
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/122F83AAC4AD11EA9E35F20AC4F9AE02.roa
File: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (raw, json)
Hash identifier: TLISGWppoBnnfbHZFjULlfKEwbQDopU4rmYPr0nU0OE=
Subject key identifier: D3:6D:2D:25:54:5D:DF:C0:47:58:E1:92:A4:52:B4:17:73:BF:EF:89
Certificate issuer: /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Certificate serial: 108D
Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/122F83AAC4AD11EA9E35F20AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:27:02 +0000
ROA not before: Thu 02 Oct 2025 17:47:09 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 4764
IP address blocks: 202.87.4.0/22 maxlen: 24
203.57.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4237 (0x108d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Validity
Not Before: Oct 2 17:47:09 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a468d6-0bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:9b:1c:ef:31:24:a8:71:8b:55:87:08:b2:
5a:b3:f5:cd:68:5d:51:58:87:a3:09:be:d1:ec:14:
19:d8:06:ff:8c:00:2e:52:8b:63:ea:52:5e:ce:89:
2a:00:1f:a3:53:30:7b:d4:05:cd:f5:b6:b0:1e:9c:
e8:da:26:4f:be:db:f5:0c:80:09:c7:20:2c:a8:73:
79:db:7f:d8:90:aa:b7:c6:72:66:93:4a:02:55:ba:
d0:df:fd:ab:13:78:82:9c:fb:fd:e9:cf:43:dd:fe:
04:5e:06:5d:51:54:70:9f:32:e1:e0:0b:1f:84:2c:
f4:26:07:6a:8b:85:64:09:9c:41:8c:53:be:a7:2b:
86:45:84:27:85:4f:f7:42:f2:57:84:e8:f6:d3:ea:
e1:71:40:96:0d:f2:64:64:34:b7:4c:18:47:bb:cf:
39:a5:c9:23:7a:5a:a2:74:26:37:39:1f:89:d7:61:
34:1d:83:45:e9:fb:16:a5:a3:22:e6:de:55:0e:3d:
e3:2f:a6:26:22:32:35:2d:95:52:8b:06:c3:66:65:
21:a5:ac:bf:b3:1c:81:ca:a1:92:17:31:b9:9e:9d:
72:b1:c2:a1:5b:68:92:5d:53:c0:c4:88:34:5a:4b:
5a:66:04:11:59:af:1b:f1:30:74:e9:82:1b:bc:96:
80:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6D:2D:25:54:5D:DF:C0:47:58:E1:92:A4:52:B4:17:73:BF:EF:89
X509v3 Authority Key Identifier:
keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/122F83AAC4AD11EA9E35F20AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.87.4.0/22
203.57.38.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:6d:ea:ef:b6:d5:6f:c4:d5:b7:c0:fc:7f:bf:82:78:e4:db:
fb:79:10:50:31:a0:4e:73:30:b3:66:b2:3b:e6:9d:d5:76:3c:
06:cc:88:00:5e:5b:59:52:cc:4e:11:98:52:92:ff:b7:0b:77:
ed:ed:d2:e5:3a:52:0c:51:0f:18:13:67:a8:48:ab:c5:01:09:
04:7f:53:69:e9:e1:94:6d:d4:8a:6a:21:56:fe:ed:fd:e4:95:
15:de:32:69:8c:9b:fb:59:65:44:5b:d9:84:a9:bb:4d:3a:56:
21:ee:1b:84:1c:33:ed:72:0b:41:01:51:cf:92:34:b5:13:30:
77:13:c5:70:32:e2:88:74:26:2d:e8:86:9b:00:79:c9:2c:ae:
65:79:97:ff:50:4b:02:e9:8c:c0:62:5d:65:2f:68:a8:2d:31:
1b:e8:1f:b5:66:dc:fe:31:73:2d:bd:60:2b:de:eb:07:c9:61:
6a:af:23:d4:62:d3:67:d7:8d:5c:ab:f1:69:d4:57:60:d1:c2:
78:5e:59:3b:0f:97:e3:b4:29:6c:0f:71:cc:35:9e:a9:e3:69:
f0:79:71:a3:37:90:1d:91:52:e6:ae:e9:3f:8d:28:e3:73:70:
d0:19:bb:e6:35:c5:91:ba:32:15:04:1b:01:02:0c:9a:68:70:
36:24:49:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:48 2026 by rpki-client