
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/8865D2DAB27311F19B014BB93311F970.roa
File: 8865D2DAB27311F19B014BB93311F970.roa (raw, json)
Hash identifier: WNlnvKodmHQO98ZVcfgPe8oMm/EEIsB75+QEFuMXihE=
Subject key identifier: 4E:64:3B:DE:7D:1F:FC:91:A9:04:31:54:8C:7B:45:2A:C0:7F:2A:80
Certificate issuer: /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Certificate serial: 0821
Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/8865D2DAB27311F19B014BB93311F970.roa
Signing time: Thu 17 Sep 2026 08:41:11 +0000
ROA not before: Thu 17 Sep 2026 08:41:10 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 135074
IP address blocks: 103.42.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2081 (0x821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ECE7, serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Validity
Not Before: Sep 17 08:41:10 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6aaba7a6-864a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:26:c1:ea:ba:b1:27:90:8f:3d:55:88:ea:
23:52:b6:95:ff:f8:72:62:f2:12:28:d9:bb:2e:2b:
6d:5a:31:f2:40:3b:dc:e3:93:0b:6b:e6:d1:1f:78:
a6:34:6d:70:e5:aa:23:58:8d:37:df:c5:70:fe:30:
49:1b:d8:c8:6f:0c:a8:06:fa:9a:02:c0:d7:69:24:
a1:82:51:fa:ee:69:94:50:68:b3:79:f8:05:43:d2:
b2:fe:59:9d:8b:f4:36:17:3f:23:d1:84:99:17:13:
b9:e7:7b:f6:f8:40:4f:53:52:47:50:5d:99:2c:5a:
6b:1f:8b:e5:41:d4:35:e6:5c:dc:65:46:ac:0a:ad:
ed:9c:9b:25:fd:c6:55:6c:c3:42:52:95:db:2a:ed:
3d:2f:bd:ed:21:1c:63:4a:52:93:f1:d0:bc:24:49:
aa:fa:59:eb:4a:04:6b:7d:f3:9a:09:43:43:e6:4e:
dc:30:81:07:0b:15:d9:1f:1d:15:18:70:31:f0:2d:
fd:73:f9:f1:78:1b:1a:9a:0e:5f:59:15:39:39:7c:
e5:c4:77:db:30:bc:ec:76:ea:3f:79:8c:d3:d1:11:
d2:fc:c4:d0:00:a4:e2:6e:b5:74:ed:8c:4d:00:b2:
3e:c4:c9:2b:98:d5:c7:da:67:05:ee:f9:5a:68:f2:
cc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:64:3B:DE:7D:1F:FC:91:A9:04:31:54:8C:7B:45:2A:C0:7F:2A:80
X509v3 Authority Key Identifier:
keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/8865D2DAB27311F19B014BB93311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.42.28.0/22
Signature Algorithm: sha256WithRSAEncryption
37:08:4d:7f:af:d0:24:d2:f9:69:1c:bd:22:b8:f3:0a:ef:7f:
bd:e7:5b:74:f4:81:60:9b:ef:8d:29:31:1e:60:4d:a7:89:c3:
f1:bc:9e:c6:f0:b8:83:46:6e:20:49:cd:c1:3c:32:f5:2c:b1:
59:26:65:5f:d2:80:af:60:00:7a:48:7c:cf:82:98:81:f0:fa:
b7:42:d0:84:5f:8a:82:32:69:e7:73:32:52:91:f4:53:97:61:
0b:f1:ea:15:e8:34:fc:a9:ff:4d:bd:f3:c5:03:e2:ed:a3:7d:
cc:1a:89:7b:fa:ee:f5:38:48:f2:90:3c:1a:3b:51:5c:1c:94:
f8:14:78:a9:34:93:68:6a:2e:3b:75:08:59:88:cf:18:6a:53:
88:d9:6f:e4:a5:90:02:66:90:61:ff:04:cd:e5:94:48:e1:57:
22:b7:49:39:41:cf:51:fb:7d:9e:dc:6a:3a:0a:c0:37:97:a8:
00:6d:3f:16:de:7d:9d:48:1b:5f:6a:0e:9c:40:6d:46:60:02:
ee:77:8f:52:3c:3c:cb:35:16:e2:a6:cd:95:1e:ca:4a:1f:c3:
59:a2:52:e4:40:2f:ec:9a:0d:0f:36:e3:ec:4f:31:39:eb:e0:
e0:6b:3f:ec:bb:40:ed:3e:68:c4:65:59:c7:ec:59:02:77:dc:
d5:81:19:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:08:20 2026 by rpki-client