
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/64ECE086686E11F1B5EC161EA247A888.roa
File: 64ECE086686E11F1B5EC161EA247A888.roa (raw, json)
Hash identifier: 5hpmoAgrGo8NMXv9KWkRN9Mm+Hfns+DhrtgEm10TrKM=
Subject key identifier: 32:ED:E8:42:81:23:B3:97:CF:38:68:C3:3E:57:F6:9A:94:97:48:A0
Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial: 1499
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/64ECE086686E11F1B5EC161EA247A888.roa
Signing time: Tue 30 Jun 2026 17:21:14 +0000
ROA not before: Tue 30 Jun 2026 17:21:14 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 135542
IP address blocks: 103.129.199.0/24 maxlen: 24
2402:f5c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Jul 2026 16:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5273 (0x1499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Validity
Not Before: Jun 30 17:21:14 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a43fb0a-5890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:72:cb:16:5e:85:6c:dd:c5:f6:7a:65:9c:69:
37:cd:16:aa:29:ca:10:df:3b:23:86:17:b6:e8:77:
43:f4:44:ec:4a:b6:66:66:ee:ec:ee:4a:c3:26:29:
3d:87:09:6b:65:33:98:a0:bc:6e:8c:cb:4d:4d:ac:
50:92:c5:8a:3d:19:24:16:30:18:7a:9c:0f:fc:86:
bb:a5:74:2d:f0:89:7c:75:a6:9d:83:80:13:80:ea:
cf:8d:34:be:0c:4c:3d:bc:39:d6:91:83:ed:bf:06:
7c:1e:3c:e6:29:74:0c:ac:19:3d:e5:23:18:a8:f1:
10:07:16:36:82:05:7c:ee:7b:13:7e:c3:82:48:ad:
34:1d:a0:f9:be:f3:96:8b:e4:d0:39:40:61:a0:8e:
d0:0e:29:0f:bc:45:04:b4:b6:0f:f8:f7:d2:98:46:
3f:0c:1f:9d:a0:df:5f:51:f7:67:cc:a2:d4:6a:df:
6b:64:6f:0f:9e:16:00:8d:61:fd:3b:6d:09:2d:6f:
25:cc:03:fb:3a:37:9c:6f:04:95:90:94:b2:f9:52:
cf:8d:51:f4:51:22:7c:c4:2b:0d:93:6e:ba:15:27:
37:80:1f:4d:65:e1:c6:53:9b:ed:18:10:58:3a:32:
da:e0:cf:3f:04:f2:f3:92:ad:fd:57:5e:8e:51:7f:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:ED:E8:42:81:23:B3:97:CF:38:68:C3:3E:57:F6:9A:94:97:48:A0
X509v3 Authority Key Identifier:
keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/64ECE086686E11F1B5EC161EA247A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.129.199.0/24
IPv6:
2402:f5c0::/32
Signature Algorithm: sha256WithRSAEncryption
ab:f6:cd:8b:2a:a7:11:79:76:c3:89:d5:cb:83:a8:60:24:f6:
59:c1:57:08:8f:f7:d3:fe:c7:e2:d9:f2:57:36:dc:9a:80:16:
ef:ef:1a:ed:a6:3c:84:d2:4c:85:3e:df:cf:cc:a6:da:e2:b9:
f6:a9:bf:7b:f9:cd:b2:4f:e7:9d:6e:40:5a:f8:a2:0e:e8:a4:
ac:11:ce:0e:a0:3a:3e:31:dd:17:09:c2:48:41:54:b3:f0:c0:
f6:34:df:87:aa:eb:b2:73:23:02:7d:44:ac:a4:97:d0:44:74:
d9:4a:51:46:98:64:86:c7:64:74:35:be:05:6a:d3:6d:2d:12:
c3:52:44:bd:83:1d:fa:c1:60:cb:7f:91:16:28:34:c0:f4:23:
cc:e7:cb:5c:8f:2d:93:82:4d:07:01:0a:e3:34:e3:d4:88:c4:
c7:18:20:c6:f4:3a:81:e6:d7:5a:f3:38:f5:c3:e0:d0:8c:e4:
35:2e:e8:94:3e:f7:e5:11:98:86:9e:c2:3b:7e:f2:34:d2:b3:
50:0d:77:2b:80:fa:09:30:bd:6d:b6:1d:d1:97:80:ae:21:f1:
e2:4a:7b:f0:b3:95:a7:da:a1:16:96:74:ab:2f:64:14:d1:2c:
97:a1:fa:e0:8b:6b:ce:2d:0e:2f:6f:d6:74:50:7c:85:6f:82:
33:24:f8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 08:37:20 2026 by rpki-client