
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/27C8A978636311EEB35FEF77C4F9AE02.roa
File: 27C8A978636311EEB35FEF77C4F9AE02.roa (raw, json)
Hash identifier: ekiX1ckszD39uFgogAZIEAn0ubXc2inULqPZv5+zdqA=
Subject key identifier: A9:79:66:A3:B5:E0:26:1F:AC:34:FD:CD:96:A5:09:E4:40:AA:63:21
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3B41
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/27C8A978636311EEB35FEF77C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:28:16 +0000
ROA not before: Mon 14 Jul 2025 14:50:45 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 151825
IP address blocks: 171.102.216.0/24 maxlen: 24
171.102.217.0/24 maxlen: 24
2001:fb0:10bb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15169 (0x3b41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 14 14:50:45 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a49350-ff5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:91:85:98:9e:ca:3e:03:9c:be:c5:e9:e4:
54:eb:79:fb:09:86:98:85:2c:d6:b3:1d:ac:74:8d:
bf:ee:bb:5f:9b:03:6d:84:08:89:36:72:e0:15:ee:
f8:fb:00:b4:da:09:6f:1f:8d:e7:a9:b5:3e:c6:58:
f4:22:07:14:9f:07:0e:e9:7b:88:cc:68:65:ca:61:
c4:a0:0c:1b:a3:b8:4b:9e:a7:a5:6e:98:57:3d:61:
c9:b3:c3:3d:b7:92:04:3f:2b:7d:67:9b:86:9c:6c:
df:d8:70:38:8b:6f:3a:05:3b:eb:b7:1f:e0:e0:cc:
22:6b:c7:28:26:7c:62:a3:a4:1a:fb:7c:bc:a1:cd:
46:4b:9a:e3:44:82:de:2a:c1:f8:21:54:a4:e9:32:
f5:99:12:58:c8:8d:b6:0f:08:17:ac:15:07:62:19:
c7:e4:64:8b:08:2e:5e:cc:97:b6:37:a9:2d:f1:d5:
7d:86:b5:2e:11:84:25:76:f7:5e:aa:9c:42:0f:3f:
0c:fe:08:14:02:c4:77:11:8a:e1:c9:e8:86:5f:bb:
d3:be:42:43:59:ca:4c:7d:37:b7:d1:7f:d6:0d:d3:
3c:57:fa:67:4e:3a:f1:d8:6c:00:fb:aa:01:f3:65:
2d:a9:d7:a6:be:b4:50:28:8c:56:2a:55:60:e6:01:
79:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:79:66:A3:B5:E0:26:1F:AC:34:FD:CD:96:A5:09:E4:40:AA:63:21
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/27C8A978636311EEB35FEF77C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
171.102.216.0/23
IPv6:
2001:fb0:10bb::/48
Signature Algorithm: sha256WithRSAEncryption
0b:7e:c6:08:6f:22:ac:4e:1d:49:ed:81:4d:05:5e:08:01:3d:
37:e8:22:f6:a4:55:63:f9:9d:70:75:12:34:b3:9d:42:88:25:
d4:10:0c:ca:c0:18:e0:b8:cf:da:db:71:56:b9:5f:32:7b:f2:
63:58:d2:d6:4c:3f:9b:3e:00:11:9b:30:f1:f6:df:42:a5:3b:
75:3c:8d:7b:b2:48:ab:59:9f:de:e4:3f:37:0d:87:52:a8:89:
67:85:b4:24:a9:09:26:47:a0:bf:1c:53:e4:f3:42:b9:d8:46:
89:75:aa:55:7f:ec:e4:7e:14:6c:96:9a:cb:22:c9:6c:db:6c:
b1:e3:6b:f4:67:e8:2e:ee:3c:a2:6e:5c:d3:53:44:22:ff:ce:
3b:58:2b:e3:b7:e1:b9:6d:75:74:fd:b6:41:33:81:92:8e:31:
c0:a0:e0:52:5a:1f:37:12:27:b4:6e:bb:e5:19:47:50:57:fc:
40:7b:3c:29:3a:94:f0:74:43:ed:97:ff:c8:73:89:2e:92:93:
02:bc:84:c1:85:d7:33:38:4d:f4:30:65:82:5c:e9:5f:d5:e2:
76:43:bd:5d:f9:ae:ba:bb:bc:f9:7a:f5:9c:2c:29:ea:23:31:
b2:13:d8:20:5d:78:5a:75:d3:f0:41:c1:96:7e:bc:66:7d:3a:
50:8d:e5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:34 2026 by rpki-client