
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/E243CD9C227811F1B65A16B9A4833773.roa
File: E243CD9C227811F1B65A16B9A4833773.roa (raw, json)
Hash identifier: yUigKe1dmxmlY5PK8ANeaQZIVKCiPZVhXoUmPCQH+IA=
Subject key identifier: 1E:2A:BA:52:1C:08:14:7B:78:4D:A0:BF:4E:EF:9C:D2:3C:CB:20:71
Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Certificate serial: 35FB
Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/E243CD9C227811F1B65A16B9A4833773.roa
Signing time: Fri 02 Oct 2026 15:41:33 +0000
ROA not before: Fri 02 Oct 2026 15:41:33 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 401783
IP address blocks: 101.0.21.0/24 maxlen: 24
101.0.22.0/24 maxlen: 24
101.0.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 15:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13819 (0x35fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Validity
Not Before: Oct 2 15:41:33 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6abfd0ad-2c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:62:37:78:0a:58:40:33:0e:92:97:44:60:9c:
7f:83:8a:d8:45:e0:bd:3f:a8:b8:55:08:be:1f:2e:
ff:09:52:69:cd:d5:62:fe:57:74:47:5d:9d:f6:32:
c4:87:f8:ff:47:85:c5:62:b1:8c:c1:d1:94:9e:b4:
73:7d:6c:94:b0:11:82:19:df:b8:ff:43:87:22:8e:
e0:e8:ca:e5:30:b5:20:62:75:d6:39:04:d4:1c:62:
97:3e:17:9f:2b:a0:3f:54:35:11:75:af:0e:05:ae:
5e:db:12:e5:28:2e:da:68:59:92:b7:da:f3:97:84:
7e:48:dd:d7:a1:ed:bf:4e:66:b2:f2:05:b3:fa:9c:
bc:72:a5:c7:0d:79:e8:2f:79:7f:3c:ff:68:87:a1:
a0:e8:59:ec:52:b4:07:a5:82:0d:6f:fc:3c:87:20:
42:c0:f7:81:d9:d3:db:1c:e5:a5:6f:48:81:03:98:
67:55:2e:6d:f9:a6:d8:e1:a5:bc:5f:13:b5:c1:8c:
f4:35:88:d7:a0:a9:37:71:92:d7:d2:18:43:05:72:
a7:96:da:07:46:0a:3d:c2:1b:3f:22:ed:79:11:5f:
82:d2:22:a5:ba:a0:d9:4f:34:d8:84:d6:fd:a9:d0:
87:99:12:4e:b2:48:d8:6c:37:a1:1d:7f:11:64:52:
da:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2A:BA:52:1C:08:14:7B:78:4D:A0:BF:4E:EF:9C:D2:3C:CB:20:71
X509v3 Authority Key Identifier:
keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/E243CD9C227811F1B65A16B9A4833773.roa
sbgp-ipAddrBlock: critical
IPv4:
101.0.21.0-101.0.23.255
Signature Algorithm: sha256WithRSAEncryption
03:fc:30:fe:95:0f:b0:d0:eb:26:86:99:c6:7b:2f:25:06:98:
eb:ce:e2:ba:0f:cc:5f:0c:43:1b:07:85:65:f4:d1:bf:6c:3c:
f8:68:c2:19:c7:c0:97:8c:a6:5f:fd:d3:5d:80:98:e9:2a:c7:
84:ac:1d:3d:64:51:3b:a8:d2:f2:15:55:59:49:f8:dd:93:d4:
2d:0b:de:17:6c:9d:74:17:a5:b2:4a:22:1a:04:e2:ca:f7:40:
88:97:f7:e0:54:5b:b4:33:c8:f0:5a:55:36:8d:ff:c0:4e:a0:
26:7c:f8:7c:d9:d5:51:51:02:ad:ad:95:71:05:38:22:8f:98:
01:40:60:68:67:3d:db:65:35:25:df:b7:cc:8a:48:4f:c7:23:
7b:c0:61:fb:fd:64:76:bb:23:10:45:36:b9:26:8e:fa:86:98:
c8:ba:a7:d5:52:c1:1f:09:29:70:d6:5c:ae:ba:2a:6b:6d:9c:
06:42:f2:8d:8d:11:cd:54:1f:79:21:62:26:81:a4:6c:6c:44:
8f:c9:5e:a4:fa:88:ed:b3:f0:0f:b0:4e:19:c3:5e:83:37:19:
e8:53:6b:ee:14:09:88:02:e7:46:d0:38:36:53:99:a0:80:eb:
ea:bf:ac:74:5a:88:3a:12:30:19:5e:3d:de:89:14:45:c0:db:
92:0c:69:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 03:12:08 2026 by rpki-client