
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa
File: 93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa (raw, json)
Hash identifier: MNwhHxTyJ2KpHlbNnomcdW/+tA1P4xNWPkkDWP3pJro=
Subject key identifier: 09:6E:D1:D3:DB:B7:E9:BA:8F:E6:CC:C2:C0:FE:D1:96:BD:1B:56:F0
Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Certificate serial: 1473
Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa
Signing time: Thu 10 Sep 2026 17:33:31 +0000
ROA not before: Thu 10 Sep 2026 17:33:31 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 4637
IP address blocks: 144.130.128.0/20 maxlen: 24
192.74.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 16:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5235 (0x1473)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Validity
Not Before: Sep 10 17:33:31 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6aa2e9ea-610a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:a5:72:47:70:49:09:20:e1:ea:fd:53:98:
9b:ea:6f:e4:cc:ab:10:05:0c:d6:5e:31:c3:d3:8f:
1e:91:5a:ff:d9:a9:da:8e:de:17:6a:fa:7b:73:fd:
05:42:c9:43:cc:6d:16:4b:07:b6:d9:38:4e:6e:75:
d6:87:87:1a:a6:fa:66:99:69:80:1c:e4:6e:b0:0f:
74:52:80:0a:c1:51:7b:1a:40:6a:27:7e:64:97:1b:
01:82:15:24:14:5f:ae:0f:35:8e:c8:a5:12:6c:76:
b5:6e:24:1f:97:8d:9c:d2:67:06:32:5d:f0:a9:b3:
e5:17:d3:1a:18:c6:76:f5:2e:aa:07:c4:fa:52:22:
12:49:ff:30:c6:ae:79:aa:6b:0f:ff:f6:78:ba:4f:
f4:c5:9f:53:59:e0:5f:94:5f:19:14:f3:96:82:88:
de:e2:e1:40:a6:ae:cf:31:30:23:99:eb:e7:63:27:
46:7f:c7:dc:f8:a4:14:17:49:ad:20:b8:17:8a:9f:
64:df:2f:18:c1:a5:81:da:bd:fe:8d:62:2f:cf:c5:
e7:10:58:a9:82:b6:c8:4a:92:1d:ac:a3:aa:da:7d:
71:90:68:ba:1d:bf:5d:5c:65:24:bc:40:0d:bd:67:
f1:8f:c6:20:88:90:48:d8:a9:cd:d2:e8:34:19:87:
89:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6E:D1:D3:DB:B7:E9:BA:8F:E6:CC:C2:C0:FE:D1:96:BD:1B:56:F0
X509v3 Authority Key Identifier:
keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
144.130.128.0/20
192.74.139.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a2:27:2e:0c:f2:2c:2c:66:1e:8e:57:98:80:ba:7b:bb:20:
82:dc:98:12:b7:09:05:5f:c6:11:ab:4d:26:a2:ca:24:3b:b3:
79:a6:80:9c:c9:eb:87:45:42:4f:02:92:df:6b:d1:cf:9b:c3:
57:54:14:97:a0:cc:c2:9c:0f:7c:06:bb:8c:25:9e:17:52:fa:
8d:66:7b:3c:27:f4:7b:5b:db:cb:3e:bc:17:9b:17:42:9f:74:
e6:63:80:dc:5e:9e:ec:7e:f1:fd:42:43:e8:d2:84:e9:73:65:
00:06:c1:df:a8:3d:9a:3e:a1:6d:0d:e8:ad:f5:0e:90:8d:7e:
6d:33:6e:1e:8d:f9:50:fd:70:56:c2:6a:f1:5f:0a:ab:b6:a6:
d2:68:ba:8a:34:17:7c:df:96:9b:96:0b:9d:ae:5d:7e:78:07:
a3:e0:68:90:a5:fc:42:6f:77:e4:63:4e:14:a2:a7:57:28:56:
9c:6a:6e:60:10:86:9a:1a:ab:15:cb:e7:31:83:12:5b:57:ab:
ee:40:a7:eb:fc:30:52:3a:88:4b:84:4a:40:a5:77:cc:55:2f:
83:c2:a0:7a:e0:36:5a:7c:95:1c:ff:ea:ed:f2:b5:40:98:fd:
1d:22:5f:10:5a:be:35:49:95:aa:c0:97:1d:29:5c:1f:7a:a3:
a7:d5:4a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:36:16 2026 by rpki-client