
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/5277F6368D2411EC816B4C70C4F9AE02.roa
File: 5277F6368D2411EC816B4C70C4F9AE02.roa (raw, json)
Hash identifier: KDbcuHsIC1RcVE6yFrvbeINE1VdVoSmcV8c9yZ0v9xc=
Subject key identifier: C1:36:31:29:98:CB:23:48:A3:C4:3A:25:EF:2F:55:27:A6:B3:84:A0
Certificate issuer: /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Certificate serial: 04DC
Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/5277F6368D2411EC816B4C70C4F9AE02.roa
Signing time: Mon 28 Sep 2026 18:36:27 +0000
ROA not before: Mon 28 Sep 2026 18:36:27 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 63996
IP address blocks: 103.129.238.0/24 maxlen: 24
103.129.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1244 (0x4dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119A40, serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Validity
Not Before: Sep 28 18:36:27 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abab3ab-8822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:57:49:b4:9f:9e:ba:be:d4:df:af:db:a2:7a:
34:ab:b0:c1:51:74:28:cb:a6:e5:a0:6a:9f:25:63:
6f:81:89:45:76:f3:05:5e:d0:fd:df:79:4b:e9:94:
0d:f7:1c:39:1c:30:05:bd:fe:e6:5b:2e:5e:f9:00:
5c:ce:3d:f4:28:d6:d8:23:6a:94:91:4d:05:29:92:
f8:89:b0:20:1c:38:8c:f0:8d:44:18:59:44:54:c0:
ff:9c:33:08:07:bc:db:13:60:8d:ec:94:75:5c:6e:
3d:7d:af:27:a6:0d:9a:1d:45:32:ad:58:be:34:6e:
21:ad:d0:60:1f:67:c6:2e:f3:7c:68:94:a9:d7:63:
66:68:af:49:ed:41:27:18:28:bc:2e:69:12:4e:b1:
83:d1:c1:ce:91:fb:93:b2:ac:6d:d9:91:ff:27:69:
cf:32:e5:a5:8a:9b:ca:3c:ff:5f:45:9e:b9:d6:04:
87:f3:33:bb:93:af:43:09:92:25:78:f9:9d:44:12:
27:d0:21:8a:74:de:67:1e:92:2a:d4:f7:df:d5:a5:
83:b2:e5:29:8b:24:3d:fe:6a:26:6a:75:8d:55:46:
36:11:c4:8b:d0:10:97:95:38:90:30:fa:62:9f:8d:
64:2e:4a:df:99:24:ea:8b:28:24:9e:8f:6e:02:e0:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:36:31:29:98:CB:23:48:A3:C4:3A:25:EF:2F:55:27:A6:B3:84:A0
X509v3 Authority Key Identifier:
keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/5277F6368D2411EC816B4C70C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.129.238.0/23
Signature Algorithm: sha256WithRSAEncryption
74:71:73:53:ca:55:2d:a9:8c:34:27:d3:d0:96:41:1d:1f:a4:
6b:b1:2c:26:da:5a:fa:e1:2a:a8:7c:35:e2:6f:54:3a:1d:cf:
ef:b4:da:cc:42:ee:23:db:be:17:e5:41:cb:96:ea:ea:9d:9f:
18:e3:65:5d:2b:7f:30:3a:fd:88:ff:4e:ef:4b:8c:0f:3f:88:
09:04:8f:5a:40:e8:bc:33:52:9b:72:d8:5b:c5:8a:b1:3f:11:
01:5a:24:79:4a:1f:0b:68:df:4a:a1:85:b8:0a:35:32:11:09:
be:50:84:fe:0e:38:b0:7f:1e:6e:48:c7:bf:43:fa:63:c7:cc:
96:27:9f:8c:2b:1b:fa:50:f8:15:63:b8:df:59:41:c0:70:0d:
c3:67:c3:b9:25:25:6b:e3:01:8d:d1:e2:77:4c:ee:99:34:b5:
b9:b8:92:06:cb:d3:3e:b6:06:d5:78:79:ec:ef:14:3a:93:cc:
0f:67:c5:8f:88:c1:3e:ae:f1:17:75:e3:f3:bf:f0:c1:1f:81:
b1:f1:8e:83:c2:fa:17:db:89:8f:75:0a:32:fa:81:4d:ec:18:
ed:aa:3e:c8:d0:bf:5a:2f:cd:d1:76:36:a8:34:8f:66:f5:db:
e8:94:a9:60:dd:c8:b6:d1:17:2d:a0:88:e0:4b:6a:e5:af:c4:
77:12:bd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:20:09 2026 by rpki-client