
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/76DDA85AFE5211EC8F4A4F16C4F9AE02.roa
File: 76DDA85AFE5211EC8F4A4F16C4F9AE02.roa (raw, json)
Hash identifier: 1LYSJbL5brDy2VQLSkF8A4eEC/J9C8LJr8XVMvjnSvY=
Subject key identifier: 21:BA:20:E5:36:4A:21:BF:67:23:EE:57:18:D5:DF:0D:26:F0:F6:C4
Certificate issuer: /CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
Certificate serial: 0688
Authority key identifier: BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/76DDA85AFE5211EC8F4A4F16C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:49:30 +0000
ROA not before: Sat 01 Mar 2025 00:52:17 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 8075
IP address blocks: 113.197.64.0/24 maxlen: 24
113.197.65.0/24 maxlen: 24
113.197.66.0/24 maxlen: 24
113.197.67.0/24 maxlen: 24
203.84.134.0/24 maxlen: 24
203.84.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl
rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 22:34:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1672 (0x688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151F3B, serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
Validity
Not Before: Mar 1 00:52:17 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a40ba9-99f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:67:2b:ea:33:98:35:3c:58:36:8b:52:9e:
6f:0a:4f:df:08:38:b7:25:ea:94:ad:ea:d4:fc:97:
ee:ad:1f:30:33:9a:d0:e9:f7:f4:9d:e7:b3:95:0a:
7d:90:51:8c:ee:29:f5:10:31:41:ff:3e:bc:cd:f6:
fd:8c:4f:bd:57:40:a3:d4:8c:2b:66:d2:52:63:d2:
78:b2:38:57:98:85:39:8b:7f:79:df:83:c3:eb:52:
73:33:0d:60:31:9a:f8:12:05:8c:0b:70:ea:cf:45:
10:ec:95:5d:7c:a7:eb:e2:ea:86:a7:d6:f3:22:3a:
62:50:d6:a1:97:9b:98:4b:c7:0f:44:c4:7d:c8:34:
aa:88:2e:c7:cc:14:a0:77:0e:77:68:a8:2f:b7:10:
8a:c5:52:54:07:9a:a2:ed:91:e4:35:7f:fc:b4:7f:
58:ba:b8:72:6f:b6:32:7f:9b:e3:ce:38:53:04:7a:
3c:86:3f:33:1e:dc:6b:5b:f8:6a:d3:40:ab:54:bd:
24:26:6d:89:7f:93:1b:bb:93:76:6d:e8:1d:36:69:
51:85:dc:88:84:c9:18:12:ac:0a:f7:4e:2e:ae:a8:
47:a7:cb:92:6c:31:15:22:87:8a:95:10:f1:04:7a:
be:fc:ac:72:89:05:ad:05:f0:ea:dd:31:28:93:d4:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BA:20:E5:36:4A:21:BF:67:23:EE:57:18:D5:DF:0D:26:F0:F6:C4
X509v3 Authority Key Identifier:
keyid:BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/76DDA85AFE5211EC8F4A4F16C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
113.197.64.0/22
203.84.134.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:13:09:a8:b3:16:6a:af:09:28:43:f6:95:66:61:ea:03:77:
5b:ea:0e:e6:32:23:e5:a9:ae:99:c8:4d:ed:8d:85:8a:ae:a6:
02:64:02:59:e0:3d:61:b1:ef:ab:5a:af:0e:27:6e:8d:9c:53:
38:69:60:c4:7e:07:c8:48:90:fb:e7:43:6c:cc:25:38:3c:6b:
8e:8d:ec:f7:79:cd:c2:7f:fd:af:69:04:81:d0:f3:90:ab:56:
a9:48:dc:db:70:1a:cc:91:11:a9:3f:7c:ce:e5:7c:1b:ec:a5:
c2:8b:ce:a7:72:c5:8c:64:a3:46:e3:06:8f:17:c8:85:3c:43:
1a:2c:d1:5b:7b:4f:de:a5:25:49:d4:fb:a9:7a:a2:31:16:e0:
5f:4f:08:1d:73:8d:4e:3d:75:bd:a7:fd:ff:9b:aa:6f:36:c4:
68:a0:5e:55:4b:b9:87:22:49:1a:e9:48:9d:d1:79:47:4e:fb:
3c:cc:58:d2:56:a9:2f:be:8d:7b:d7:2f:ac:e1:1e:9b:d0:64:
3d:a4:e2:1a:29:eb:ac:e7:25:02:33:41:d6:0e:80:54:2b:7e:
06:05:da:88:41:37:5e:ba:dd:a7:ae:d5:28:25:0f:06:06:ae:
f7:65:f0:cd:65:af:c4:52:f4:18:d3:3f:e1:8c:61:af:75:67:
4a:65:88:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:16:13 2026 by rpki-client