
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/44FEC394589711F0B981A181C4F9AE02.roa
File: 44FEC394589711F0B981A181C4F9AE02.roa (raw, json)
Hash identifier: XgVbFRUMdQn7YMgDUvllzDbhgw5VgTScVk8o1raBf8w=
Subject key identifier: 61:52:A4:7F:E5:F8:52:B1:50:14:F7:F0:C1:EE:0E:95:2C:9B:89:B1
Certificate issuer: /CN=A9140E66/serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF
Certificate serial: 0CFE
Authority key identifier: DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/44FEC394589711F0B981A181C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:39:25 +0000
ROA not before: Fri 04 Jul 2025 05:36:55 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 152653
IP address blocks: 103.27.217.0/24 maxlen: 24
2407:7f00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl
rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3326 (0xcfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140E66, serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF
Validity
Not Before: Jul 4 05:36:55 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4256c-8ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:d5:8b:2b:73:c3:a7:f8:51:22:4e:ff:3c:
e7:63:bb:03:9d:82:af:12:51:de:ea:31:81:61:b8:
22:94:ed:ce:0a:ee:2c:4a:b9:30:64:02:2c:ac:f3:
22:64:59:6d:00:7e:86:d0:85:1f:28:06:d8:4e:40:
f0:03:e9:68:99:57:58:95:20:4a:0d:09:84:1c:a3:
4a:c6:24:84:d5:ab:2c:d2:95:b7:10:e4:a7:d1:ca:
51:ce:dc:84:88:37:9c:52:76:b2:4f:f5:68:32:ef:
a7:4d:ff:37:84:f6:18:c7:2b:19:1a:c5:07:60:25:
32:29:de:d2:f2:c5:1a:c9:2f:34:0b:74:1e:99:cc:
7e:2a:df:31:5c:db:6c:a1:22:c8:7f:78:ab:eb:52:
0a:d6:c6:8e:93:00:9a:9b:25:4c:99:ad:0e:81:a3:
1d:93:75:f4:2b:bb:af:2e:86:99:fd:aa:a0:c9:8d:
9c:78:bc:22:65:f6:67:63:f2:ef:ae:e4:22:96:db:
6a:02:3d:65:16:f6:08:0c:91:a5:b0:07:c2:17:28:
a9:7f:cf:c5:1f:a1:9b:ef:db:f2:73:fc:e6:aa:50:
02:bd:30:99:9c:c3:1b:e2:60:a3:54:a9:38:c1:7c:
aa:8f:08:e2:46:20:ce:0b:e5:48:e9:b4:b1:41:fe:
a5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:52:A4:7F:E5:F8:52:B1:50:14:F7:F0:C1:EE:0E:95:2C:9B:89:B1
X509v3 Authority Key Identifier:
keyid:DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/44FEC394589711F0B981A181C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.27.217.0/24
IPv6:
2407:7f00::/48
Signature Algorithm: sha256WithRSAEncryption
94:d0:4f:9c:05:f7:c5:fb:4d:f0:63:1c:d7:01:eb:82:26:95:
77:29:51:e3:94:26:83:69:02:97:23:18:29:01:67:1d:fe:84:
ec:11:cb:2a:6b:76:c5:d2:8c:7b:51:91:98:c5:5a:9e:f8:a6:
19:c5:02:dd:6b:5e:32:f6:2e:15:e9:79:b7:c6:4a:05:84:78:
c7:a5:fe:5f:32:72:c7:09:81:40:32:bb:28:d4:45:05:4d:93:
87:57:62:26:c3:48:76:ae:12:d6:97:5a:ea:a3:49:0f:48:e1:
b5:45:e6:e2:cd:e7:f1:ae:7b:a0:e1:33:e6:60:0e:97:ec:ce:
1a:54:bd:86:bf:52:e1:b0:59:ca:4e:13:1d:ea:fb:0c:99:e8:
fc:c3:f2:cd:a8:4d:2d:eb:ae:28:7d:c5:ed:a2:54:8e:9b:e9:
ec:ff:d2:e5:80:f6:a2:b0:77:fa:bd:7c:f2:e2:e1:a1:db:04:
4b:6d:8a:3c:06:c4:48:37:1a:ff:ce:c2:62:4f:5c:3a:58:38:
33:77:f7:76:47:15:de:bd:69:1a:17:7e:29:59:2a:06:95:08:
11:bc:00:58:b0:3e:9c:cd:03:1b:6e:19:8a:3c:cd:fe:02:ab:
c8:51:5a:16:98:ff:cb:d0:1d:c1:e8:33:bc:5f:d8:11:a9:74:
f2:5d:0b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:47 2026 by rpki-client