
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/C78E4E640BC111F19AB158B3293D8C67.roa
File: C78E4E640BC111F19AB158B3293D8C67.roa (raw, json)
Hash identifier: X0yP7rrEhxpZ7Ku3XWJN8AYZV3RyJW+y7acAQg06I14=
Subject key identifier: AA:AD:48:B6:F0:F2:AE:81:F5:8E:FD:20:0A:0B:E2:96:0A:11:20:75
Certificate issuer: /CN=A9125F95/serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072
Certificate serial: 1E13
Authority key identifier: 27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/C78E4E640BC111F19AB158B3293D8C67.roa
Signing time: Tue 17 Feb 2026 06:50:13 +0000
ROA not before: Tue 17 Feb 2026 06:50:13 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 135407
IP address blocks: 45.249.8.0/22 maxlen: 24
103.217.176.0/22 maxlen: 24
2407:aa80::/32 maxlen: 40
2407:aa80:110::/44 maxlen: 48
2407:aa80:120::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl
rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7699 (0x1e13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125F95, serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072
Validity
Not Before: Feb 17 06:50:13 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69940fa5-fe7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9d:11:db:57:a9:d0:36:15:85:7c:b4:c3:b6:
c8:53:f6:a3:12:dd:a3:ee:40:8f:7c:0e:c6:15:ec:
f4:9a:20:36:81:33:09:28:70:40:f3:1c:49:0d:53:
e5:e3:60:c9:f3:68:02:64:60:25:3e:ef:44:aa:a7:
10:36:ef:ee:33:c2:80:86:4a:64:b1:45:b9:8c:15:
b1:48:e1:5f:17:41:28:54:98:0c:6f:48:86:ef:12:
68:e5:f1:79:9c:fc:4c:23:f9:3f:b2:f0:eb:7e:f2:
49:df:14:c6:3d:9d:91:00:01:0b:19:47:71:e5:cb:
ff:d5:cf:95:0c:01:c1:53:b6:7a:9f:84:45:08:1d:
7a:9d:1a:54:91:99:bd:af:79:a9:dd:d3:0f:a4:2c:
33:25:ad:0e:99:e5:ef:48:4e:50:10:bd:5e:a4:d6:
75:6f:49:ee:00:9a:0b:78:4f:24:ca:a7:58:96:2f:
23:21:fc:a9:55:53:d2:85:fb:a2:83:40:b2:ba:cb:
96:37:2d:44:41:7b:88:54:97:de:29:77:f0:62:33:
ce:e0:66:09:c7:f4:85:db:41:f6:ad:3c:42:b1:f2:
cf:ef:2e:b1:9e:2d:57:32:39:0e:3e:21:a0:03:2f:
64:e6:9a:72:c1:87:10:9e:b2:68:ed:4a:42:29:0d:
d6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AD:48:B6:F0:F2:AE:81:F5:8E:FD:20:0A:0B:E2:96:0A:11:20:75
X509v3 Authority Key Identifier:
keyid:27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/C78E4E640BC111F19AB158B3293D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.8.0/22
103.217.176.0/22
IPv6:
2407:aa80::/32
Signature Algorithm: sha256WithRSAEncryption
35:3c:4a:f0:04:30:5f:5c:94:ef:27:6e:ae:65:17:9e:fe:16:
10:2f:b8:b4:0b:ae:18:6b:5e:d5:68:ed:8d:0d:4c:88:0a:b3:
9c:9c:6d:13:32:e0:e9:85:32:75:db:29:7f:81:09:90:8d:2a:
9d:85:d3:9b:b9:6c:7f:3d:74:be:04:a8:72:67:da:9f:bc:aa:
c0:95:3e:92:a1:0f:7d:89:11:bb:6d:8f:89:c3:3b:cd:ae:5b:
4a:f4:9c:40:ef:6c:f4:0b:25:05:3e:d7:39:cc:9c:5e:ca:d0:
93:04:73:22:b6:f7:d5:3c:e8:d9:a4:6f:f1:e7:fc:b5:c4:fd:
fc:91:70:70:b4:0a:0f:00:7c:c6:42:fd:a5:e5:cf:7d:af:1f:
d0:8b:d7:d7:03:23:4a:9e:53:c1:64:15:13:49:2d:59:bb:aa:
9c:68:73:b4:a3:c5:51:c3:47:8c:10:9f:45:08:2d:bf:e7:f7:
b3:33:e4:b0:27:fa:95:4f:16:99:4d:a8:11:36:41:25:51:39:
c7:ff:7c:db:f6:26:4a:18:6f:53:80:0e:ea:24:ee:43:2c:35:
69:38:03:19:8b:3a:07:c2:39:ca:34:3c:5d:f3:fe:6f:36:6f:
fa:56:86:cf:cb:95:99:c8:2a:7b:c9:e0:dd:9c:ac:0e:e5:19:
1b:e4:62:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:48:41 2026 by rpki-client