
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/73E0191A967811EA92E45A27C4F9AE02.roa
File: 73E0191A967811EA92E45A27C4F9AE02.roa (raw, json)
Hash identifier: mpjVMZqgsEDLte7km/wxxa0aijeYSHyV/D4q8GjzrZc=
Subject key identifier: 74:05:BE:6E:C0:DF:13:60:84:D0:DA:85:91:F5:E8:53:0B:D0:93:E2
Certificate issuer: /CN=A9123D19/serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A
Certificate serial: 2A5E
Authority key identifier: BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/73E0191A967811EA92E45A27C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:53:09 +0000
ROA not before: Wed 08 Oct 2025 15:42:52 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 56304
IP address blocks: 103.39.44.0/22 maxlen: 24
202.36.170.0/24 maxlen: 24
202.49.187.0/24 maxlen: 24
2401:9480::/32 maxlen: 32
2401:9480:300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl
rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10846 (0x2a5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123D19, serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A
Validity
Not Before: Oct 8 15:42:52 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a460e4-cac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:cf:6f:28:c9:d4:bc:dd:29:f8:84:1b:cf:
fa:01:e8:33:f8:6c:11:be:1a:f0:33:9b:33:95:d6:
49:e2:d8:4d:1d:49:18:f1:d7:6f:21:c0:78:b4:fc:
b2:7c:15:a1:30:e6:66:09:fc:cb:d9:b6:d8:fe:ff:
ca:d4:a8:78:38:cf:64:71:c8:2d:06:95:21:2b:4f:
3e:3a:3d:6a:0c:a2:49:e2:47:e6:af:75:55:ee:1d:
d3:60:e4:63:ce:55:6b:ab:86:fc:bb:38:bc:4f:19:
59:38:6f:c1:25:94:4b:a2:82:be:1d:fa:96:f2:3a:
98:9c:39:49:97:8d:50:ac:c5:0d:da:bd:80:30:73:
20:1e:fd:31:38:0c:6d:78:b4:d0:9f:8b:1e:36:b9:
6f:6e:33:28:87:82:13:29:86:f3:d7:28:0e:73:04:
18:c5:cf:8b:da:ad:ec:a0:45:47:fb:1a:88:c2:cb:
b5:cd:f8:6b:45:00:23:5d:a2:ef:09:b6:0c:4a:ce:
80:f5:ea:f2:11:d9:1c:aa:51:db:da:74:94:d9:a8:
d7:a7:bb:32:6b:3d:ed:d8:a0:d2:63:e2:2e:a6:e2:
8f:12:d6:4b:be:d0:21:e3:5d:1f:ca:6c:a9:86:67:
ba:1f:eb:da:41:fa:d0:44:1b:ac:3c:1f:fb:c7:d4:
22:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:05:BE:6E:C0:DF:13:60:84:D0:DA:85:91:F5:E8:53:0B:D0:93:E2
X509v3 Authority Key Identifier:
keyid:BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/73E0191A967811EA92E45A27C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.39.44.0/22
202.36.170.0/24
202.49.187.0/24
IPv6:
2401:9480::/32
Signature Algorithm: sha256WithRSAEncryption
66:44:d6:cf:72:1d:25:6a:23:78:b6:b1:b4:e5:95:f2:73:cb:
88:aa:2d:5e:69:37:75:ed:d1:aa:65:63:19:bc:08:65:d7:36:
cd:7b:91:c8:50:38:ad:09:69:d9:f7:ab:fa:c7:ab:80:dd:c4:
ce:62:d1:d6:17:a1:e5:16:3a:e1:2e:6a:37:75:15:20:5b:93:
43:5c:aa:8d:d1:3a:c0:7c:56:52:70:fc:8e:7c:7d:0f:88:fc:
32:3a:94:f3:2c:3f:51:cd:f7:e0:26:16:78:1b:a5:29:cf:0d:
b0:cb:b1:77:25:61:dd:33:3c:83:44:24:fd:11:6c:78:9f:37:
45:54:b1:17:b1:1d:90:b3:08:06:b2:66:76:69:17:99:2f:a5:
3f:26:2b:ad:5d:2c:b9:73:d3:8e:bd:69:34:11:69:c6:73:e1:
e4:01:69:d1:d3:c7:50:70:49:65:30:2c:1e:0d:49:b7:6c:7a:
cc:e9:98:b8:0b:81:1c:ed:d4:0a:6f:2f:59:27:ae:b1:3b:4d:
17:ab:fa:7b:49:4e:a8:98:b4:7a:ae:2c:46:fb:62:a6:0c:4b:
a1:fb:9f:fc:a0:d9:58:79:fc:3c:bb:8a:41:5b:7d:e9:a5:20:
e8:d9:32:fc:e0:69:5a:54:07:44:8e:bf:f8:65:c4:ef:01:c5:
d7:be:ab:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:46 2026 by rpki-client