
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/8C138F502CCA11F1960EC6ED91833773.roa
File: 8C138F502CCA11F1960EC6ED91833773.roa (raw, json)
Hash identifier: xJmZuhv9rNcM/Fsd3fmDp03WFv+ujmJvez9T7ai4exw=
Subject key identifier: 2A:DF:62:AB:EA:B6:DA:61:D0:CD:42:7F:6D:B0:83:CC:6A:79:AC:F7
Certificate issuer: /CN=A9124D7C/serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
Certificate serial: 03
Authority key identifier: D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/8C138F502CCA11F1960EC6ED91833773.roa
Signing time: Tue 31 Mar 2026 06:26:27 +0000
ROA not before: Tue 31 Mar 2026 06:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138398
IP address blocks: 163.128.132.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl
rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124D7C, serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
Validity
Not Before: Mar 31 06:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69cb6913-d05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:78:ef:7c:cf:23:53:09:d2:21:86:50:60:
e2:4a:5c:a5:d6:b6:46:c7:03:25:02:00:bd:da:f7:
8b:bf:5e:e5:76:32:f8:2b:6e:8d:a1:79:d9:0f:c2:
2a:84:76:f5:14:c0:e7:92:17:54:ba:2c:14:61:3a:
71:ba:1f:77:de:1c:de:70:64:3f:4c:63:b1:1a:04:
59:7d:a9:c9:6a:b9:8b:4b:72:39:35:56:a6:26:54:
9b:66:8c:55:76:9a:92:ec:4d:f6:2d:a2:39:3b:7c:
d6:2c:d2:63:bf:9e:18:bc:03:57:cb:50:16:2c:25:
86:9c:5f:05:3e:81:0f:db:85:0e:93:61:7f:77:d3:
89:bd:d4:d8:00:c4:7e:58:e7:e6:ee:7a:fe:58:5a:
fe:48:91:dc:ec:78:78:ef:7a:84:49:06:24:c6:71:
db:c7:8b:67:cc:21:f1:f2:4f:c8:ef:59:40:e5:c5:
16:41:a2:93:b3:67:d6:61:73:bb:76:c6:bb:36:5c:
8d:bc:5c:12:f9:1a:80:ba:2c:af:b7:76:c9:34:2f:
04:51:8e:61:c4:12:76:3f:fe:30:b6:1a:1a:5e:67:
64:2c:c9:44:4a:9b:01:33:10:f3:67:8a:b0:06:17:
4a:f8:c1:b7:55:13:10:e8:9a:c9:60:b1:49:43:b1:
b3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DF:62:AB:EA:B6:DA:61:D0:CD:42:7F:6D:B0:83:CC:6A:79:AC:F7
X509v3 Authority Key Identifier:
keyid:D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/8C138F502CCA11F1960EC6ED91833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.132.0/23
Signature Algorithm: sha256WithRSAEncryption
79:bf:5e:21:01:e4:12:42:3e:e8:98:83:15:fa:97:97:50:82:
d2:7b:a1:40:e4:17:fc:9f:a0:16:08:e8:54:55:9d:57:84:ec:
66:6c:d8:47:43:2d:2b:17:33:8a:2f:af:e5:f1:31:71:a5:6e:
29:8d:13:82:0e:0d:af:ad:5f:ae:91:db:02:d4:b2:40:e3:29:
09:af:d0:c9:4b:e8:f9:e1:e2:e2:4b:b5:d2:2e:6f:7e:fc:ed:
f6:3a:a8:9f:bd:42:61:fb:5f:f3:9f:b1:70:d8:54:6d:31:a4:
ff:5a:39:68:ce:41:6d:4d:c7:5f:39:22:a7:63:52:03:32:a5:
9a:f4:af:a4:9e:03:47:ea:4e:3c:ce:ee:a8:18:bb:52:43:6b:
96:38:be:9e:da:aa:4a:5a:d5:dd:12:e7:04:b2:24:6d:b6:54:
e1:e4:f1:e1:58:ae:1e:7b:47:f2:5c:09:c4:64:75:a6:d3:41:
aa:ff:e7:d4:ec:59:66:d8:61:31:eb:e6:89:ba:ee:e1:4f:eb:
49:50:78:1a:87:36:70:51:00:4b:4f:75:53:1d:62:0c:83:51:
39:a7:cb:7f:75:33:56:41:5c:9e:3d:b4:48:4d:3f:d8:58:1e:
26:27:5b:9d:d3:05:82:80:3c:33:0a:89:82:72:9d:1a:49:52:
83:9a:d9:91
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NEQ3QzExMC8GA1UEBRMoRDkyNDBCRTUyNzIzRTUxN0YxRTU0NzVBMUJDRjk0QjhG
MDhDMDM4MDAeFw0yNjAzMzEwNjI2MjdaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5Y2I2OTEzLWQwNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCnwnjvfM8jUwnSIYZQYOJKXKXWtkbHAyUCAL3a94u/XuV2Mvgrbo2hedkPwiqE
dvUUwOeSF1S6LBRhOnG6H3feHN5wZD9MY7EaBFl9qclquYtLcjk1VqYmVJtmjFV2
mpLsTfYtojk7fNYs0mO/nhi8A1fLUBYsJYacXwU+gQ/bhQ6TYX9304m91NgAxH5Y
5+buev5YWv5IkdzseHjveoRJBiTGcdvHi2fMIfHyT8jvWUDlxRZBopOzZ9Zhc7t2
xrs2XI28XBL5GoC6LK+3dsk0LwRRjmHEEnY//jC2GhpeZ2QsyURKmwEzEPNnirAG
F0r4wbdVExDomslgsUlDsbMJAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUKt9iq+q2
2mHQzUJ/bbCDzGp5rPcwHwYDVR0jBBgwFoAU2SQL5Scj5Rfx5UdaG8+UuPCMA4Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0RDdDL0EwM0VBQUM2MkNB
RTExRjFCMjc2QjMxNUM4ODMzNzczLzJTUUw1U2NqNVJmeDVVZGFHOC1VdVBDTUE0
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMlNRTDVTY2o1UmZ4NVVkYUc4LVV1UENNQTRBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NEQ3Qy9BMDNFQUFDNjJDQUUxMUYxQjI3NkIzMTVDODgzMzc3My84QzEzOEY1MDJD
Q0ExMUYxOTYwRUM2RUQ5MTgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGjgIQwDQYJKoZIhvcNAQELBQADggEBAHm/XiEB5BJCPuiYgxX6l5dQ
gtJ7oUDkF/yfoBYI6FRVnVeE7GZs2EdDLSsXM4ovr+XxMXGlbimNE4IODa+tX66R
2wLUskDjKQmv0MlL6Pnh4uJLtdIub3787fY6qJ+9QmH7X/OfsXDYVG0xpP9aOWjO
QW1Nx185IqdjUgMypZr0r6SeA0fqTjzO7qgYu1JDa5Y4vp7aqkpa1d0S5wSyJG22
VOHk8eFYrh57R/JcCcRkdabTQar/59TsWWbYYTHr5om67uFP60lQeBqHNnBRAEtP
dVMdYgyDUTmny391M1ZBXJ49tEhNP9hYHiYnW53TBYKAPDMKiYJynRpJUoOa2ZE=
-----END CERTIFICATE-----
Generated at Sun Apr 5 22:22:40 2026 by rpki-client