
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/94EA7370050111EA9BDD372BC4F9AE02.roa
File: 94EA7370050111EA9BDD372BC4F9AE02.roa (raw, json)
Hash identifier: jnKst9yOXAJhgrgRGx5V1XAc+maLa+nGWtizsY+AuxU=
Subject key identifier: 6D:47:B3:62:A7:E0:D9:49:BD:76:F1:ED:86:92:0D:C7:F6:6A:02:A3
Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Certificate serial: 0CDA
Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/94EA7370050111EA9BDD372BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:40:01 +0000
ROA not before: Tue 26 Aug 2025 18:57:34 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 7474
IP address blocks: 103.77.128.0/24 maxlen: 24
202.129.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:09:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3290 (0xcda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Validity
Not Before: Aug 26 18:57:34 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a42591-102d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:1e:2b:3a:19:c2:51:59:fa:da:c4:1f:a9:
d9:4f:7c:dd:6c:a8:83:b1:3a:97:2d:e4:5f:00:b2:
e6:53:b1:4e:53:26:9f:94:67:46:ff:43:1d:66:8d:
16:c0:cd:be:c8:2c:5e:a8:ab:03:f4:6a:cf:48:ee:
00:29:52:ad:21:40:df:57:87:26:0f:85:e5:0c:2d:
98:68:ca:53:9c:42:5c:86:d8:0e:df:f6:69:51:36:
5e:7c:c0:6a:ab:09:9d:5e:92:58:ed:9e:c4:9c:94:
ae:7e:e6:c9:96:96:71:71:7f:33:38:6e:d9:11:2f:
71:ce:a2:cf:0b:38:2b:2b:a9:9b:e8:2f:b9:3f:f2:
94:b5:6c:6d:ac:92:00:59:95:c2:1f:d5:7b:03:b7:
66:f3:1c:d2:4f:c6:8e:31:95:42:1a:88:5c:b6:3f:
57:66:46:31:a4:f8:60:e6:7d:a2:2c:46:a3:3b:2e:
e6:4d:5b:cd:a3:ad:9e:0a:39:69:27:35:4b:c6:e6:
43:ff:88:43:d9:1a:05:dd:2c:8b:68:19:49:de:34:
ae:34:35:63:0b:ff:59:d3:53:dd:39:5a:77:7d:7b:
38:4a:7f:3c:3d:09:55:b2:2a:0b:40:ab:15:36:9d:
c0:3d:f1:2d:fe:44:b5:07:3d:19:a7:73:8d:59:53:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:47:B3:62:A7:E0:D9:49:BD:76:F1:ED:86:92:0D:C7:F6:6A:02:A3
X509v3 Authority Key Identifier:
keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/94EA7370050111EA9BDD372BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.77.128.0/24
202.129.218.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:c2:8e:cc:80:24:80:26:df:3c:e3:b3:08:72:c4:38:29:7c:
0e:54:97:06:30:a6:4c:4f:46:84:cd:18:93:d9:40:e1:e7:d4:
e0:68:ba:cf:f8:d2:a7:cc:2e:51:4d:4f:d5:ba:84:dd:5e:17:
23:3d:c9:c1:20:de:30:f0:a8:dc:53:1f:c4:66:a4:59:ba:dd:
3c:7d:fa:ae:5f:d0:55:a7:fd:84:97:1e:b5:1e:b0:ea:ee:ab:
2c:41:40:50:dc:e6:e0:ee:db:e2:f0:ea:80:f5:f6:b6:7d:09:
66:08:43:5a:53:98:2e:96:27:60:35:53:45:56:2e:bc:de:5e:
b2:49:9e:93:bd:4b:d0:90:1f:eb:7d:fb:0d:c7:93:06:2d:5f:
95:29:99:a4:d0:06:aa:c4:43:ae:d7:9a:28:21:13:98:01:7c:
ab:09:f7:38:e3:04:7a:67:a4:12:49:c0:c5:5a:dc:ef:f8:e8:
f1:bb:6a:38:01:70:f6:d9:c7:41:ad:fc:b5:4f:d0:59:51:74:
2b:65:81:70:75:c3:53:6a:88:a4:3c:03:e0:29:0a:6b:36:a7:
d9:12:82:ce:20:68:66:4c:d7:77:18:ef:19:f6:f5:37:1f:b6:
66:03:97:39:19:54:bf:bd:e5:2a:77:28:68:cf:68:20:c9:60:
91:a7:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:41 2026 by rpki-client