
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/9B8EF5B2ACBF11F19E9C47286511F970.roa
File: 9B8EF5B2ACBF11F19E9C47286511F970.roa (raw, json)
Hash identifier: QzkA3EztMBAZxrW2yeEzjtU9hztdqcb/aHMaxEZww9M=
Subject key identifier: BB:13:3D:FE:29:11:59:77:7F:41:25:2C:22:64:DF:C4:09:08:5A:79
Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Certificate serial: 1193
Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/9B8EF5B2ACBF11F19E9C47286511F970.roa
Signing time: Tue 27 Oct 2026 07:39:32 +0000
ROA not before: Tue 27 Oct 2026 07:39:32 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 133478
IP address blocks: 142.86.252.0/24 maxlen: 24
142.86.253.0/24 maxlen: 24
142.86.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl
rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 17:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4499 (0x1193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Validity
Not Before: Oct 27 07:39:32 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6ae05534-929c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:f6:5e:e1:17:d9:3a:37:4a:c0:89:bd:aa:
a7:c9:97:80:78:2d:f3:4a:ea:a0:76:16:04:ed:72:
55:b8:15:94:70:0c:b7:a0:b9:fa:aa:64:d3:4e:6e:
b5:06:42:85:ab:56:fe:8a:34:c7:a3:c2:6c:3a:a1:
f8:41:81:fd:7c:ce:07:f3:d0:89:cd:b4:75:9a:96:
d6:08:e9:8b:f4:02:c0:7c:5a:a6:f5:12:ea:c9:e9:
24:ee:51:62:1c:b6:8c:85:a5:f4:8c:a6:5e:79:0c:
77:a2:f6:8a:a1:a8:15:0c:c5:02:83:09:10:af:0d:
53:88:a2:b4:37:43:fc:a9:91:3f:a1:96:37:0d:14:
f9:58:20:99:b2:3d:78:5e:f2:ad:90:6d:9e:ca:e5:
dc:1c:85:40:f1:18:86:be:38:85:70:0a:11:59:3d:
3a:6a:66:d4:f4:6f:c1:ee:89:c7:c4:df:5d:3c:f7:
c4:eb:ff:56:ab:23:2f:64:48:00:2a:6d:91:08:fe:
70:00:ca:a4:05:9f:b6:cb:ad:76:5a:ea:5a:a4:09:
96:84:d5:e4:1e:f3:6e:1e:b9:72:35:ab:07:4d:98:
cc:a8:63:dc:2f:45:96:2e:26:11:88:ea:a2:52:d5:
0f:fb:85:d8:29:32:2e:c4:cc:1a:44:b9:73:bc:bc:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:13:3D:FE:29:11:59:77:7F:41:25:2C:22:64:DF:C4:09:08:5A:79
X509v3 Authority Key Identifier:
keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/9B8EF5B2ACBF11F19E9C47286511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
142.86.252.0-142.86.254.255
Signature Algorithm: sha256WithRSAEncryption
21:65:ef:cc:4e:c9:ba:5f:d7:e6:5d:eb:cf:66:57:2d:a8:8c:
8b:ec:7a:84:2a:a1:ce:94:0e:88:cd:a2:db:58:b3:21:94:2b:
e1:14:a8:c7:39:89:87:72:e7:e0:a0:54:ed:66:a8:a9:a6:81:
9f:ce:8d:b0:0d:0f:b7:2e:d4:d9:72:b2:0a:dc:d9:9a:d7:4e:
ee:fa:54:0c:c7:5d:fb:3a:00:7e:60:4f:b7:d6:46:4c:91:66:
b1:01:8d:3c:89:12:c0:e4:b3:38:e7:2e:2b:ab:89:e2:6f:83:
f7:81:be:af:09:22:b1:b6:0d:88:9c:b4:cd:c8:79:64:a5:9e:
c1:29:66:b4:9c:c3:e6:6d:04:e0:48:64:52:6c:cc:11:20:0e:
03:fa:ca:6c:69:86:f9:72:b8:c5:3d:bd:5e:8d:ed:19:03:44:
48:e1:b9:55:22:d3:bb:6e:47:dc:ad:0a:70:d1:10:eb:09:96:
12:fc:cd:0d:f6:c8:0c:ae:8c:99:36:72:fa:6e:4f:5b:4e:c0:
9a:e8:e1:ef:46:17:f1:7d:fc:fc:a7:86:e5:db:c3:f8:78:57:
f2:dd:d6:69:ae:99:2c:9c:13:d3:be:6a:24:05:84:ed:6c:a5:
6d:dc:e2:a2:37:c9:75:59:49:c6:cb:bb:74:e1:69:54:3d:27:
08:4f:68:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:41:57 2026 by rpki-client