
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/9CFBF8BAD2C511F1AF782E480666CEF9.roa
File: 9CFBF8BAD2C511F1AF782E480666CEF9.roa (raw, json)
Hash identifier: BijmhWEjSgw8IQfw/rlmfq3ftbpMPUHZSMuWpqH8k/A=
Subject key identifier: 11:A4:3E:57:9F:0E:40:14:8C:B0:67:A6:ED:D1:B5:55:2C:9A:53:E5
Certificate issuer: /CN=A914B30A/serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65
Certificate serial: 058B
Authority key identifier: 13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/9CFBF8BAD2C511F1AF782E480666CEF9.roa
Signing time: Wed 28 Oct 2026 11:58:52 +0000
ROA not before: Wed 28 Oct 2026 11:58:52 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 154829
IP address blocks: 103.176.120.0/24 maxlen: 24
2001:df0:dc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl
rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 23:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1419 (0x58b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B30A, serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65
Validity
Not Before: Oct 28 11:58:52 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6ae1e37c-d8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:7f:f9:c4:26:ce:a2:8c:bc:db:2d:82:8b:
b9:74:a9:fa:31:a4:e4:56:d9:fa:8d:51:3e:45:96:
ac:bb:dc:26:6e:89:88:9c:69:cb:0c:de:d4:3a:07:
cd:ca:b2:7f:77:27:9f:bc:e4:0f:a3:18:d2:8f:ed:
e4:7b:20:d9:cc:96:fc:01:40:c1:96:95:75:ca:98:
da:b2:bb:e3:cd:64:39:7e:d6:4d:33:96:de:89:76:
ce:7d:30:c7:54:4b:26:4a:a1:81:48:37:4d:c6:51:
be:75:fd:cb:be:06:48:06:2c:c8:ae:96:e2:0f:cf:
aa:4e:44:0a:dd:24:a2:ec:1c:60:a2:43:3e:58:25:
7b:44:ae:2e:4d:4d:9e:af:a4:20:47:c9:bc:62:25:
34:e9:4e:80:90:5b:97:1b:91:66:de:d9:82:9f:1f:
17:16:35:15:c4:8a:b7:ea:f7:e1:5c:ef:73:f0:cf:
45:18:75:53:28:48:d0:f4:71:f3:e2:12:e3:a9:ba:
b9:17:66:48:5f:d2:f7:fd:f7:d0:0b:ce:01:d0:a5:
27:0e:9b:24:24:09:de:69:59:bb:82:26:70:b2:cc:
d2:47:36:d9:20:ac:b5:6f:8e:32:c1:92:9c:07:13:
df:69:3f:e4:7f:51:90:3a:80:c0:f6:25:d9:2a:e9:
7f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A4:3E:57:9F:0E:40:14:8C:B0:67:A6:ED:D1:B5:55:2C:9A:53:E5
X509v3 Authority Key Identifier:
keyid:13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/9CFBF8BAD2C511F1AF782E480666CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
103.176.120.0/24
IPv6:
2001:df0:dc0::/48
Signature Algorithm: sha256WithRSAEncryption
06:83:00:90:6d:8d:38:91:a4:c6:96:6a:47:a7:c9:07:c8:cf:
ee:89:b2:ec:8e:93:8c:b8:d8:26:c5:c5:60:63:a0:1b:c5:04:
bc:d9:1c:2c:a7:da:29:e0:74:d2:08:cb:ae:69:d0:33:98:1e:
a7:2c:fc:3b:25:bb:77:15:3f:62:78:11:75:4d:8e:68:ef:c8:
99:98:e5:8d:6d:b1:c7:34:31:a6:63:27:fe:4a:fd:32:e5:24:
30:0c:ad:06:df:9e:f2:7d:7b:5b:4f:0b:39:9b:be:d2:51:c5:
29:d5:5c:3b:24:a5:3b:43:93:65:03:e4:e8:fb:98:29:12:5f:
8b:26:06:d2:59:90:f8:90:07:79:51:52:bc:64:d9:b8:41:79:
da:29:30:d6:57:a0:af:3b:b0:9e:f3:ab:e8:72:50:cd:40:40:
4e:f2:8a:1f:45:bc:7d:fb:07:36:dd:c4:84:ab:50:01:75:0f:
02:cc:63:65:2c:8d:f3:20:68:3a:20:5b:a4:91:a1:0c:61:1b:
fd:f9:0b:36:58:e7:42:db:01:2b:bf:b1:4d:a0:78:3d:90:5f:
af:54:e3:5a:8e:53:e2:52:e6:f5:55:46:a2:a1:60:6e:a9:99:
27:67:ce:01:df:98:eb:d1:7c:7a:61:7a:36:d9:28:ee:ab:28:
87:9c:c3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:09:19 2026 by rpki-client