
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/07C8CFD0E18F11EF82714B13C4F9AE02.roa
File: 07C8CFD0E18F11EF82714B13C4F9AE02.roa (raw, json)
Hash identifier: Hz+NLkk81DlhQAOuS1uMRNHs8Ue2ka70A9UL7rm5PxY=
Subject key identifier: AC:F9:83:D3:58:31:5A:99:E7:90:05:21:C2:88:CD:0C:E7:21:D1:04
Certificate issuer: /CN=A9190E6C/serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3
Certificate serial: 0DE1
Authority key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/07C8CFD0E18F11EF82714B13C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:39:06 +0000
ROA not before: Fri 30 Jan 2026 18:15:13 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 138529
IP address blocks: 103.127.254.0/24 maxlen: 24
2001:df0:eb80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl
rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3553 (0xde1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190E6C, serialNumber=C96D1247F5CBA278AEAF529351B5F81CA57170A3
Validity
Not Before: Jan 30 18:15:13 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a44f8a-dbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7d:82:14:25:14:f0:7f:25:f4:87:77:67:92:
4e:d1:6a:6d:b6:61:92:bb:af:02:a0:d0:f9:c4:29:
cc:03:17:ad:ee:eb:04:cf:75:b7:5b:85:cd:6b:3e:
c5:18:1b:ec:87:45:ca:8c:4b:6b:12:42:99:da:6e:
ab:d4:1d:4f:88:49:8b:7e:de:bc:7c:b5:c0:13:8f:
65:3b:c4:ec:c4:4c:98:5c:46:e8:d3:b6:12:e7:22:
ec:45:90:c1:f4:5e:91:dc:5f:6e:5e:78:1f:5f:06:
2e:92:65:b7:27:00:f8:9a:a5:a1:34:d5:e2:76:e6:
a1:69:17:d0:81:84:8a:03:8f:8c:7c:4a:41:78:b8:
d9:0c:d8:c5:d3:de:3f:df:c4:91:b3:fa:51:a9:0c:
2c:00:f2:e9:d3:87:d2:b0:11:16:1b:e1:c0:a2:c1:
2c:0c:7f:d3:d9:63:5c:a5:82:e2:97:88:63:e0:a3:
f1:a7:83:2d:a5:79:95:25:b5:64:83:86:9e:af:e4:
9e:1f:94:0c:10:df:23:9b:47:57:0f:bb:54:10:7b:
46:46:1d:57:dd:71:64:e9:8d:c0:a8:5c:3a:c4:f0:
cf:27:15:e1:25:db:43:0f:36:0e:66:03:d6:fb:1e:
34:51:32:4d:fc:5a:60:7a:70:06:e2:3f:b8:2f:90:
3d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F9:83:D3:58:31:5A:99:E7:90:05:21:C2:88:CD:0C:E7:21:D1:04
X509v3 Authority Key Identifier:
keyid:C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/07C8CFD0E18F11EF82714B13C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.127.254.0/24
IPv6:
2001:df0:eb80::/48
Signature Algorithm: sha256WithRSAEncryption
74:3f:bf:3c:6d:d7:63:14:6c:62:1c:af:8b:81:7c:77:2f:c0:
54:c9:61:61:f2:f3:aa:b5:8a:aa:da:59:2b:90:ea:7a:c8:26:
53:7a:4d:d8:a5:fb:48:05:67:96:a5:86:13:4f:cb:c8:18:37:
80:f9:c4:0b:e7:a3:9c:ce:c6:0b:e6:b7:af:a0:fb:a2:67:1c:
a0:25:ab:dd:82:01:df:51:e0:9a:c5:70:d6:8c:dd:42:4f:49:
58:2d:d9:5f:7d:8a:c5:c9:5d:91:f1:94:1f:a4:b8:4c:77:db:
aa:b2:b7:34:6b:db:25:06:64:23:74:09:5f:72:25:9e:9d:52:
ef:6b:57:0c:f6:a6:51:4f:95:74:62:07:ca:4a:41:99:6d:a1:
3c:42:6d:68:1f:c7:0e:78:0e:99:64:6e:b0:6c:af:60:31:a3:
41:e7:78:ec:d4:8f:17:1b:05:37:83:1e:1e:31:e6:e9:36:fd:
e7:49:89:22:49:ca:47:a1:41:b0:2a:91:d2:2f:01:2f:33:11:
a8:20:df:c0:71:67:3e:0d:80:21:3c:59:a7:33:77:08:ee:25:
65:fb:f7:15:39:8e:a9:e8:5b:63:3a:4e:fd:9a:59:75:51:90:
bb:33:e6:35:01:1c:12:05:67:3b:e7:97:d5:a9:ff:4b:32:98:
c1:0a:d8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:00 2026 by rpki-client