
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/9C524DA858CE11E891382260C4F9AE02.roa
File: 9C524DA858CE11E891382260C4F9AE02.roa (raw, json)
Hash identifier: MGqf0bAb49+pYXVKIaFkkJi0+c+eq1frALstgizB3/M=
Subject key identifier: DA:5B:D6:DC:A7:6A:CB:EA:0F:6C:0C:D5:AF:2E:B4:EF:45:79:B7:45
Certificate issuer: /CN=A9127673/serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7
Certificate serial: 1579
Authority key identifier: 31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/9C524DA858CE11E891382260C4F9AE02.roa
Signing time: Sat 28 Mar 2026 17:24:20 +0000
ROA not before: Sat 28 Mar 2026 17:24:20 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 136380
IP address blocks: 103.86.56.0/23 maxlen: 23
103.86.56.0/24 maxlen: 24
103.86.57.0/24 maxlen: 24
2407:2bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl
rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5497 (0x1579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127673, serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7
Validity
Not Before: Mar 28 17:24:20 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c80ec4-185d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:95:22:87:63:48:85:79:6f:1b:4c:9a:d1:c5:
4d:f4:32:c0:84:de:07:a6:a6:63:42:a5:6f:90:63:
22:a2:4e:f7:dc:cb:2c:a5:e4:5f:71:26:aa:47:ad:
ac:cb:bb:f8:ff:67:cf:9b:18:16:00:01:e4:e5:4b:
c6:d5:c4:bc:25:e2:d6:55:2d:2b:68:43:21:a9:5c:
cd:75:42:d9:d5:9f:1b:ca:4f:6b:ad:78:f1:a8:42:
c1:af:85:8c:9f:62:75:36:f3:5f:65:86:ea:36:13:
e9:aa:c2:48:2d:d7:60:ee:c8:d7:2b:8f:a9:01:7f:
1d:3a:5a:ce:fb:51:1e:57:84:c7:59:05:2d:98:db:
a6:20:eb:9a:ca:ab:05:93:0c:b3:c1:dd:04:c4:19:
d6:88:9f:32:f1:0a:f6:aa:dd:c5:b0:58:ee:0e:ad:
95:db:52:03:d9:00:50:51:02:20:dc:34:d5:22:01:
9b:fa:1c:56:02:a7:14:c0:58:46:8e:1e:74:0b:4e:
28:95:29:3d:fc:de:5d:64:ab:45:b1:e7:56:70:97:
1b:d2:bb:f8:cc:9c:c5:35:c9:0a:48:c8:de:d1:7b:
1b:f4:6a:be:56:cb:ef:d1:db:63:ef:08:17:05:82:
83:6d:38:30:1c:d0:da:eb:32:dd:70:06:cd:38:a7:
4b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5B:D6:DC:A7:6A:CB:EA:0F:6C:0C:D5:AF:2E:B4:EF:45:79:B7:45
X509v3 Authority Key Identifier:
keyid:31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/9C524DA858CE11E891382260C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.86.56.0/23
IPv6:
2407:2bc0::/32
Signature Algorithm: sha256WithRSAEncryption
92:dd:60:3e:be:f6:38:90:4b:21:6a:6a:2a:82:61:ad:38:8e:
ce:f9:1c:2c:3c:f9:4e:da:e5:9e:6c:f1:11:c2:27:9f:ba:9d:
bf:6a:32:b3:aa:31:e9:cd:cc:61:e2:aa:65:1e:64:c3:b5:53:
04:b7:60:67:e4:9e:68:b6:2f:54:7c:a5:3a:c3:19:fd:07:5f:
cd:00:8a:cb:fa:ef:9f:58:20:89:85:47:72:d9:81:14:a0:a5:
f3:c4:c3:79:9f:87:00:4b:d7:3e:66:20:fc:87:24:a5:d0:8f:
da:36:76:79:4e:ea:47:77:2a:e6:cd:0f:24:3d:c0:4e:60:49:
f4:3b:a2:28:b6:c3:ad:30:51:10:50:cf:cf:12:04:22:9a:09:
5d:dd:fe:34:14:5d:d0:39:53:73:40:5a:6a:e9:bd:1a:fa:1b:
94:ca:00:8b:3f:ce:4f:fe:54:d1:d0:43:b9:a4:f0:87:60:7c:
ea:46:72:00:21:84:de:41:b9:d6:4b:8d:11:9f:e7:71:ee:95:
65:bb:d4:37:e7:32:22:79:51:cb:f1:ad:f3:89:2b:91:5a:32:
e3:1c:f8:76:ed:f6:de:74:e6:f5:0f:dc:f6:0a:a0:3a:0e:f5:
27:a5:0c:af:34:e3:73:43:fe:88:ff:f2:4c:51:5c:1f:51:f9:
61:02:b0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:11:07 2026 by rpki-client