
$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/9609416A33D611EFB34E2C40C4F9AE02.roa
File: 9609416A33D611EFB34E2C40C4F9AE02.roa (raw, json)
Hash identifier: VEOYpLopU2c9FdbzxqgEzKYlCo37XOpklpOWcyDo3bI=
Subject key identifier: EB:CD:A3:58:B3:F6:C3:D8:96:37:6C:4A:0F:35:E0:E1:7E:C4:FC:84
Certificate issuer: /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Certificate serial: 0676
Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/9609416A33D611EFB34E2C40C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:05:15 +0000
ROA not before: Sat 28 Feb 2026 23:19:24 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 153039
IP address blocks: 202.12.127.0/24 maxlen: 24
2001:df6:36c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:42:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1654 (0x676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91813E4, serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Validity
Not Before: Feb 28 23:19:24 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a471cb-bea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:03:1c:67:8b:de:96:e2:75:db:0c:4c:4f:
54:f9:65:cb:ea:da:33:d6:b8:f3:27:f2:01:20:d8:
c8:89:2a:13:48:0a:30:f9:cc:e8:a9:3b:74:cc:af:
5d:bc:4a:e8:a2:58:57:4b:5f:d7:14:9b:aa:6d:20:
63:a3:25:cd:ec:a1:44:ce:f6:85:93:8a:9d:1d:e7:
db:d6:29:e7:09:c5:18:30:73:87:de:05:f0:c3:40:
6a:2e:e4:7d:cc:cc:64:16:16:7a:a3:52:15:63:f9:
72:a6:16:f7:74:21:af:1f:dd:7c:02:ca:14:15:ef:
f9:6d:90:8c:d3:c3:e5:c9:7e:3b:25:7e:84:dd:28:
27:20:9a:33:7f:54:52:91:8b:8e:a9:e8:af:26:17:
f9:6d:b3:f3:2c:1b:f3:ae:74:aa:4f:9d:a3:90:70:
67:39:f6:52:03:c5:8d:9e:01:eb:cb:2d:81:47:c5:
48:35:06:9f:ec:30:67:9f:94:2d:f2:06:b6:63:41:
b8:c7:27:75:f6:93:5f:66:b6:46:2e:8c:f4:75:c8:
5c:03:e6:93:29:8c:9a:0e:bd:98:90:32:39:53:76:
04:ef:e1:41:bd:4a:83:ac:2a:64:6b:26:30:dc:66:
5c:49:60:80:ea:b9:5b:cf:9d:ba:9b:b6:7c:a6:6d:
1b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CD:A3:58:B3:F6:C3:D8:96:37:6C:4A:0F:35:E0:E1:7E:C4:FC:84
X509v3 Authority Key Identifier:
keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/9609416A33D611EFB34E2C40C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.12.127.0/24
IPv6:
2001:df6:36c0::/48
Signature Algorithm: sha256WithRSAEncryption
ab:b6:85:70:08:5a:7d:50:f3:f2:96:07:00:ef:6e:28:b7:86:
43:db:c9:be:e3:82:6a:72:8a:ae:a6:b0:e9:77:fe:23:08:59:
70:fb:df:b9:cd:b9:ab:75:96:40:8a:a0:17:46:9b:01:20:82:
37:6c:31:9b:ec:c0:00:76:21:89:08:17:1e:ae:97:1c:35:1f:
6a:3d:9f:f6:62:df:3a:d8:00:46:fa:5b:40:f6:8a:8e:60:a1:
9a:7f:fe:6c:3d:14:20:82:a7:dc:40:7a:b7:93:59:0b:af:7b:
fb:8b:f8:f0:87:a3:a2:82:23:76:f0:e6:58:d9:ff:9c:3e:57:
f9:d3:2e:a9:38:ee:d4:ba:12:f1:37:1c:74:08:9e:b8:a0:0f:
fc:ca:23:b2:8c:26:c0:6c:8b:83:68:23:ab:27:c2:86:f0:ee:
d1:eb:25:c3:a9:12:05:8b:24:fd:4d:07:55:06:32:cd:18:9b:
97:92:f8:5a:f0:4f:06:af:49:c4:12:0a:6b:80:a2:36:84:c9:
78:e1:ba:d5:91:e6:52:f6:c5:d9:24:17:21:de:b0:3c:9c:f4:
12:b7:dc:22:e1:a7:c9:57:82:bf:fa:83:2e:49:e3:54:4b:dc:
78:58:5e:e4:c7:7b:03:43:57:a5:60:56:96:3b:a8:59:e7:0c:
65:92:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:42:51 2026 by rpki-client