
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/83298B188CDD11EE9C0A8258C4F9AE02.roa
File: 83298B188CDD11EE9C0A8258C4F9AE02.roa (raw, json)
Hash identifier: /wrVNUp5njYp8bBfMjYQTOD/jBHOQFuLEFwcPRZnAKo=
Subject key identifier: AF:62:35:54:B5:77:00:24:74:3D:8D:BB:EB:00:41:F1:CE:21:48:67
Certificate issuer: /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
Certificate serial: 01B9
Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/83298B188CDD11EE9C0A8258C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:05:23 +0000
ROA not before: Thu 29 Jan 2026 03:23:01 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 9896
IP address blocks: 202.49.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl
rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127C2D, serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
Validity
Not Before: Jan 29 03:23:01 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a43993-f60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ca:e9:e5:ba:20:64:38:b6:e7:36:51:5e:c4:
01:9f:0f:53:30:28:8c:a3:3e:ad:4b:4b:11:2e:82:
be:c4:45:b6:ef:2d:fe:ed:d7:a5:41:08:36:ae:df:
cd:c0:44:0e:8b:e3:8e:f8:0b:25:5c:59:8e:db:40:
6a:cc:90:58:1c:e8:c1:a1:2e:00:bb:88:7b:f7:ff:
2c:16:2b:65:9b:d1:80:8f:8c:3e:2a:7d:c3:68:4f:
d9:c0:37:80:02:15:36:88:35:c5:a2:ca:66:b8:84:
94:77:cf:cb:2c:aa:6a:27:37:82:99:60:3b:b4:ca:
19:f5:96:30:11:14:7f:32:cb:b8:c5:42:4a:7c:31:
b4:7c:43:73:59:55:1c:15:8e:29:d9:63:e0:ba:a1:
8e:f9:4b:56:27:f5:e4:b2:b5:86:8d:20:47:28:06:
16:c8:6b:f8:10:73:45:2d:28:4d:5a:43:49:60:e9:
de:ca:3b:8b:d8:26:d1:e3:46:51:5e:5d:b5:33:5f:
6d:1e:b0:27:56:d9:df:5c:c1:3a:7e:44:3c:08:e9:
f7:8c:77:57:83:e1:50:b9:fe:93:e0:3c:81:52:17:
b2:6b:fa:4d:37:f5:dd:a3:37:15:b9:2c:7d:e9:e7:
3e:2e:ed:d5:82:c4:aa:fb:df:d7:f1:b3:7c:a8:cf:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:62:35:54:B5:77:00:24:74:3D:8D:BB:EB:00:41:F1:CE:21:48:67
X509v3 Authority Key Identifier:
keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/83298B188CDD11EE9C0A8258C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.49.252.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:69:83:8e:02:93:5a:b7:1e:49:e2:71:39:7c:85:da:cb:4d:
10:38:d9:c0:46:5d:c5:29:6a:c9:e6:2c:9e:80:8f:57:7f:39:
1c:b4:86:b9:36:e9:5a:2b:2b:38:a6:01:f7:5b:21:76:e3:a6:
d4:f2:30:b0:19:d1:2e:7b:95:7a:fa:94:70:c7:85:68:31:aa:
e3:ad:f6:36:6c:a8:24:38:3f:2c:4c:31:ce:83:ca:38:53:e6:
f8:93:0e:93:8b:87:ce:95:d9:46:fd:7c:96:eb:70:e6:1b:ad:
9c:c0:fe:83:24:87:29:63:34:24:8e:a2:83:65:f7:b3:f2:4e:
3c:95:66:69:c1:cf:69:b1:fa:34:db:ee:20:f2:57:47:75:c9:
f7:e9:ae:e9:2b:f1:23:09:cf:c0:62:a8:e3:ca:79:a9:96:a8:
39:11:6f:99:e0:35:19:62:39:bb:97:96:c3:a3:c9:cd:b0:be:
8c:07:b4:e2:dd:c7:8e:af:2a:5a:4c:54:94:06:56:40:37:cd:
3c:30:31:82:2b:d2:a8:fc:39:fe:3d:74:5a:dc:b1:80:14:a0:
09:18:55:53:84:a8:09:0c:6b:bb:42:76:02:75:b7:ce:81:41:
4b:06:1f:5d:e0:2a:15:1a:19:16:0e:ff:8d:be:db:28:54:bf:
fb:4b:4b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:44 2026 by rpki-client