
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D9D185C6D27A11F092DEA24AC4F9AE02.roa
File: D9D185C6D27A11F092DEA24AC4F9AE02.roa (raw, json)
Hash identifier: hAsd4MgKrzzFojSm6DEKyVq+itBFW1idmKj+K2KrQmQ=
Subject key identifier: 4E:0D:A3:79:25:AE:F4:72:5F:B7:59:7E:E6:ED:B7:29:66:97:D9:28
Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial: 37CF
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D9D185C6D27A11F092DEA24AC4F9AE02.roa
Signing time: Thu 16 Apr 2026 15:14:20 +0000
ROA not before: Thu 16 Apr 2026 15:14:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136602
IP address blocks: 119.155.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14287 (0x37cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Validity
Not Before: Apr 16 15:14:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e0fccc-846d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e6:32:ae:a9:17:c7:e5:3b:58:fa:c4:39:c6:
02:a2:69:06:a4:fa:20:e4:66:81:e8:da:7a:a5:c3:
b8:65:c4:a8:a0:68:0d:db:04:e0:96:c0:9c:db:ff:
fa:97:b5:e1:62:69:30:ab:b9:48:b8:7b:80:98:c6:
30:94:85:bf:ba:37:d7:1e:78:da:9a:ca:2f:6b:c5:
7f:6c:b3:6b:d8:48:be:e6:0c:92:3d:12:a0:e3:6a:
b0:fb:1f:42:39:11:03:fa:68:d7:47:a2:af:bf:d5:
43:4a:24:50:22:d9:04:5a:0f:ca:0f:ac:e8:8c:9f:
c5:37:32:01:2b:3e:b1:47:8b:82:ca:3d:a9:67:fe:
2a:89:85:94:e4:8b:78:42:08:74:37:75:ba:6d:33:
42:31:cc:ed:7c:06:28:eb:b0:97:2c:44:70:44:c3:
ca:13:08:e8:9c:61:50:d1:10:7e:10:a7:1c:46:fb:
ba:6e:07:60:5f:75:32:f8:d2:7c:9b:98:c5:f2:09:
f6:1d:b8:98:8f:a2:88:96:40:e5:ac:d0:7d:13:68:
5a:ae:8e:ae:dc:2b:c6:81:f7:5a:d0:dc:03:34:ca:
d7:e7:ed:ad:6b:93:ff:f4:08:64:e4:68:c9:fa:8f:
10:0d:77:c9:b7:b5:cf:2e:d0:88:1c:f8:b7:2f:35:
2a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0D:A3:79:25:AE:F4:72:5F:B7:59:7E:E6:ED:B7:29:66:97:D9:28
X509v3 Authority Key Identifier:
keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D9D185C6D27A11F092DEA24AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.155.135.0/24
Signature Algorithm: sha256WithRSAEncryption
86:de:00:f6:31:9a:6a:4a:75:36:2f:41:d0:39:a6:ab:34:60:
67:3d:b3:f3:c9:96:6e:f3:29:58:e1:ec:90:84:9d:e4:39:b6:
ee:61:00:d0:09:f9:83:9e:a1:87:f1:86:33:c0:5b:e0:bc:b6:
70:74:1e:93:c8:1b:8b:83:c8:12:b4:a5:81:24:07:4a:85:90:
b3:2b:cb:a6:50:63:40:b4:38:66:f1:f1:b2:c5:fb:dc:1d:a4:
04:4a:19:31:06:17:84:08:56:95:b9:b6:ee:f2:8a:5b:8a:a2:
6c:23:09:97:02:e5:d3:8c:d8:dc:88:a1:18:f5:d9:ae:bd:9f:
07:0c:13:7a:08:41:94:bf:82:f3:db:04:d9:ca:4f:fe:52:51:
5e:7c:2b:b0:2c:0d:d8:76:92:ef:bd:af:cf:4d:83:fc:f3:79:
09:23:1e:32:c8:a2:0d:67:a8:87:6c:c0:d4:38:3a:7d:fd:27:
75:64:97:db:9f:b8:a9:5b:46:64:46:b1:57:1f:3f:f4:2a:4e:
d6:1e:b9:5c:31:c6:ee:d1:e3:4f:96:1d:91:49:e8:97:c8:77:
71:f3:41:6e:63:c4:86:26:ae:c0:12:ed:f3:48:24:3b:ac:97:
4e:70:b8:db:8e:ff:e1:94:5f:ba:70:40:5e:2c:e2:33:e5:94:
ab:c8:71:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:08 2026 by rpki-client