
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/5EFDD3C4641511EF92F73520C4F9AE02.roa
File: 5EFDD3C4641511EF92F73520C4F9AE02.roa (raw, json)
Hash identifier: qEfH7eQ/C2gOZPU1jxCU+fijhvqs0pReImF1DTY96Jg=
Subject key identifier: 33:BB:F0:EC:A1:41:1F:14:A5:65:4A:20:52:EC:FC:4C:EE:15:B6:D2
Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Certificate serial: 09F7
Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/5EFDD3C4641511EF92F73520C4F9AE02.roa
Signing time: Thu 02 Apr 2026 20:23:33 +0000
ROA not before: Thu 02 Apr 2026 20:23:33 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 38818
IP address blocks: 49.0.128.0/19 maxlen: 19
49.0.168.0/21 maxlen: 21
49.0.176.0/22 maxlen: 22
203.34.37.0/24 maxlen: 24
203.174.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 19:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2551 (0x9f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Validity
Not Before: Apr 2 20:23:33 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69ced045-b431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:69:7e:de:f0:1a:45:6f:38:b8:ef:96:59:7e:
1a:05:17:f5:81:47:1c:42:cb:2b:06:3f:27:a4:bf:
5d:da:0a:55:c8:11:d6:66:2c:50:6f:a2:b6:4b:ca:
fb:2e:10:54:8e:8c:55:23:16:16:9a:d4:f0:0d:f4:
d9:a4:e6:29:b5:72:c0:6d:b0:dc:4a:eb:e0:4e:ed:
6e:b7:49:79:da:1c:35:4b:6b:b6:ca:17:c9:7c:69:
39:39:9b:57:ff:5f:1c:de:9d:f0:97:55:b9:ca:96:
3f:03:ce:4a:40:c0:5a:98:b4:ae:2c:3f:7f:77:95:
a8:4b:00:ac:f5:8f:82:78:c1:04:f8:cc:3e:9f:94:
ef:64:84:cf:8e:1b:9c:26:78:4e:c5:c6:29:e4:61:
c8:12:83:2e:96:ca:99:a2:13:ed:8b:ae:3b:bb:12:
27:d0:78:f8:47:2b:b2:5d:7c:38:41:e7:21:c8:2b:
31:af:04:75:50:98:07:fd:3b:35:ec:fc:50:5c:6a:
1f:2b:96:b4:95:ff:a1:0f:90:b8:93:70:c9:19:e3:
49:fc:37:ff:93:a0:fd:42:17:32:02:59:1d:d5:44:
2d:77:8e:7c:8a:29:1d:33:85:f7:fd:07:ec:c8:ed:
94:e9:17:29:4f:ea:71:d0:96:23:cd:5c:9c:3f:85:
55:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BB:F0:EC:A1:41:1F:14:A5:65:4A:20:52:EC:FC:4C:EE:15:B6:D2
X509v3 Authority Key Identifier:
keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/5EFDD3C4641511EF92F73520C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.0.128.0/19
49.0.168.0-49.0.179.255
203.34.37.0/24
203.174.26.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:89:26:aa:b4:2c:2c:e6:9b:91:94:f5:5c:ce:f3:cf:fe:13:
4b:54:bc:1e:ae:18:b7:5a:42:3c:59:24:5c:d0:fa:22:20:eb:
6a:e0:e0:2c:22:06:c7:ea:58:fa:50:01:b0:ff:6a:48:e6:c8:
b8:2b:df:49:7d:34:90:d3:c9:bb:c2:fb:75:03:c8:b9:19:c0:
f7:1f:f8:42:4d:7a:bb:98:b6:15:12:3d:82:ed:79:b8:b4:e1:
55:c9:96:6c:54:89:84:9e:d3:8f:aa:b5:63:4a:79:06:04:c0:
f2:b5:5a:97:55:d5:a1:fa:b6:bd:4c:71:a7:81:8d:39:ef:01:
eb:0d:6a:56:ee:3b:29:5a:4e:67:25:f4:7b:57:e1:f4:91:fd:
5b:de:5d:58:be:79:44:9b:db:47:6a:31:1c:28:9d:44:72:c2:
9a:f5:be:82:58:7f:41:28:5c:89:d4:20:5c:50:ab:45:73:be:
c0:4c:1b:0e:b8:5c:b1:f7:2b:9a:98:4a:51:9a:73:63:38:76:
f0:b8:fe:89:12:20:a2:af:2e:94:64:ef:78:c3:02:a9:d5:59:
5e:e4:c7:0e:cd:29:ce:b9:59:05:9f:27:dd:68:07:02:4c:ce:
1a:b4:ce:e4:e6:05:04:93:11:7c:42:63:26:a5:6b:0f:77:41:
bc:9b:68:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:39:17 2026 by rpki-client