
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/A1E87910832A11ECA409521EC4F9AE02.roa
File: A1E87910832A11ECA409521EC4F9AE02.roa (raw, json)
Hash identifier: dQ31DGysxuRcz8IXxZUTh7NYyP9e4QqCfC6Tluzrj9A=
Subject key identifier: CB:87:0A:98:80:D6:80:6A:F6:F2:AF:67:89:06:C5:82:E3:F9:8A:29
Certificate issuer: /CN=A9193C85/serialNumber=185FF6647E1E9677501377B5515479B9E9461067
Certificate serial: 1224
Authority key identifier: 18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/A1E87910832A11ECA409521EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:36:14 +0000
ROA not before: Mon 22 Dec 2025 17:14:34 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 45766
IP address blocks: 103.127.4.0/22 maxlen: 22
103.127.4.0/23 maxlen: 23
103.127.4.0/24 maxlen: 24
103.127.5.0/24 maxlen: 24
103.127.6.0/23 maxlen: 23
103.127.6.0/24 maxlen: 24
103.127.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl
rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:34:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4644 (0x1224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193C85, serialNumber=185FF6647E1E9677501377B5515479B9E9461067
Validity
Not Before: Dec 22 17:14:34 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a44ede-53e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:62:c8:c5:f9:16:a7:31:1a:67:b5:ef:84:
00:6a:6c:88:df:0c:bc:e1:9a:7d:38:2b:42:23:7f:
04:31:a5:ee:35:9d:4e:16:f2:4d:6e:90:a7:81:33:
10:66:5e:fc:27:82:f4:c7:61:fd:24:19:cc:51:cc:
93:46:1e:0d:92:ec:d2:6f:2a:84:22:46:b7:a4:1c:
ae:d2:b3:e4:29:e9:8e:b9:4c:23:a4:a8:36:ca:41:
37:80:72:cf:f3:a3:fb:6c:01:66:e5:c7:bc:4f:67:
23:cb:87:cd:59:b0:cf:af:eb:59:52:23:11:c3:d2:
7e:f0:08:9a:29:56:2c:29:33:49:85:3f:ae:3f:0e:
14:6a:a9:62:51:f3:8d:f9:11:6c:b4:81:6b:69:3e:
6a:14:1b:62:8c:fe:11:3b:ac:bf:f5:23:32:d3:6c:
7a:97:e6:62:04:59:bf:e3:0f:68:73:49:6c:f1:3a:
f3:1b:e5:33:1e:cb:73:ad:4a:d6:2f:35:d3:d3:65:
c3:ed:e7:e0:c9:95:5d:d7:ab:4b:bc:a3:7e:ed:4c:
56:07:ae:af:ec:13:fb:1c:c1:99:bb:75:21:4f:9a:
de:eb:b5:40:7b:d4:b3:77:54:d1:2e:94:e9:68:95:
8f:26:fe:6b:65:4a:49:87:a5:a2:6d:50:8d:33:96:
1b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:87:0A:98:80:D6:80:6A:F6:F2:AF:67:89:06:C5:82:E3:F9:8A:29
X509v3 Authority Key Identifier:
keyid:18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/A1E87910832A11ECA409521EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.127.4.0/22
Signature Algorithm: sha256WithRSAEncryption
21:aa:1f:5d:d7:b7:7d:dc:77:41:a4:ce:b3:35:20:2a:1c:53:
9a:65:73:25:a1:f9:e2:20:64:11:55:a5:3b:db:5e:e5:39:af:
47:0f:b9:d5:90:5e:0f:ab:02:4a:d6:db:34:13:22:77:99:87:
a7:32:d6:c9:5c:60:64:2f:39:5d:4e:e7:1e:51:00:28:29:78:
50:38:cc:98:b9:d7:00:ff:1e:2a:5f:99:c7:fa:7c:8c:5a:6f:
af:8c:99:ae:2d:1a:f6:0b:fd:09:2f:17:13:9f:aa:42:da:4d:
41:63:70:45:ad:c7:26:70:81:df:60:86:e9:44:45:92:56:fa:
13:a8:05:bf:0d:df:51:80:9b:3b:f1:4a:af:ce:d1:b5:41:7f:
78:00:14:13:77:23:e4:c7:ff:de:b2:3d:ee:87:db:bb:82:de:
9d:8f:4a:bb:75:ce:7a:da:f3:5b:8a:7b:de:60:36:81:9b:25:
32:20:59:6d:e5:b5:9f:45:0a:46:79:e7:d9:5c:a4:cf:df:75:
0d:c1:08:48:a0:22:c8:b5:c4:5d:b6:82:9d:2b:ec:3e:48:9b:
eb:87:45:5b:07:aa:6f:74:e1:98:96:e1:8a:a4:f6:b1:3f:41:
67:63:d6:40:63:0d:de:22:d7:a8:df:f3:fb:ec:1a:d6:54:0c:
6c:ca:b5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:04 2026 by rpki-client