
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/99CFA3844DF511ED91A8AB4BC4F9AE02.roa
File: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (raw, json)
Hash identifier: eo+fVmREjn0E/C8IX23s1pespE6vPSqglnEAEQntZB8=
Subject key identifier: 49:40:83:45:FF:95:38:F3:B5:FC:64:49:BC:94:B6:B8:9A:18:9E:87
Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093
Certificate serial: 0B13
Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/99CFA3844DF511ED91A8AB4BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:44:57 +0000
ROA not before: Thu 14 Aug 2025 19:59:55 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 141731
IP address blocks: 123.253.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl
rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2835 (0xb13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093
Validity
Not Before: Aug 14 19:59:55 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a46d09-728e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:1b:1e:20:c7:1f:23:56:f9:1a:56:ac:ad:
ce:63:5c:2c:b3:c4:36:d8:09:02:33:71:ef:18:0a:
6e:53:83:84:65:24:c3:47:cb:36:94:6c:62:78:55:
e8:e9:9b:f4:d0:8e:a5:a2:66:e9:f7:55:11:92:59:
dc:13:67:42:1f:fc:05:7d:98:92:49:f7:e5:17:52:
b6:88:99:2a:9d:80:d6:b6:8d:6c:50:f8:14:8e:d0:
db:ba:f4:f3:4f:88:c9:ef:f8:08:7a:fa:9d:3f:be:
a6:55:3a:6f:75:b8:b5:d3:33:0d:ca:40:54:e8:de:
0b:d2:1f:7a:41:35:cc:2d:94:c7:84:c8:20:7b:a6:
7f:ee:c4:23:48:7c:8e:a4:30:c8:77:8a:ef:76:bf:
49:e3:2f:3b:7f:f4:a0:90:d1:00:2a:3f:3e:19:63:
b1:bf:a9:0f:9d:22:b0:65:ab:22:4b:8e:39:ce:ea:
10:4d:a7:21:8d:b5:29:ff:53:e6:04:4d:81:13:1b:
2b:b2:0d:45:54:57:f9:f8:bc:15:ae:3b:dc:07:7e:
99:84:49:30:56:cb:5b:4f:8d:7c:ed:fe:27:36:72:
fd:0b:e5:30:5f:94:0e:70:25:b2:b7:76:d3:35:85:
20:c7:8e:9f:73:0d:7b:06:a3:46:b1:ea:0b:f7:68:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:40:83:45:FF:95:38:F3:B5:FC:64:49:BC:94:B6:B8:9A:18:9E:87
X509v3 Authority Key Identifier:
keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/99CFA3844DF511ED91A8AB4BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
123.253.96.0/24
Signature Algorithm: sha256WithRSAEncryption
91:25:90:60:aa:7c:55:24:36:5a:62:7c:13:c0:83:5b:2a:bc:
de:6d:2f:b3:6c:72:2d:f8:86:89:20:65:46:64:9f:df:4a:e5:
ee:e1:78:43:c2:71:84:ea:8a:e9:40:e9:4f:c8:3d:0d:aa:29:
80:86:80:22:03:f8:07:45:17:af:be:02:72:27:c6:70:99:34:
68:ee:8e:d7:0e:d6:0c:e9:37:2b:83:13:f9:00:5e:87:0a:3a:
de:d1:dd:5c:58:f7:8d:e5:86:5f:fc:8f:35:df:6b:3f:28:f4:
bd:22:71:4f:5e:c0:5f:7a:79:47:80:f1:2f:47:bb:e3:2e:b1:
7b:89:8a:0d:09:32:5b:08:b3:a2:80:fb:df:ac:1c:05:3b:8c:
37:fe:37:e9:91:b8:d4:12:c7:a6:9c:91:7d:1c:05:b9:16:f6:
81:9f:50:ee:93:98:f3:4f:88:0c:0e:5f:15:95:92:e6:80:ea:
43:00:ed:52:d0:f5:56:3a:5d:51:b0:17:52:81:bd:af:4e:c2:
74:cb:2a:d4:2d:97:10:c1:7d:c8:5c:38:f9:8b:41:75:f3:16:
70:f1:a6:c4:b3:d8:3b:37:34:9e:40:54:69:d5:c7:3a:69:70:
ae:ce:10:35:dc:80:ab:c3:24:00:03:f2:aa:a6:40:6c:60:f7:
43:27:ef:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:42 2026 by rpki-client