
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/FBC7C3BC24DB11F18E6B9B14AD833773.roa
File: FBC7C3BC24DB11F18E6B9B14AD833773.roa (raw, json)
Hash identifier: HaSFcTdyVltIF7SeiiWh8O/2wgEJqq3VXl8LlDRKgjI=
Subject key identifier: 47:3E:6C:81:7B:D1:15:62:C7:C8:A0:D4:5F:69:03:CF:14:E9:AD:29
Certificate issuer: /CN=A9189D79/serialNumber=9FBBD23056168D1A517E996DC56F664A6EE52EA5
Certificate serial: 22
Authority key identifier: 9F:BB:D2:30:56:16:8D:1A:51:7E:99:6D:C5:6F:66:4A:6E:E5:2E:A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/FBC7C3BC24DB11F18E6B9B14AD833773.roa
Signing time: Wed 13 May 2026 09:42:25 +0000
ROA not before: Wed 13 May 2026 09:42:25 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 133139
IP address blocks: 146.88.85.0/24 maxlen: 24
146.88.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.crl
rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189D79, serialNumber=9FBBD23056168D1A517E996DC56F664A6EE52EA5
Validity
Not Before: May 13 09:42:25 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a044781-fda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:18:a4:b5:51:e1:22:af:cf:95:7a:d6:ee:a9:
d5:02:3f:f6:72:a0:b4:f2:45:9d:0f:b9:11:31:32:
b9:80:10:38:b9:d1:ca:73:ea:1e:1c:6d:de:ad:08:
de:26:23:ba:fa:14:41:8b:d0:a4:fb:ac:e5:f4:7d:
5c:ba:6a:d4:db:02:4c:3a:e8:8e:be:30:0a:31:31:
a9:b1:3d:3e:32:dd:d8:45:d1:a4:3e:e1:6b:61:90:
e8:f8:cc:0c:77:7b:e9:e0:b0:53:aa:b2:4f:a4:d6:
6e:00:b6:59:6f:ae:85:0d:64:e8:e9:83:65:cb:12:
ac:4e:d7:30:8d:49:a2:65:06:99:9c:bc:99:fc:47:
ab:e9:29:57:d8:d9:4f:c7:66:69:3c:77:58:4a:3b:
74:03:73:32:0d:8e:65:80:67:ea:e2:28:78:9c:da:
8a:ef:80:48:ba:c1:e7:8c:0c:9a:f6:91:a3:52:94:
5c:9c:d3:1e:a2:6a:26:87:84:b8:50:41:e8:0e:b6:
db:2f:f4:42:2a:2f:64:4a:e0:f3:b9:12:1e:35:8c:
f3:d6:a7:83:85:b9:ff:79:87:b9:a0:f6:df:64:a9:
7f:19:7f:3d:b8:3c:2d:b7:73:60:90:b0:a4:6f:69:
28:7b:af:59:d1:e8:e3:ac:09:be:44:05:3c:80:c8:
37:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3E:6C:81:7B:D1:15:62:C7:C8:A0:D4:5F:69:03:CF:14:E9:AD:29
X509v3 Authority Key Identifier:
keyid:9F:BB:D2:30:56:16:8D:1A:51:7E:99:6D:C5:6F:66:4A:6E:E5:2E:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/FBC7C3BC24DB11F18E6B9B14AD833773.roa
sbgp-ipAddrBlock: critical
IPv4:
146.88.85.0-146.88.86.255
Signature Algorithm: sha256WithRSAEncryption
15:fc:38:4c:a2:0b:3a:d5:60:57:0f:6b:1c:e3:72:dd:6e:56:
9f:18:f7:eb:f5:cf:8a:44:30:ed:b0:2e:83:e5:62:44:bd:3f:
52:bb:7d:97:5e:21:3e:78:f8:51:32:11:91:a4:17:af:84:3a:
f4:53:7e:fa:a6:cb:78:15:d7:d5:9f:09:e9:85:bb:6b:91:f6:
3c:85:1b:b7:24:cd:06:a5:ad:7e:78:cf:1c:a8:f1:d7:af:a0:
85:06:cb:02:98:69:5e:e3:51:fc:92:a5:1e:54:dc:4f:44:c6:
67:78:f7:96:c1:ed:48:83:db:84:2f:b3:28:80:12:50:7b:3b:
5d:b7:62:aa:70:19:7d:41:08:0b:d2:40:58:b1:59:1b:a5:63:
0e:af:ac:65:ed:77:50:2d:52:32:2f:cd:5e:33:cd:65:b8:7c:
cc:6a:c9:33:68:59:15:7b:bd:bb:19:64:cd:b3:06:dc:d4:fe:
c1:a3:70:57:b9:b5:da:93:db:23:7f:99:e7:0f:be:af:47:02:
1e:c6:8b:38:e3:c8:33:cc:cf:6e:74:3e:dc:f9:ec:25:a7:79:
a1:21:ce:b3:6d:f0:01:84:b8:02:73:7e:35:03:2e:04:20:1b:
aa:e2:37:01:13:d1:d9:1f:8e:10:c8:5b:76:e0:b1:4e:1d:60:
d5:f1:00:de
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
OUQ3OTExMC8GA1UEBRMoOUZCQkQyMzA1NjE2OEQxQTUxN0U5OTZEQzU2RjY2NEE2
RUU1MkVBNTAeFw0yNjA1MTMwOTQyMjVaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMDQ0NzgxLWZkYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDoGKS1UeEir8+VetbuqdUCP/ZyoLTyRZ0PuRExMrmAEDi50cpz6h4cbd6tCN4m
I7r6FEGL0KT7rOX0fVy6atTbAkw66I6+MAoxMamxPT4y3dhF0aQ+4WthkOj4zAx3
e+ngsFOqsk+k1m4AtllvroUNZOjpg2XLEqxO1zCNSaJlBpmcvJn8R6vpKVfY2U/H
Zmk8d1hKO3QDczINjmWAZ+riKHic2orvgEi6weeMDJr2kaNSlFyc0x6iaiaHhLhQ
QegOttsv9EIqL2RK4PO5Eh41jPPWp4OFuf95h7mg9t9kqX8Zfz24PC23c2CQsKRv
aSh7r1nR6OOsCb5EBTyAyDc7AgMBAAGjggJoMIICZDAdBgNVHQ4EFgQURz5sgXvR
FWLHyKDUX2kDzxTprSkwHwYDVR0jBBgwFoAUn7vSMFYWjRpRfpltxW9mSm7lLqUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5RDc5LzM4MUNBNzVDMjRE
QjExRjFCMUY1QkJBNUFDODMzNzczL243dlNNRllXalJwUmZwbHR4VzltU203bExx
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbjd2U01GWVdqUnBSZnBsdHhXOW1TbTdsTHFVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUQ3OS8zODFDQTc1QzI0REIxMUYxQjFGNUJCQTVBQzgzMzc3My9GQkM3QzNCQzI0
REIxMUYxOEU2QjlCMTRBRDgzMzc3My5yb2EwJwYIKwYBBQUHAQcBAf8EGDAWMBQE
AgABMA4wDAMEAJJYVQMEAJJYVjANBgkqhkiG9w0BAQsFAAOCAQEAFfw4TKILOtVg
Vw9rHONy3W5Wnxj36/XPikQw7bAug+ViRL0/Urt9l14hPnj4UTIRkaQXr4Q69FN+
+qbLeBXX1Z8J6YW7a5H2PIUbtyTNBqWtfnjPHKjx16+ghQbLAphpXuNR/JKlHlTc
T0TGZ3j3lsHtSIPbhC+zKIASUHs7XbdiqnAZfUEIC9JAWLFZG6VjDq+sZe13UC1S
Mi/NXjPNZbh8zGrJM2hZFXu9uxlkzbMG3NT+waNwV7m12pPbI3+Z5w++r0cCHsaL
OOPIM8zPbnQ+3PnsJad5oSHOs23wAYS4AnN+NQMuBCAbquI3ARPR2R+OEMhbduCx
Th1g1fEA3g==
-----END CERTIFICATE-----
Generated at Thu May 21 11:39:42 2026 by rpki-client