
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/E09D5D9C7F0711F092740742C4F9AE02.roa
File: E09D5D9C7F0711F092740742C4F9AE02.roa (raw, json)
Hash identifier: FRx1ILrXRk/D6NM37DgKlOP8QzRDUYGOaHdxxmU119o=
Subject key identifier: D9:76:BA:E4:25:3E:26:6A:9B:BC:A3:2B:DC:45:E9:B3:E2:C7:CC:0B
Certificate issuer: /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Certificate serial: 74
Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/E09D5D9C7F0711F092740742C4F9AE02.roa
Signing time: Tue 03 Mar 2026 07:45:00 +0000
ROA not before: Tue 03 Mar 2026 07:45:00 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 149014
IP address blocks: 103.147.202.0/24 maxlen: 24
103.147.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 06:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Validity
Not Before: Mar 3 07:45:00 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a6917c-0d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:1f:ea:0e:18:73:e8:2e:49:52:08:27:50:
71:8a:80:aa:2b:88:c1:08:d6:6e:d9:c0:7a:a8:ae:
76:68:f4:ea:77:b0:a4:6b:a8:42:4e:93:32:b9:08:
8b:7b:ea:25:66:d6:1e:ef:5d:97:84:bf:41:f3:07:
fb:40:be:ee:a1:25:46:5e:48:8b:f5:04:f8:82:8e:
9e:4f:68:4f:04:e7:03:4a:05:37:e3:e9:ed:1d:ea:
a5:80:0c:c2:00:8c:c1:3f:92:de:5a:fb:90:b4:d0:
ae:6d:ff:ef:80:8e:55:7a:11:e0:ce:ca:36:19:5a:
92:b4:4c:fc:8a:cb:9e:36:cc:b1:ca:b9:67:7e:53:
88:11:20:d4:58:44:26:0c:df:83:ce:6c:a3:69:c7:
e3:6e:1f:60:36:35:7b:7c:4c:9b:b9:32:44:6e:e2:
9f:45:94:df:07:f5:31:e4:a4:12:ca:d2:1b:06:c2:
4f:ce:b6:74:c8:59:77:87:70:28:a3:df:8d:27:b5:
14:a1:14:ab:52:85:b5:cf:cd:2a:cf:0e:cc:22:e0:
09:11:c0:82:21:46:e9:d8:bc:fc:e1:5d:d7:f1:4f:
a6:dc:df:89:b1:90:52:7d:6f:2d:0b:5c:e3:48:56:
41:69:a8:0d:a8:9c:9d:b4:72:49:d7:fd:d6:d2:cb:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:76:BA:E4:25:3E:26:6A:9B:BC:A3:2B:DC:45:E9:B3:E2:C7:CC:0B
X509v3 Authority Key Identifier:
keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/E09D5D9C7F0711F092740742C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.147.202.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:5f:0c:96:f6:8e:e2:89:5a:bd:fd:56:9b:1f:8a:e2:0f:4e:
54:01:88:ad:75:63:3d:cb:23:43:7a:ae:9a:e6:07:43:61:63:
23:7b:4c:97:c2:b8:df:22:93:b9:24:b7:7e:0c:48:5a:89:1f:
68:00:e2:49:b4:0f:47:db:fc:cb:38:8b:be:1f:e3:10:3a:e1:
44:90:df:95:d5:ee:ca:e8:f8:7b:9d:e8:72:44:5d:6e:9d:3c:
53:f6:1d:e2:3b:e2:ad:30:57:6e:87:c0:01:ab:2a:d9:aa:2a:
19:92:bb:ee:63:30:26:33:5f:19:9d:43:41:19:a3:db:76:60:
2e:f2:a3:2f:2a:23:6b:c8:15:e0:43:02:12:0d:64:d6:4d:b7:
af:10:da:95:2f:a6:0f:62:4f:fb:7c:df:40:2a:6b:c7:6d:76:
fa:03:fb:e1:57:6e:27:f9:f6:03:c5:9c:95:fc:cf:a8:2b:02:
7c:53:17:58:c4:1c:3c:bd:66:b8:76:11:2d:09:ac:5a:21:76:
67:be:c6:9a:8a:a2:e4:ca:d6:b4:ed:df:79:78:e0:73:3f:ef:
6c:5f:8e:19:cf:7d:ff:ac:8e:0e:7c:c5:ed:e4:1e:91:1a:13:
45:66:94:93:e4:36:df:58:6f:12:cd:35:87:09:4a:7f:6e:d3:
5b:bc:5e:ff
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
N0Q1ODExMC8GA1UEBRMoMTgzRkE5MERDMzU1NkMxRDE2NTY4RUJFQkIxOEUyRkM1
QTc4MUQ5MzAeFw0yNjAzMDMwNzQ1MDBaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTY5MTdjLTBkOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0JB/qDhhz6C5JUggnUHGKgKoriMEI1m7ZwHqornZo9Op3sKRrqEJOkzK5CIt7
6iVm1h7vXZeEv0HzB/tAvu6hJUZeSIv1BPiCjp5PaE8E5wNKBTfj6e0d6qWADMIA
jME/kt5a+5C00K5t/++AjlV6EeDOyjYZWpK0TPyKy542zLHKuWd+U4gRINRYRCYM
34PObKNpx+NuH2A2NXt8TJu5MkRu4p9FlN8H9THkpBLK0hsGwk/OtnTIWXeHcCij
340ntRShFKtShbXPzSrPDswi4AkRwIIhRunYvPzhXdfxT6bc34mxkFJ9by0LXONI
VkFpqA2onJ20cknX/dbSyxFjAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU2Xa65CU+
JmqbvKMr3EXps+LHzAswHwYDVR0jBBgwFoAUGD+pDcNVbB0WVo6+uxji/Fp4HZMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RDU4LzU5RDA2QTEyN0Yw
NjExRjA5NTIwNTkzQUM0RjlBRTAyL0dELXBEY05WYkIwV1ZvNi11eGppX0ZwNEha
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvR0QtcERjTlZiQjBXVm82LXV4amlfRnA0SFpNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0Q1OC81OUQwNkExMjdGMDYxMUYwOTUyMDU5M0FDNEY5QUUwMi9FMDlENUQ5QzdG
MDcxMUYwOTI3NDA3NDJDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFnk8owDQYJKoZIhvcNAQELBQADggEBAI5fDJb2juKJWr39VpsfiuIP
TlQBiK11Yz3LI0N6rprmB0NhYyN7TJfCuN8ik7kkt34MSFqJH2gA4km0D0fb/Ms4
i74f4xA64USQ35XV7sro+Hud6HJEXW6dPFP2HeI74q0wV26HwAGrKtmqKhmSu+5j
MCYzXxmdQ0EZo9t2YC7yoy8qI2vIFeBDAhINZNZNt68Q2pUvpg9iT/t830Aqa8dt
dvoD++FXbif59gPFnJX8z6grAnxTF1jEHDy9Zrh2ES0JrFohdme+xpqKouTK1rTt
33l44HM/72xfjhnPff+sjg58xe3kHpEaE0VmlJPkNt9YbxLNNYcJSn9u01u8Xv8=
-----END CERTIFICATE-----
Generated at Fri Mar 6 09:57:15 2026 by rpki-client