
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/6CAC2064EA2211EA9C2F064AC4F9AE02.roa
File: 6CAC2064EA2211EA9C2F064AC4F9AE02.roa (raw, json)
Hash identifier: NWq6rBlzl9ex6GIufRvovjoO12pZgzDILKLwtdCgUVE=
Subject key identifier: 2C:D9:3F:31:B4:5B:CE:64:AD:B0:2B:44:54:69:E7:B4:C3:56:02:9B
Certificate issuer: /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
Certificate serial: 08EF
Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/6CAC2064EA2211EA9C2F064AC4F9AE02.roa
Signing time: Mon 28 Sep 2026 20:40:44 +0000
ROA not before: Mon 28 Sep 2026 20:40:43 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 141038
IP address blocks: 103.155.42.0/24 maxlen: 24
103.168.208.0/24 maxlen: 24
2001:df4:b080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl
rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2287 (0x8ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EAD, serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
Validity
Not Before: Sep 28 20:40:43 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abad0cb-8e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:84:0b:8f:91:e2:29:cc:05:45:d6:ae:bd:
ef:8c:23:30:ec:40:6c:3a:4d:17:a0:7a:d5:cf:c1:
67:24:22:17:0d:58:b7:1e:3a:0f:fb:19:ab:8c:7b:
45:6e:30:42:ab:74:57:c0:a4:20:b9:b5:42:6b:0e:
84:2a:41:32:f8:c9:54:da:7b:8c:f2:e1:a3:b8:1e:
f2:b4:d0:cc:61:3b:ba:e9:ec:5b:c9:c3:cb:c6:a2:
f9:4d:1c:f4:9e:9f:2a:a9:99:93:54:21:0e:34:06:
d7:91:d1:f5:44:b6:b4:85:31:91:ca:df:70:81:90:
87:87:68:39:17:0f:ae:41:6b:e6:18:f5:05:a1:e4:
79:07:8f:07:44:5e:7e:3b:00:b4:0f:69:9a:cb:b4:
1e:b6:16:50:ad:05:39:76:e5:2e:e7:90:f3:4e:0d:
32:6d:d6:77:8a:8d:69:1f:63:57:7c:79:e2:b3:02:
77:81:25:df:39:17:8d:07:bc:6f:9a:11:82:a9:b8:
dd:e4:2c:b6:cf:ae:3f:c0:56:cc:ff:82:ef:16:1c:
ce:87:27:70:6f:53:bb:51:3a:e8:66:4c:da:cd:2b:
7f:37:f3:90:e9:59:20:97:0f:f7:d9:bc:06:b5:84:
3f:d9:d8:20:dd:e7:4b:e3:5f:68:43:c9:fe:ef:18:
0a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D9:3F:31:B4:5B:CE:64:AD:B0:2B:44:54:69:E7:B4:C3:56:02:9B
X509v3 Authority Key Identifier:
keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/6CAC2064EA2211EA9C2F064AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.42.0/24
103.168.208.0/24
IPv6:
2001:df4:b080::/48
Signature Algorithm: sha256WithRSAEncryption
2a:e0:b7:2b:fa:80:0b:30:a3:c2:8b:55:46:14:6e:36:d9:9d:
16:1c:18:96:a5:6f:e6:f4:7b:c6:b1:88:e9:99:38:ca:55:02:
3c:43:26:6c:0d:43:ce:67:cf:5e:24:d9:86:fb:bc:b0:0c:f3:
1e:66:b4:73:6a:c0:43:e9:02:00:1e:a6:f2:cd:9f:b7:a6:26:
a1:b3:18:2d:af:3e:f4:70:a9:d5:29:c9:f2:9a:e0:53:65:c7:
17:19:24:46:3a:b3:a9:19:37:cc:f1:9e:bd:5d:7a:aa:f9:d8:
85:37:5c:c7:d4:21:4e:a8:87:71:cf:48:9f:82:ba:71:71:6f:
41:9f:ca:31:cb:0a:b9:cb:e5:ed:18:69:4c:e2:21:5a:1d:b5:
16:ae:90:a1:30:67:df:df:0b:87:4f:03:68:5f:1c:7c:77:40:
07:44:e6:62:ad:49:06:14:d1:6f:2d:9b:78:18:87:75:63:d1:
01:c7:8b:93:76:c4:cd:c4:12:e5:b1:66:38:7a:69:33:4b:72:
3a:99:7c:6b:eb:36:92:57:e4:c7:68:55:20:92:6d:c5:e9:9d:
27:5b:14:b9:aa:d7:ac:c0:0b:ad:52:ad:73:c9:12:4e:28:05:
ef:1b:28:bb:db:50:e0:8a:6d:46:09:94:f2:51:0e:bf:84:e6:
72:96:9b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:59:04 2026 by rpki-client