
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/1EA5984A0BE111ED9E3AA135C4F9AE02.roa
File: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (raw, json)
Hash identifier: PAqkmFF7NdZLc+WBtc68ZNEhsmCDHgoBRZN4pVqjKP8=
Subject key identifier: FA:B7:A3:45:08:03:66:4D:3A:BE:CA:12:83:B6:3F:D9:E4:B6:0C:6E
Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Certificate serial: 0385
Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/1EA5984A0BE111ED9E3AA135C4F9AE02.roa
Signing time: Thu 21 May 2026 01:31:43 +0000
ROA not before: Thu 21 May 2026 01:31:43 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 137831
IP address blocks: 143.92.64.0/19 maxlen: 19
143.92.71.0/24 maxlen: 24
143.92.92.0/24 maxlen: 24
143.92.93.0/24 maxlen: 24
143.92.96.0/24 maxlen: 24
143.92.97.0/24 maxlen: 24
143.92.98.0/24 maxlen: 24
143.92.100.0/23 maxlen: 23
143.92.108.0/23 maxlen: 23
143.92.108.0/24 maxlen: 24
147.136.132.0/24 maxlen: 24
147.136.134.0/24 maxlen: 24
147.136.135.0/24 maxlen: 24
147.136.184.0/22 maxlen: 22
147.136.184.0/24 maxlen: 24
147.136.185.0/24 maxlen: 24
147.136.186.0/24 maxlen: 24
147.136.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 06:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901 (0x385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Validity
Not Before: May 21 01:31:43 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a0e607f-8304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:89:33:53:06:2a:da:27:3f:de:48:cc:6a:93:
55:de:b3:22:ad:b9:66:63:4e:31:48:8c:43:ef:20:
f9:58:cf:7b:03:90:e5:31:dc:3f:9f:3c:e5:21:ed:
22:5d:1a:02:59:b9:b4:f0:7d:d2:e2:f4:24:8b:5b:
60:73:79:34:80:7e:74:ae:05:8e:28:be:a2:b4:32:
93:12:81:ca:f7:da:25:ad:c7:cc:cb:16:26:55:9e:
47:ca:e6:a8:55:6a:b9:4f:90:72:3d:59:5d:3f:0b:
3a:9b:aa:a9:d9:fb:96:da:c9:6b:b7:c9:4a:bd:74:
df:a6:36:55:bd:6d:2b:60:cb:0a:5b:9f:75:85:b8:
be:a2:a8:d0:62:71:8c:2e:e0:93:5c:e8:47:0d:05:
c2:05:a2:a4:f1:06:e9:3a:36:45:db:3f:08:55:0a:
7e:0b:ad:05:e6:08:17:41:c9:63:db:a5:c0:29:ad:
3c:df:68:29:21:e8:35:96:46:de:3d:3d:b7:91:8c:
43:4b:b6:95:0e:b5:fd:5d:48:42:34:76:61:d8:d2:
e8:d5:01:f3:ba:5c:34:81:66:45:22:4e:22:3d:58:
c2:96:8b:64:b4:8e:02:7e:7e:61:34:a5:54:4a:56:
f6:0e:23:34:bd:88:6a:41:94:1e:aa:55:b1:ae:e8:
d2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B7:A3:45:08:03:66:4D:3A:BE:CA:12:83:B6:3F:D9:E4:B6:0C:6E
X509v3 Authority Key Identifier:
keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/1EA5984A0BE111ED9E3AA135C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
143.92.64.0-143.92.98.255
143.92.100.0/23
143.92.108.0/23
147.136.132.0/24
147.136.134.0/23
147.136.184.0/22
Signature Algorithm: sha256WithRSAEncryption
03:9b:09:c2:9e:3e:3d:e1:cd:75:45:4f:43:b8:2f:84:fb:d4:
b3:df:38:53:ae:79:65:17:3b:1d:1a:08:21:75:16:cc:01:16:
02:e3:cc:52:d2:80:e3:5c:21:13:a7:8e:c3:d1:93:c9:47:13:
f5:01:8d:52:90:4e:3e:95:b6:1d:23:a0:bd:e3:68:87:3d:74:
ad:f6:57:0e:98:c0:40:fa:fa:28:20:ba:8d:6a:d4:6e:86:cb:
8c:dc:09:16:e7:b3:a3:c7:3b:6b:e8:ab:89:e2:94:19:a5:db:
20:1b:b6:b7:e3:93:17:f5:e8:9e:b7:21:e5:05:93:1b:c2:01:
51:83:80:5b:87:e0:f3:b7:c8:7d:b3:5f:ed:66:99:b0:63:67:
16:eb:2b:44:89:f6:c0:c8:08:df:28:1e:22:1d:16:64:cd:a7:
b5:35:67:12:ef:11:14:f5:a1:95:e3:4b:62:f2:26:43:61:49:
ca:33:51:8a:03:55:6e:c3:0c:52:8e:4d:b9:a1:e0:5d:a0:77:
32:20:9a:db:c8:05:44:26:a5:9e:48:84:08:fe:1a:33:b0:ba:
eb:45:f1:31:9b:4d:fc:08:81:87:9b:70:e9:4a:d7:f2:b3:a2:
8f:ff:99:87:b8:42:7a:1a:49:37:65:3a:b9:2c:d5:cd:60:86:
13:37:05:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 01:43:04 2026 by rpki-client