
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A49C2DF0E07D11F0A337A81D3B6F56BC.roa
File: A49C2DF0E07D11F0A337A81D3B6F56BC.roa (raw, json)
Hash identifier: 33ghJ+/qFZxFnKH4VbkZcfEoi8o/kSn4k397FhG//Aw=
Subject key identifier: D3:64:D2:6F:73:71:4C:14:E5:82:CE:F1:44:B8:ED:EC:FE:D3:C0:DC
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3A7A
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A49C2DF0E07D11F0A337A81D3B6F56BC.roa
Signing time: Sun 01 Mar 2026 21:22:46 +0000
ROA not before: Fri 16 Jan 2026 16:13:55 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 9341
IP address blocks: 27.124.87.0/24 maxlen: 24
27.124.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14970 (0x3a7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 16 16:13:55 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4ae25-8676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:8f:c6:13:66:b9:5e:6f:b7:8e:3e:c3:39:
b0:b5:d7:b6:b9:c8:70:02:43:11:c9:7a:28:89:ef:
1e:71:28:a8:13:f9:ba:81:bd:09:c6:c1:83:e7:be:
45:d7:14:ad:19:c6:b7:e2:a5:00:0f:db:98:93:dd:
21:9f:43:eb:17:c4:7b:60:ce:77:1f:d9:74:53:bc:
d6:cc:f5:76:c7:95:51:f2:f1:f7:45:d1:4b:47:95:
cb:3b:dd:4b:36:27:5d:e7:eb:d5:e9:ad:fa:d4:a4:
91:e9:22:28:6e:70:bf:3b:33:b8:99:28:5b:4c:19:
d7:25:98:95:03:1c:ee:76:51:0b:cf:11:92:49:c6:
37:2a:f0:27:02:0c:50:7a:52:c4:5c:a6:2a:0f:89:
11:07:eb:5e:ab:06:5d:ab:f0:f3:de:13:92:ae:e5:
33:62:a7:00:0d:85:d5:cb:c1:2d:80:29:4a:1a:38:
64:f6:bb:8f:da:df:83:ec:2d:4f:ca:4c:c9:63:58:
56:f2:3a:af:e7:be:5c:9c:98:68:98:93:72:28:73:
50:c4:6c:ec:e8:f3:ff:a0:cf:3f:aa:49:c5:c9:7a:
57:f4:d6:03:7b:b0:70:da:3e:0b:00:67:9b:4e:8c:
1b:68:36:46:ae:d1:ee:6c:c7:34:7d:80:9a:c1:00:
06:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:64:D2:6F:73:71:4C:14:E5:82:CE:F1:44:B8:ED:EC:FE:D3:C0:DC
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A49C2DF0E07D11F0A337A81D3B6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
27.124.87.0-27.124.88.255
Signature Algorithm: sha256WithRSAEncryption
1a:c5:fb:97:e8:d4:01:a0:f3:83:bc:99:65:07:c6:3f:60:fc:
2d:06:1e:61:3f:77:8d:2e:c3:83:f9:00:2a:67:55:f1:2f:56:
5d:de:40:02:14:ba:52:48:07:c8:10:66:f9:2e:d2:a4:b5:1c:
39:b7:82:b7:35:2b:14:b1:19:06:e9:c8:0f:c1:f0:06:49:b7:
d1:aa:66:2a:7f:bb:52:ec:14:6b:8e:ea:66:1a:c6:35:22:ff:
b1:a6:81:8e:51:a0:69:3f:f5:4e:03:1c:51:f9:a8:11:b8:e9:
a7:f1:aa:1a:04:0b:7e:47:4d:87:dd:ad:f4:bc:cd:0a:ae:a1:
7a:e7:17:97:3f:62:05:31:06:cd:6e:e4:63:78:40:bd:6f:ec:
5b:48:42:51:47:ee:2e:59:19:9c:53:16:29:36:f4:d2:d6:f2:
33:fa:dc:87:1d:49:80:4e:d6:9f:e8:81:9b:a5:df:ed:db:0d:
c2:8d:76:af:05:9b:71:9d:82:75:2b:32:ef:38:4f:7b:fc:b5:
bd:ac:e4:58:e8:73:e1:f4:e2:2a:18:ae:f3:ae:68:bf:8f:17:
80:8c:a0:ac:00:a6:51:fe:aa:61:88:ee:21:30:7e:bd:95:d5:
1a:9c:3e:c0:e7:fd:d4:ba:f8:4b:64:4a:c6:ec:a9:86:ba:82:
1c:fd:64:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:28:37 2026 by rpki-client