
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa
File: 7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa (raw, json)
Hash identifier: WQ3Fh7TEe9TxsfaKrDm3PVskzyBMcHZNxDVDifYGIFY=
Subject key identifier: DB:A3:F1:EE:60:40:8F:92:81:00:22:78:42:64:EC:61:F6:BF:0E:1E
Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial: E9
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa
Signing time: Thu 05 Feb 2026 16:25:01 +0000
ROA not before: Thu 05 Feb 2026 16:25:01 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 21840
IP address blocks: 103.49.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:53:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Validity
Not Before: Feb 5 16:25:01 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6984c45d-13c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:2f:66:c8:44:e4:82:c5:f5:2e:94:94:d4:
39:65:bd:34:c1:50:61:ee:30:17:e9:ee:1c:8b:6e:
b5:aa:52:37:41:4e:f2:eb:f4:9b:78:0a:0a:fd:8a:
86:ac:d9:9d:5a:48:27:75:d2:ef:f6:13:4a:04:37:
30:1d:a0:9f:46:6c:9d:d0:e0:6e:33:37:b6:d7:be:
a8:d6:3d:44:2a:d2:96:a5:7a:ec:6b:d7:f5:91:44:
9e:20:18:b1:b2:4b:1f:bb:86:41:1f:8f:f5:84:9f:
5b:99:14:21:fc:b5:e7:aa:56:3e:19:34:a2:51:91:
03:f3:1c:59:8e:12:e6:03:45:88:7b:dc:91:28:ef:
6f:95:b4:0f:d5:56:72:20:3c:54:0e:87:a4:2e:f8:
f3:6f:60:92:81:5b:87:17:30:a7:46:73:da:f2:f6:
5f:ee:f3:c9:aa:0a:58:40:32:c5:83:ca:49:74:c2:
c0:87:d1:80:56:38:04:21:96:c2:41:b0:c0:22:44:
eb:08:74:da:45:3b:32:ca:43:7a:2c:0a:9d:3a:6e:
36:ba:c6:15:65:3d:1f:13:26:6a:13:47:18:ef:87:
a0:e6:ba:58:52:ca:ac:77:af:9f:23:64:d4:33:9a:
ed:fd:1d:42:4b:e4:b7:52:81:ce:59:f4:01:41:10:
fc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A3:F1:EE:60:40:8F:92:81:00:22:78:42:64:EC:61:F6:BF:0E:1E
X509v3 Authority Key Identifier:
keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.40.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:2f:77:96:ec:4d:19:1d:51:00:4f:8e:a3:27:77:c8:a7:9f:
ba:1d:72:19:19:99:9d:bb:9e:e8:0b:18:24:9b:a7:a2:e1:c5:
ed:81:27:05:d9:19:59:39:dc:a2:bc:8d:ca:00:80:c6:b6:a3:
e4:0d:5e:66:66:3e:53:5d:fd:bb:d8:74:10:31:ab:c6:8c:22:
b6:c4:33:39:31:b3:7f:a0:28:27:47:5a:0c:cb:04:a9:ff:69:
aa:83:94:5d:ad:c8:0d:24:14:24:46:0b:ff:db:9f:e1:5b:d7:
11:f3:e3:e9:ef:77:9e:93:1b:33:38:c2:48:73:c0:69:6c:94:
41:5f:2a:59:f8:b7:bd:1b:00:8e:9e:e5:0a:c4:41:bf:ac:92:
61:76:3f:9f:32:f9:82:da:ae:f2:97:13:17:ea:57:f9:b9:e0:
84:c5:cd:0d:35:38:37:44:b7:f6:63:db:a0:02:a8:ca:95:5c:
bb:e9:ac:b1:c0:4a:c3:0a:f1:fd:3f:9c:ac:25:29:40:30:57:
1c:d3:b7:73:54:58:86:5d:cc:ef:a4:9a:25:0c:8d:ab:bc:cb:
fc:e3:66:35:b7:ca:5c:0b:3b:b3:37:db:9a:53:cf:44:07:16:
5a:14:2b:9e:30:8c:99:33:37:e6:11:80:9a:d6:11:3c:4d:76:
a0:65:7c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:10 2026 by rpki-client