
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129996/93D53B50AEFA11F1ACFC0FBC5411F970/1214F2DAAEFB11F1BD839D4D5511F970.roa
File: 1214F2DAAEFB11F1BD839D4D5511F970.roa (raw, json)
Hash identifier: TFeBxBnGsOhqQ0kDqruRXv3qAPNlVEnkKWGfucZ2wOs=
Subject key identifier: 8B:BC:DA:A4:EF:15:C1:59:FC:5D:04:50:9F:56:D7:1B:41:EF:D1:3E
Certificate issuer: /CN=A9129996/serialNumber=E888EDCD934F203B1726BE2DA1325EA39567380F
Certificate serial: 02
Authority key identifier: E8:88:ED:CD:93:4F:20:3B:17:26:BE:2D:A1:32:5E:A3:95:67:38:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IjtzZNPIDsXJr4toTJeo5VnOA8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129996/93D53B50AEFA11F1ACFC0FBC5411F970/1214F2DAAEFB11F1BD839D4D5511F970.roa
Signing time: Sat 12 Sep 2026 22:41:19 +0000
ROA not before: Sat 12 Sep 2026 22:41:19 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 40395
IP address blocks: 203.26.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129996/93D53B50AEFA11F1ACFC0FBC5411F970/6IjtzZNPIDsXJr4toTJeo5VnOA8.crl
rsync://rpki.apnic.net/member_repository/A9129996/93D53B50AEFA11F1ACFC0FBC5411F970/6IjtzZNPIDsXJr4toTJeo5VnOA8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IjtzZNPIDsXJr4toTJeo5VnOA8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 09:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129996, serialNumber=E888EDCD934F203B1726BE2DA1325EA39567380F
Validity
Not Before: Sep 12 22:41:19 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6aa5d50f-669e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:67:31:53:cd:c6:a9:b2:48:a3:76:ac:7b:
e6:e5:87:35:1e:7a:5b:9f:34:ef:19:57:6c:56:af:
6d:aa:24:4b:77:df:27:74:1b:86:1f:95:c4:96:5f:
4f:db:50:8b:d5:2b:18:bb:9c:ab:73:68:c1:79:8b:
bf:12:8a:d6:46:27:ab:8d:90:36:9e:0f:38:0d:ce:
41:c7:a4:6f:cf:81:20:bf:5e:83:7d:64:f4:47:4a:
9c:0e:ec:43:71:e3:05:ec:bc:ba:4c:87:79:d2:98:
c6:69:56:1f:42:4d:1b:60:7e:40:d1:f1:ff:c6:d0:
3e:05:70:d3:44:95:0c:16:6e:df:89:bc:47:6d:72:
66:19:ed:a2:be:35:d8:aa:27:db:ae:0b:7f:11:d1:
8f:2f:38:d3:36:0f:53:7f:66:fb:85:03:85:2a:28:
2c:0a:8d:53:da:d6:04:69:35:ed:78:2e:7c:6a:1a:
86:f0:3b:fa:83:aa:a6:f5:64:0d:ce:09:9d:ed:25:
49:4a:e1:9e:34:f3:a5:7e:85:e7:8a:1e:6e:cf:a0:
79:7e:6c:e5:a9:a2:25:0d:26:ed:77:ca:2b:ca:95:
72:07:0c:70:a1:c7:9c:72:27:ce:0b:1c:34:8a:77:
1e:cf:02:71:52:cc:79:b5:26:33:60:c8:2e:5d:f3:
e0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BC:DA:A4:EF:15:C1:59:FC:5D:04:50:9F:56:D7:1B:41:EF:D1:3E
X509v3 Authority Key Identifier:
keyid:E8:88:ED:CD:93:4F:20:3B:17:26:BE:2D:A1:32:5E:A3:95:67:38:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129996/93D53B50AEFA11F1ACFC0FBC5411F970/6IjtzZNPIDsXJr4toTJeo5VnOA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IjtzZNPIDsXJr4toTJeo5VnOA8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129996/93D53B50AEFA11F1ACFC0FBC5411F970/1214F2DAAEFB11F1BD839D4D5511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
203.26.211.0/24
Signature Algorithm: sha256WithRSAEncryption
19:14:d2:cb:28:2e:e1:75:0c:26:27:38:2c:01:1d:8e:d7:02:
09:11:79:4c:c2:3b:8b:aa:1d:0f:78:48:ea:9d:1c:9a:68:43:
e0:7e:97:04:af:49:ff:30:86:0b:fc:4e:d7:3a:41:46:f5:2d:
41:0f:92:91:5b:98:d5:09:ec:68:e2:f8:a6:0c:69:12:7f:2c:
79:14:f9:40:00:d1:fd:b3:8f:f6:ff:7f:f1:eb:0a:e3:13:30:
49:c2:c8:d4:ac:1f:24:2c:06:65:86:cc:29:af:a4:aa:54:0b:
03:a1:2c:43:0b:bc:f3:e9:49:d2:f0:f8:fe:37:1f:9a:b7:1e:
6a:12:e6:d4:9e:0f:9b:e6:70:6b:b8:23:51:f8:63:18:f4:96:
14:30:06:3c:c4:07:48:6d:6a:eb:44:38:72:7c:0a:4f:0b:44:
18:82:9e:a0:60:ba:1c:b8:93:70:7d:f6:aa:b5:f2:a9:7a:15:
48:35:37:90:f6:75:47:d3:56:9a:48:0c:fa:45:12:90:23:a8:
b1:12:d2:43:18:b2:16:29:fa:80:ef:98:af:37:e2:1e:e5:a6:
bd:7a:b2:5c:14:5b:3e:94:82:68:6a:ab:2b:8e:3c:49:23:dd:
36:93:87:e0:13:13:2c:54:72:84:f1:c6:d0:7f:a8:11:fc:ca:
19:10:dc:15
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
OTk5NjExMC8GA1UEBRMoRTg4OEVEQ0Q5MzRGMjAzQjE3MjZCRTJEQTEzMjVFQTM5
NTY3MzgwRjAeFw0yNjA5MTIyMjQxMTlaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYTVkNTBmLTY2OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkQWcxU83GqbJIo3ase+blhzUeelufNO8ZV2xWr22qJEt33yd0G4YflcSWX0/b
UIvVKxi7nKtzaMF5i78SitZGJ6uNkDaeDzgNzkHHpG/PgSC/XoN9ZPRHSpwO7ENx
4wXsvLpMh3nSmMZpVh9CTRtgfkDR8f/G0D4FcNNElQwWbt+JvEdtcmYZ7aK+Ndiq
J9uuC38R0Y8vONM2D1N/ZvuFA4UqKCwKjVPa1gRpNe14LnxqGobwO/qDqqb1ZA3O
CZ3tJUlK4Z4086V+heeKHm7PoHl+bOWpoiUNJu13yivKlXIHDHChx5xyJ84LHDSK
dx7PAnFSzHm1JjNgyC5d8+AzAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUi7zapO8V
wVn8XQRQn1bXG0Hv0T4wHwYDVR0jBBgwFoAU6IjtzZNPIDsXJr4toTJeo5VnOA8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5OTk2LzkzRDUzQjUwQUVG
QTExRjFBQ0ZDMEZCQzU0MTFGOTcwLzZJanR6Wk5QSURzWEpyNHRvVEplbzVWbk9B
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNklqdHpaTlBJRHNYSnI0dG9USmVvNVZuT0E4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTk5Ni85M0Q1M0I1MEFFRkExMUYxQUNGQzBGQkM1NDExRjk3MC8xMjE0RjJEQUFF
RkIxMUYxQkQ4MzlENEQ1NTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADLGtMwDQYJKoZIhvcNAQELBQADggEBABkU0ssoLuF1DCYnOCwBHY7X
AgkReUzCO4uqHQ94SOqdHJpoQ+B+lwSvSf8whgv8Ttc6QUb1LUEPkpFbmNUJ7Gji
+KYMaRJ/LHkU+UAA0f2zj/b/f/HrCuMTMEnCyNSsHyQsBmWGzCmvpKpUCwOhLEML
vPPpSdLw+P43H5q3HmoS5tSeD5vmcGu4I1H4Yxj0lhQwBjzEB0htautEOHJ8Ck8L
RBiCnqBguhy4k3B99qq18ql6FUg1N5D2dUfTVppIDPpFEpAjqLES0kMYshYp+oDv
mK834h7lpr16slwUWz6UgmhqqyuOPEkj3TaTh+ATEyxUcoTxxtB/qBH8yhkQ3BU=
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:36:18 2026 by rpki-client