
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/EA7DD3B85B8011F19AAA063FA7833773.roa
File: EA7DD3B85B8011F19AAA063FA7833773.roa (raw, json)
Hash identifier: ga7RmHBxUIf+hUQhJPOXCSIER/vz19Y1P9LRsEGGGbg=
Subject key identifier: 50:F1:A1:B1:79:FF:3A:AA:DB:A6:F4:A4:F2:B5:5B:EF:58:B6:5A:58
Certificate issuer: /CN=A9124B27/serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A
Certificate serial: 0133
Authority key identifier: 52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/EA7DD3B85B8011F19AAA063FA7833773.roa
Signing time: Sat 30 May 2026 03:02:44 +0000
ROA not before: Sat 30 May 2026 03:02:44 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 133001
IP address blocks: 103.124.204.0/24 maxlen: 24
103.124.205.0/24 maxlen: 24
103.124.206.0/24 maxlen: 24
103.124.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl
rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:46:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124B27, serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A
Validity
Not Before: May 30 03:02:44 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a1a5354-7002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:78:37:06:93:8e:fb:dd:10:f7:91:6a:c3:
c2:74:af:ed:d5:9e:03:c1:6a:99:a4:47:db:1e:96:
cd:2c:3d:05:d2:c0:e8:23:20:ae:63:34:0a:63:2a:
28:14:e7:92:aa:f9:6e:29:06:25:e6:d7:d8:af:73:
6f:a5:23:d5:8e:7b:50:a7:0f:58:ba:6a:50:c3:19:
3e:5f:0a:b3:71:cc:a7:81:43:2c:e5:a0:b5:85:13:
b0:9f:6e:fa:92:19:b6:e4:2e:5a:da:84:fa:bb:fc:
bc:71:7f:8b:5f:5f:89:b5:f1:e6:9f:d5:82:00:5f:
4c:f7:9a:9c:da:c2:16:b2:a1:89:dd:b5:4e:3c:d3:
41:1d:ba:5a:df:5c:b2:33:27:91:be:3a:26:86:57:
f3:8a:4f:29:ac:0b:6a:7a:5c:3c:7a:8c:f8:b7:46:
de:7c:01:3e:95:dc:64:af:65:8c:0c:9b:90:82:95:
71:9a:ca:7f:c4:71:f9:c4:55:0d:b2:6a:a2:44:ad:
a2:f8:98:8f:17:4d:e1:fa:d3:78:91:8f:9a:bd:1b:
3f:98:9b:4f:6d:83:38:66:f5:d6:32:7c:6f:09:2b:
41:95:22:4b:3a:02:0b:9b:9d:e9:b9:e8:dc:33:93:
d6:fb:3b:25:93:47:28:2e:a5:3c:60:3a:66:cf:58:
4c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F1:A1:B1:79:FF:3A:AA:DB:A6:F4:A4:F2:B5:5B:EF:58:B6:5A:58
X509v3 Authority Key Identifier:
keyid:52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/EA7DD3B85B8011F19AAA063FA7833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.124.204.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:94:4e:12:4b:17:35:f7:b1:bf:18:3e:4d:55:0e:05:92:29:
6a:b9:47:1b:ca:0e:c1:93:73:80:62:59:8b:54:0e:fa:a6:a1:
b1:bb:69:30:90:a0:15:20:be:16:25:7d:63:e6:28:86:f6:ae:
7f:c1:2c:c0:38:86:03:5e:db:b8:85:62:c4:c1:63:35:b1:a1:
c4:b1:0f:73:e7:86:7d:3d:3d:23:3c:c9:af:2f:e8:e8:8f:58:
6b:ab:ff:0f:f5:29:c6:96:b2:58:e2:4f:02:c7:2d:b1:62:cc:
a4:14:7c:62:da:bc:7f:e0:6a:e2:d3:d2:3d:06:4f:3a:2d:69:
2c:19:35:14:2d:70:50:be:7f:80:0d:1e:12:f4:65:29:98:f9:
99:3e:6d:ae:ab:7a:5d:d0:45:32:69:92:a7:ea:99:a8:3c:9a:
8b:3a:ae:70:02:6a:08:99:98:27:6e:f4:04:78:ea:c5:b3:bc:
e2:e2:c6:23:93:e1:20:9a:94:ca:70:90:f3:8c:3a:03:e5:e0:
c9:86:74:e6:f2:97:31:f4:52:64:94:fc:5f:d7:ea:c2:51:68:
ae:79:07:60:a7:2b:35:7c:e8:61:fa:1a:07:95:35:f1:16:b5:
76:5e:3a:68:9f:1b:b9:f4:d4:ad:05:d3:a5:51:b8:f3:f4:fb:
f4:b3:87:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:42 2026 by rpki-client