
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/F9ED3D7AACA711F1B77415A05D11F970.roa
File: F9ED3D7AACA711F1B77415A05D11F970.roa (raw, json)
Hash identifier: 21btxPBvuw+r5UWtSpWGMKVfbzMav7J48d80mcsW+/U=
Subject key identifier: DA:3C:16:74:3F:55:05:AD:14:9C:25:0D:C0:EE:7F:E2:2E:76:96:7E
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3E65
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/F9ED3D7AACA711F1B77415A05D11F970.roa
Signing time: Wed 09 Sep 2026 23:42:20 +0000
ROA not before: Wed 09 Sep 2026 23:42:20 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 216138
IP address blocks: 61.251.184.0/24 maxlen: 24
101.53.67.0/24 maxlen: 24
101.53.79.0/24 maxlen: 24
101.53.83.0/24 maxlen: 24
101.53.85.0/24 maxlen: 24
103.6.75.0/24 maxlen: 24
112.196.196.0/24 maxlen: 24
112.196.198.0/24 maxlen: 24
112.196.204.0/24 maxlen: 24
112.196.205.0/24 maxlen: 24
112.196.210.0/24 maxlen: 24
112.196.216.0/24 maxlen: 24
112.196.217.0/24 maxlen: 24
182.237.56.0/24 maxlen: 24
182.237.57.0/24 maxlen: 24
182.237.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 14:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15973 (0x3e65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Sep 9 23:42:20 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6aa1eedc-71c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:97:41:04:51:04:b0:be:a6:25:4e:c0:60:
48:8b:c6:54:51:d1:e8:d6:cd:e6:b3:3f:0e:ca:44:
a5:cb:ba:1a:69:b7:d6:6b:be:62:21:84:ad:06:e6:
74:d4:09:4b:3c:85:f2:5d:88:e9:56:7e:7c:21:e1:
55:87:fb:5f:80:1a:1b:3a:f4:66:40:41:8e:95:44:
a8:4d:ed:6a:74:d7:8c:9b:ad:4e:d9:7d:e6:76:d5:
41:3d:f9:b0:e4:8e:e0:18:84:4f:70:67:bd:a9:22:
c9:73:34:98:c3:3a:fc:e8:80:0e:39:10:02:67:e8:
70:10:33:78:0e:d2:3d:7a:2b:6c:e8:8e:fc:6c:2e:
7a:54:e9:2e:79:10:39:67:09:fb:ca:6e:1c:81:5f:
7a:65:29:dd:9b:7f:56:8b:ed:44:2b:91:5b:de:f4:
8f:c3:01:f3:1b:02:10:99:23:e4:2b:05:c2:ab:2d:
34:c0:a9:79:16:6c:15:76:63:76:38:51:d7:c5:d6:
80:d1:b5:1e:d2:23:ed:97:37:5b:99:09:c6:52:05:
63:64:23:f5:c8:7b:fd:5e:2c:2d:7e:f0:2f:28:97:
95:a9:c8:63:79:6d:79:56:e1:77:07:b6:17:fa:b0:
30:1f:41:ea:83:71:6f:a9:65:34:b2:1f:af:aa:48:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3C:16:74:3F:55:05:AD:14:9C:25:0D:C0:EE:7F:E2:2E:76:96:7E
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/F9ED3D7AACA711F1B77415A05D11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.251.184.0/24
101.53.67.0/24
101.53.79.0/24
101.53.83.0/24
101.53.85.0/24
103.6.75.0/24
112.196.196.0/24
112.196.198.0/24
112.196.204.0/23
112.196.210.0/24
112.196.216.0/23
182.237.56.0/23
182.237.59.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:94:fe:87:c8:c1:9c:12:4a:c3:08:1d:af:31:1f:de:6a:b1:
36:cc:a2:82:26:ae:d4:01:4e:50:2a:09:29:29:93:43:62:f7:
11:b2:bf:11:76:46:98:0a:a8:36:cd:90:34:a4:d4:3b:e0:d5:
15:d3:2f:bc:6f:d1:78:4b:78:e8:a7:36:15:24:1b:c8:6d:24:
0d:4c:b1:1b:c2:eb:e0:89:76:54:64:22:56:ad:11:90:40:d4:
97:e0:55:a9:2e:eb:b2:3f:53:23:96:ba:20:6d:79:71:3f:93:
d4:10:cc:72:d9:60:d2:f0:ad:98:f5:3d:d6:60:f8:80:cd:a5:
0d:fa:0c:ec:41:5a:33:4e:d9:a4:f2:94:d7:96:2a:79:d2:34:
d2:7a:d3:ae:ce:cb:98:75:ea:50:76:91:a2:93:91:01:c3:67:
a2:d5:a3:33:5d:8b:86:82:73:73:6b:97:9e:09:04:d6:66:ea:
28:37:89:f0:ca:23:eb:9e:1a:8c:69:9c:e8:fa:f9:40:b3:9e:
10:5a:ac:21:9f:83:a2:95:dd:c9:ea:b5:1e:07:b8:60:b4:5b:
6d:e6:fb:42:1a:26:bc:1a:3a:b6:a3:72:e5:66:65:67:d2:18:
18:5a:52:c5:84:de:a2:7b:d5:f1:57:ef:2c:17:5c:50:cc:35:
39:5d:1c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:11:37 2026 by rpki-client