
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/6DC067A8C77A11F1AEEE320B3A11F970.roa
File: 6DC067A8C77A11F1AEEE320B3A11F970.roa (raw, json)
Hash identifier: 0JI7AiSq3jLwf3BFGzV20o5IupDePg7p7ALg/pbXGUc=
Subject key identifier: 64:96:9E:41:7A:C9:10:84:85:83:30:06:AE:F3:03:B1:1C:98:7F:91
Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial: 018A
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/6DC067A8C77A11F1AEEE320B3A11F970.roa
Signing time: Wed 28 Oct 2026 09:49:01 +0000
ROA not before: Wed 28 Oct 2026 09:49:01 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 834
IP address blocks: 103.49.41.0/24 maxlen: 24
103.49.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 05:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Validity
Not Before: Oct 28 09:49:01 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6ae1c50d-ba24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:83:22:73:01:49:3c:a9:44:00:74:4a:06:
f2:7b:b5:7f:66:d8:f5:1c:11:71:de:c8:d4:50:b8:
4b:35:f4:6a:cd:69:ec:be:48:47:8a:75:00:55:16:
21:24:9e:d7:56:08:ad:24:b0:84:e1:be:a2:72:45:
40:6a:fd:75:db:dc:c6:5a:16:99:ae:7c:98:d2:72:
dc:1c:15:a8:02:1d:85:84:46:89:fb:4f:c6:15:60:
84:b6:0d:11:7a:54:93:ed:db:bb:51:9c:4c:f0:46:
e3:bb:87:23:56:2e:e2:57:4e:98:a1:0c:cc:6b:db:
20:70:5a:25:4e:d9:8b:8a:b3:45:0b:68:92:55:d3:
69:4e:99:c0:65:ab:0c:5d:c7:28:0b:cf:a9:c4:1a:
e9:44:1d:fe:0c:7f:77:26:80:31:2a:16:b0:fc:26:
4f:9a:fc:fd:d3:0f:3f:e9:12:39:da:66:fe:ff:8f:
dd:68:b2:ae:fe:ab:a6:a7:ea:fd:d0:ce:25:4d:b2:
71:98:8c:56:bf:72:a9:84:94:be:90:0c:89:33:38:
4a:e3:34:15:05:5a:93:59:72:be:cd:23:50:ae:be:
cb:8c:ce:4a:18:a1:63:6c:56:3b:38:e5:58:7d:15:
5a:78:83:2f:4f:f9:f6:92:bc:f9:f8:3f:44:ab:81:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:96:9E:41:7A:C9:10:84:85:83:30:06:AE:F3:03:B1:1C:98:7F:91
X509v3 Authority Key Identifier:
keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/6DC067A8C77A11F1AEEE320B3A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.49.41.0-103.49.42.255
Signature Algorithm: sha256WithRSAEncryption
8d:3b:a9:a8:a6:3f:d3:90:36:ef:27:86:ab:e3:b5:4b:1c:00:
30:e7:71:a7:c3:0a:c5:b8:81:bc:69:ae:6d:8d:2e:02:a1:17:
b7:c2:7c:1a:e0:c8:59:df:3a:ce:33:13:f7:a7:90:6a:bc:8d:
22:b1:64:bd:74:46:c1:75:c4:07:33:08:30:6f:6e:5d:27:7f:
a3:3b:1a:a7:b9:b2:de:7e:1c:af:b2:b7:a9:bc:1c:91:9d:15:
2e:70:30:bc:14:87:cc:6d:24:86:12:fb:33:39:6a:38:b0:f4:
b0:55:34:e3:a9:30:54:47:37:d7:92:bb:61:9f:f4:eb:a2:56:
91:40:f5:74:a6:16:e3:50:5d:93:06:25:1d:b8:d8:d8:39:11:
4f:13:22:d2:57:bc:20:3a:a0:87:d0:4f:13:1a:33:71:ff:66:
16:18:a2:30:bc:2c:44:71:95:e8:9a:e2:2f:da:6f:18:c9:d1:
3d:14:4f:14:ea:2f:c7:4b:e0:19:22:66:3e:c2:de:27:88:1d:
65:81:9f:41:6d:05:fb:49:f7:c5:49:ec:3c:23:25:a3:73:36:
48:c1:2c:09:8b:9f:79:46:95:93:94:1d:09:af:e8:3f:a3:81:
96:e5:28:5f:ac:c7:e8:19:92:23:90:62:07:5a:c2:87:c1:e6:
b5:b4:36:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:15:28 2026 by rpki-client