
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/33F4955E3A3411F1992413829C833773.roa
File: 33F4955E3A3411F1992413829C833773.roa (raw, json)
Hash identifier: llScgH/DERZP3O6YHfGF7jLGiuA7wh+xHhl+qdlnh+A=
Subject key identifier: D6:4A:A1:03:A2:63:53:C3:92:4C:2E:BF:74:74:8C:C3:CB:15:77:B8
Certificate issuer: /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
Certificate serial: 114A
Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/33F4955E3A3411F1992413829C833773.roa
Signing time: Wed 24 Jun 2026 01:50:54 +0000
ROA not before: Wed 24 Jun 2026 01:50:54 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 133478
IP address blocks: 103.95.224.0/24 maxlen: 24
103.95.225.0/24 maxlen: 24
103.95.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl
rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 17:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4426 (0x114a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120974, serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
Validity
Not Before: Jun 24 01:50:54 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a3b37fd-9cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e1:64:3a:36:b4:e2:67:c5:c9:95:06:cc:98:
12:20:63:03:38:0c:dc:25:45:d1:5f:40:dd:26:ac:
d1:d1:91:82:22:ce:be:31:e4:03:a7:88:ca:51:6c:
b5:76:5f:ad:a8:e2:9e:46:e5:3d:c3:09:09:b8:67:
aa:c8:81:eb:cb:fc:80:e1:64:d7:d5:19:40:28:16:
52:5a:23:f8:d4:40:c7:f7:05:ac:03:fc:67:97:0d:
7e:b8:a2:9f:e6:55:9c:0e:0d:71:19:dd:42:e9:6a:
b1:b3:ad:8d:6f:68:32:d6:87:d3:84:0a:ef:c1:74:
c5:4c:0c:26:8f:a7:f0:ca:22:af:19:38:00:9b:73:
8c:71:33:76:bf:19:f5:d3:8b:e7:7f:7f:49:d1:71:
a7:35:76:f2:33:bc:d8:62:ec:64:d6:a1:d7:e7:3e:
cd:88:f7:4b:2e:2a:a4:cb:ad:9e:c4:5a:57:03:cc:
0c:0f:34:47:26:51:3d:24:76:7a:3e:4b:d6:91:18:
cf:b8:e0:33:85:a9:1f:63:1c:3a:f3:e5:97:a7:6b:
f6:46:94:43:9b:2d:9f:ab:bf:4d:bc:be:81:b9:45:
b8:10:a5:a5:98:2b:68:30:47:2f:ae:90:29:b0:91:
eb:d3:18:44:c9:51:60:73:20:16:18:a4:79:a8:d2:
05:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4A:A1:03:A2:63:53:C3:92:4C:2E:BF:74:74:8C:C3:CB:15:77:B8
X509v3 Authority Key Identifier:
keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/33F4955E3A3411F1992413829C833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.95.224.0-103.95.226.255
Signature Algorithm: sha256WithRSAEncryption
6b:61:fd:30:64:bf:eb:71:f8:2d:c4:31:72:78:84:5e:6b:0c:
47:42:ff:fb:f0:d2:43:61:77:42:51:39:03:4a:3d:18:7d:11:
db:3c:f2:7a:8b:da:27:1f:25:9c:2c:9b:4a:20:10:e6:8c:e3:
ce:c3:dc:07:5f:7b:9e:95:c1:82:b9:12:13:ba:a9:cb:76:10:
e2:9c:a0:67:57:e2:c6:38:36:1b:d9:68:5d:94:51:54:7a:74:
3f:22:f1:82:8b:ce:f0:73:9c:05:48:91:7a:b3:10:de:6f:13:
d4:b5:54:d8:2f:cd:c8:9a:b5:4b:a1:6b:39:45:a2:61:90:56:
0d:2a:96:15:38:fd:f7:7c:8f:e0:b2:57:8c:55:87:0d:57:77:
14:24:a8:72:50:41:ed:d3:1b:ed:ac:bf:c3:49:a8:7d:f3:fa:
d1:4d:1e:46:5d:55:22:2d:19:66:a3:76:aa:2a:00:64:01:bd:
4d:e4:49:2a:09:27:9e:8e:1b:db:cd:70:96:8c:60:1a:63:02:
7b:73:90:9b:16:6b:b5:ef:fa:bf:fd:2c:37:ee:d4:9b:df:0c:
b1:be:d7:9e:b3:67:ab:81:af:f9:16:e5:69:97:e3:08:9a:46:
0a:3f:e9:1d:5a:73:7b:0c:fa:46:7f:7c:8a:db:bc:ea:0a:5a:
ea:c7:bf:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 09:55:01 2026 by rpki-client