
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/EB67F10ACF0C11F1AD21C26F2266CEF9.roa
File: EB67F10ACF0C11F1AD21C26F2266CEF9.roa (raw, json)
Hash identifier: qFoFZl4nuEXjbLOyR2LpUkQ22C9p85+Ot3eFrRVw6KU=
Subject key identifier: EB:04:2E:9F:7F:A7:61:52:02:84:2D:81:89:B7:1E:BE:22:A6:A8:2E
Certificate issuer: /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Certificate serial: 0791
Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/EB67F10ACF0C11F1AD21C26F2266CEF9.roa
Signing time: Fri 23 Oct 2026 18:10:50 +0000
ROA not before: Fri 23 Oct 2026 18:10:50 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 9304
IP address blocks: 43.225.101.0/24 maxlen: 24
103.44.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 21:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1937 (0x791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183BBC, serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Validity
Not Before: Oct 23 18:10:50 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6adba32a-b0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:90:e1:ad:5b:5b:de:20:69:54:77:a3:af:c3:
92:76:2d:65:bf:0e:c4:16:75:ac:2c:0f:60:30:2c:
a9:9c:34:49:97:29:b0:bc:61:34:d3:99:c5:52:18:
9b:8f:cf:bf:b6:7f:88:57:d3:21:12:3e:75:0f:91:
4b:1c:8d:87:92:b2:7d:90:31:a2:97:e1:93:85:f7:
88:1c:88:af:9e:d3:f9:6f:d1:ae:0d:ea:4c:cb:b5:
ad:48:7b:3e:15:92:00:3a:28:36:6c:c8:0d:89:ea:
15:e5:ef:99:cf:34:47:49:13:5f:83:3e:57:eb:a2:
23:8e:a0:0f:28:6c:96:0b:79:95:cf:e3:8e:83:99:
04:f4:72:bf:33:44:c3:cc:32:43:74:bf:a8:e5:be:
54:95:fa:02:2c:81:e9:db:32:0e:68:f0:6f:c8:d8:
4a:bd:00:5d:f4:11:81:91:74:7c:96:11:c4:d7:70:
78:f6:f2:9a:92:4e:b6:23:56:b3:65:b5:0d:bb:35:
af:e8:c9:88:9e:8c:4e:77:5e:fa:f8:ac:3b:69:8a:
02:bb:83:28:4b:7c:ac:5b:3b:91:7b:ad:0f:75:94:
d3:37:9f:79:54:2d:5a:3f:7d:4c:1f:87:0e:16:a4:
2d:59:71:05:78:d3:e8:b8:5a:3b:5e:0f:1d:2e:b8:
e8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:04:2E:9F:7F:A7:61:52:02:84:2D:81:89:B7:1E:BE:22:A6:A8:2E
X509v3 Authority Key Identifier:
keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/EB67F10ACF0C11F1AD21C26F2266CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.101.0/24
103.44.60.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b7:4c:e1:35:cc:e3:10:10:98:ea:a9:46:21:9d:f5:ac:6c:
7f:1d:d0:3f:90:9d:55:e8:34:31:64:06:64:a5:0f:48:82:23:
a7:42:4e:3a:b2:a1:07:d9:c7:85:80:c4:68:e7:ca:2d:b5:26:
af:64:89:0c:03:d0:a6:d7:5a:5b:b7:43:d6:89:16:92:43:0f:
a8:6a:ee:02:01:60:db:49:eb:70:a9:25:cc:ac:5f:6f:fb:c3:
2c:09:9c:bf:76:83:06:c9:89:30:b0:9e:51:d2:8d:ec:d4:ca:
3f:f7:7f:8f:cd:35:e9:ad:42:df:29:b1:15:9c:e8:a1:5a:86:
36:82:c2:74:2e:26:97:b1:09:e2:32:6f:9d:15:fa:d7:34:ae:
3e:9f:f9:fb:1d:f4:8e:36:c8:17:c2:64:a7:6b:1f:38:5b:18:
60:8d:52:40:96:43:69:08:55:92:07:fd:0c:70:e4:ea:6d:09:
65:2a:c3:0a:c4:d3:f6:31:a5:ab:9e:eb:5e:4f:35:24:b6:3c:
c3:ec:0f:20:86:84:cd:03:30:46:5f:d1:6f:23:06:6c:aa:5f:
3f:d4:be:e6:f2:01:98:ab:c8:86:68:97:27:ea:f9:3c:87:70:
4f:83:25:cd:1f:f4:ae:eb:50:8e:dc:34:44:32:62:a4:7e:fd:
bc:93:92:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:11:55 2026 by rpki-client