7c:ea:
68:45:8d:d5:53:58:fc:92:7c:7d:08:bd:04:e9:ff:8b:a4:b8:
f3:f3:3f:41:89:46:ab:0d:3d:0d:f6:d5:0f:39:76:79:47:e7:
b6:31:69:d4:86:10:0a:92:e6:81:93:ec:f0:a2:eb:d5:98:20:
6a:93:2b:57:85:29:43:24:11:ba:8a:68:53:e8:55:23:1e:e9:
5b:61:71:36:db:ea:c7:22:f7:de:77:10:d8:8e:c2:b5:21:b9:
e6:db:ad:81:54:0c:6a:4e:7c:cc:ed:4f:44:50:d5:a4:41:5d:
a5:e5:f8:f4:0c:fb:d0:86:e6:cc:bc:d0:9f:d0:db:ae:64:02:
62:e5:f0:e7:2a:77:32:12:47:64:39:5c:c6:94:d7:f9:8b:51:
0d:d4:77:79:14:fb:69:7c:1b:43:6c:56:5f:7b:57:a4:b6:ed:
77:02:49:92:cb:79:da:76:f5:1e:98:70:41:98:2c:7a:d8:8c:
4c:7f:d3:80:f2:d4:c7:d6:57:0d:72:64:00:35:8d:f8:69:d4:
53:18:c5:a6:60:64:eb:7e:21:4d:9e:7f:e3:cb:b3:1f:e6:47:
13:75:90:27:62:dd:87:ff:f8:81:2d:b1:6e:28:d0:e8:12:9c:
80:16:ad:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:35:31 2026 by rpki-client