
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/AF976FA2023311ED945EBE12C4F9AE02.roa
File: AF976FA2023311ED945EBE12C4F9AE02.roa (raw, json)
Hash identifier: tsITTRTvL3ZpZTiMW9Pvk38F1H2gtAvA9bKyZtXQM/k=
Subject key identifier: 66:56:20:2F:98:2A:8E:98:DC:43:54:75:CF:7C:87:F7:A0:0F:47:DD
Certificate issuer: /CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE
Certificate serial: 35C8
Authority key identifier: BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/AF976FA2023311ED945EBE12C4F9AE02.roa
Signing time: Wed 24 Jun 2026 15:13:42 +0000
ROA not before: Wed 24 Jun 2026 15:13:42 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 134135
IP address blocks: 43.245.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl
rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Jul 2026 15:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13768 (0x35c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127726, serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE
Validity
Not Before: Jun 24 15:13:42 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a3bf425-2c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:81:b1:5b:fc:0c:30:8d:67:7f:90:16:9c:
d4:09:43:41:73:ed:09:e0:d9:c8:fe:33:60:de:df:
1d:fb:42:0d:1f:3f:43:4c:b8:9d:2d:02:e8:25:dc:
7f:38:4f:1f:ca:7e:1c:3d:93:c5:40:e6:42:d3:30:
d4:4f:fc:d0:16:09:8e:c7:0e:81:49:c5:4e:d0:46:
07:a7:ba:2a:1e:d3:84:e5:5a:f1:5c:d8:8e:13:80:
f5:9a:4a:ff:66:39:71:49:f2:dc:2d:25:84:a8:b9:
ef:7d:ca:bf:07:f1:cd:e1:cd:aa:06:88:67:3d:b8:
3a:58:8b:e0:c1:36:b8:fe:ae:30:79:1b:6a:ca:b2:
ee:e7:55:9a:80:8a:c5:53:9f:50:a5:3b:62:86:cd:
52:0d:0c:d1:87:90:c2:a8:20:17:43:5e:23:9a:08:
7c:6b:30:0f:0f:af:90:c5:c7:80:8f:da:59:92:26:
41:3b:4c:41:ce:98:8b:ef:f9:2f:42:ea:7c:ea:6e:
80:73:92:df:1a:8a:fb:8a:b8:c4:3f:89:e4:7a:5a:
07:35:cd:82:12:4a:87:62:1a:5c:53:b2:fb:93:f3:
02:82:51:41:42:5f:20:f7:9f:92:ce:bc:70:fb:32:
6c:24:a6:bd:ee:9d:b8:88:6e:63:1e:78:0f:16:4e:
33:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:56:20:2F:98:2A:8E:98:DC:43:54:75:CF:7C:87:F7:A0:0F:47:DD
X509v3 Authority Key Identifier:
keyid:BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/AF976FA2023311ED945EBE12C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.245.118.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:4d:c9:cd:c7:1a:48:40:a8:d4:28:4a:d9:32:ac:21:fc:2d:
82:f8:b9:f0:45:75:de:af:59:b0:67:9e:f3:6a:2a:69:d4:e5:
14:a3:69:f2:1a:61:64:2d:46:9b:13:de:6e:8f:a2:b3:3c:f3:
e3:f3:6c:fa:9c:30:f5:43:9c:74:9c:97:82:47:4b:36:44:59:
80:73:88:8c:77:98:56:8e:2e:82:d0:85:6a:5a:b4:59:90:ba:
37:59:c8:fd:68:6e:34:cf:ee:98:51:ff:17:82:d6:0f:b7:96:
90:16:c7:06:c9:68:22:e6:03:ed:8c:e9:fd:2d:17:7c:26:66:
9b:28:71:69:8c:a9:47:c8:59:6c:61:de:d0:35:01:2d:23:6a:
d3:8b:ea:66:94:54:39:6f:9e:08:fe:9b:bd:7c:3c:85:89:67:
68:0c:69:f9:9e:ca:1f:d1:55:8e:4f:1d:70:c1:9f:d2:0d:97:
de:f0:96:52:6d:5e:e8:79:8c:db:df:ce:dd:1f:05:c0:9e:15:
c2:68:77:c1:de:6c:99:16:ae:42:2c:b4:99:5f:65:0e:c5:d3:
3c:64:a9:78:95:3f:d2:d1:99:32:0a:ce:a5:39:34:0d:78:b1:
2e:86:92:e7:68:20:b9:60:75:bf:ed:d4:8a:d7:06:04:9d:74:
bc:a4:f2:ff
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc3MjYxMTAvBgNVBAUTKEJEODc4NTVDQjY4MUUyMzM1OUJGRUMxQTM0RjE5OTJC
NjcxRTVFRUUwHhcNMjYwNjI0MTUxMzQyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTNiZjQyNS0yYzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvnCBsVv8DDCNZ3+QFpzUCUNBc+0J4NnI/jNg3t8d+0INHz9DTLidLQLoJdx/
OE8fyn4cPZPFQOZC0zDUT/zQFgmOxw6BScVO0EYHp7oqHtOE5VrxXNiOE4D1mkr/
ZjlxSfLcLSWEqLnvfcq/B/HN4c2qBohnPbg6WIvgwTa4/q4weRtqyrLu51WagIrF
U59QpTtihs1SDQzRh5DCqCAXQ14jmgh8azAPD6+QxceAj9pZkiZBO0xBzpiL7/kv
Qup86m6Ac5LfGor7irjEP4nkeloHNc2CEkqHYhpcU7L7k/MCglFBQl8g95+Szrxw
+zJsJKa97p24iG5jHngPFk4z9wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGZWIC+Y
Ko6Y3ENUdc98h/egD0fdMB8GA1UdIwQYMBaAFL2HhVy2geIzWb/sGjTxmStnHl7u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzcyNi9GOUZGRjZBQzFE
QTcxMUUyOTYzQUZBQTEwOEIwMkNEMi92WWVGWExhQjRqTlp2LXdhTlBHWksyY2VY
dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZZZUZYTGFCNGpOWnYtd2FOUEdaSzJjZVh1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc3MjYvRjlGRkY2QUMxREE3MTFFMjk2M0FGQUExMDhCMDJDRDIvQUY5NzZGQTIw
MjMzMTFFRDk0NUVCRTEyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAK/V2MA0GCSqGSIb3DQEBCwUAA4IBAQCLTcnNxxpIQKjUKErZMqwh
/C2C+LnwRXXer1mwZ57zaipp1OUUo2nyGmFkLUabE95uj6KzPPPj82z6nDD1Q5x0
nJeCR0s2RFmAc4iMd5hWji6C0IVqWrRZkLo3Wcj9aG40z+6YUf8XgtYPt5aQFscG
yWgi5gPtjOn9LRd8JmabKHFpjKlHyFlsYd7QNQEtI2rTi+pmlFQ5b54I/pu9fDyF
iWdoDGn5nsof0VWOTx1wwZ/SDZfe8JZSbV7oeYzb387dHwXAnhXCaHfB3myZFq5C
LLSZX2UOxdM8ZKl4lT/S0ZkyCs6lOTQNeLEuhpLnaCC5YHW/7dSK1wYEnXS8pPL/
-----END CERTIFICATE-----
Generated at Sun Jul 12 01:12:55 2026 by rpki-client