
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/A87BA1063A4B11E99182B31BC4F9AE02.roa
File: A87BA1063A4B11E99182B31BC4F9AE02.roa (raw, json)
Hash identifier: 5aLn/8Q1nDDPD6ZFyv/iHuTYqfmizbO2KDvpSPnF/0I=
Subject key identifier: E5:20:8A:A8:8B:51:34:C8:07:F6:06:B7:E8:23:79:9D:4F:68:5B:37
Certificate issuer: /CN=A9120974/serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58
Certificate serial: 111E
Authority key identifier: A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/A87BA1063A4B11E99182B31BC4F9AE02.roa
Signing time: Thu 28 May 2026 17:21:49 +0000
ROA not before: Thu 28 May 2026 17:21:49 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 45090
IP address blocks: 109.244.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl
rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 17:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4382 (0x111e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120974, serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58
Validity
Not Before: May 28 17:21:49 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a1879ad-134b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:49:ff:4d:c5:ab:26:9a:20:86:c1:ce:fc:
0a:ab:5b:02:ca:a7:4d:b9:bd:bf:13:da:1e:72:46:
15:71:52:cf:da:a4:4a:58:06:9e:f8:58:ca:22:fd:
23:de:76:55:5e:97:e0:22:c9:3b:4f:25:33:7a:85:
ab:1c:e9:82:a1:f5:c5:b2:04:4f:48:ab:9f:4d:0e:
1a:50:f7:0c:99:f8:26:1d:27:7e:19:bf:15:82:e2:
70:2d:5b:99:9e:aa:1e:c7:09:43:d0:c4:4b:04:d8:
ad:0c:32:72:95:a8:57:16:6a:ea:5c:99:a0:3f:d3:
95:f4:ca:f5:f1:8f:e4:04:f3:ab:9b:ed:e5:f8:14:
e8:6f:9d:ba:3a:f6:0e:45:eb:44:d5:4b:d3:06:15:
38:2a:4b:b2:7b:b5:f5:20:f6:09:b2:78:c6:f5:21:
a2:d1:aa:77:50:cd:83:3b:82:89:84:53:b5:00:65:
e6:0d:5f:97:45:cf:b9:e6:0e:9a:16:0a:a0:9a:3b:
80:ea:fe:fd:ec:76:6b:b0:49:8b:9b:38:11:00:da:
94:81:de:81:ac:2f:7e:bd:e8:d9:10:d3:0a:70:1a:
de:33:4a:8a:52:61:79:af:6b:5f:6b:0b:e7:7a:a3:
40:b7:f3:8a:ab:ba:e7:73:b3:fa:1b:6b:21:9d:aa:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:20:8A:A8:8B:51:34:C8:07:F6:06:B7:E8:23:79:9D:4F:68:5B:37
X509v3 Authority Key Identifier:
keyid:A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/A87BA1063A4B11E99182B31BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
109.244.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:73:82:dd:77:d1:01:ef:0e:9b:8d:a0:31:4a:1e:97:2a:d7:
bf:1e:3e:90:f1:26:c5:fd:1b:cc:b8:a6:0f:20:05:8d:3a:0e:
79:78:46:35:94:01:ee:ed:13:7b:86:ae:d9:ac:7f:36:a9:9c:
02:ab:2e:4c:72:5c:93:62:f1:5e:f2:0a:f1:78:b0:28:21:96:
89:3a:92:17:aa:a5:d1:f0:a5:17:7a:b4:48:b7:b3:00:b6:31:
16:93:52:e4:9e:24:0b:7e:42:df:e6:21:3b:2a:49:1d:c2:6f:
9e:ff:ca:4c:01:83:be:7d:6d:11:5b:2c:ac:84:1d:bc:fe:25:
45:90:ed:bd:a6:d2:6a:7c:27:14:13:83:ff:97:17:28:b2:a4:
94:d8:32:cc:30:fe:d2:36:02:b9:12:93:60:43:e4:fd:cc:31:
01:0d:56:6d:33:d6:28:08:d0:ee:77:64:af:6b:69:5d:f2:35:
f8:2a:22:60:3a:65:2f:3b:69:4b:8e:5e:b2:cf:63:6a:98:08:
65:8b:09:e4:75:5f:4e:9a:c8:ff:a7:e1:49:b8:55:9c:a6:96:
28:f8:31:08:9b:ff:84:0a:8b:1b:5e:c2:6d:c9:e0:55:4d:96:
38:d9:70:c2:64:95:ec:b8:6c:e0:13:86:c2:d3:9e:76:42:92:
0d:1b:7c:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:24:18 2026 by rpki-client