
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/2A578744C77A11F1909FC0023A11F970.roa
File: 2A578744C77A11F1909FC0023A11F970.roa (raw, json)
Hash identifier: CSyrWiR6qdyTW5M6Fo9V/b1OVdHdtQ562fShbCGxJCc=
Subject key identifier: 51:C9:27:87:31:FB:EC:84:EB:15:D6:20:5F:E1:3A:D4:A5:1F:41:A0
Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial: 017B
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/2A578744C77A11F1909FC0023A11F970.roa
Signing time: Wed 14 Oct 2026 02:51:34 +0000
ROA not before: Wed 14 Oct 2026 02:51:34 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 138643
IP address blocks: 103.49.42.0/24 maxlen: 24
103.49.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 06:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Validity
Not Before: Oct 14 02:51:34 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6aceee35-2a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:e7:af:da:56:55:d8:11:4f:d6:02:25:09:
29:cf:2c:2a:88:13:92:d5:b4:a4:a0:d8:34:f4:42:
fb:83:6e:2e:bb:6d:b9:cc:a1:bd:95:8e:78:84:4f:
68:ba:7b:73:91:f4:b5:80:94:31:df:cc:35:d2:08:
83:8d:9b:80:9f:47:94:6d:b1:9f:f6:4a:01:44:51:
d3:73:38:82:73:cd:c8:44:e4:eb:06:2a:de:fe:97:
ab:fa:ac:7a:06:f5:f9:54:6d:9f:24:9b:b6:80:9c:
a8:59:00:1a:47:36:4d:f5:4a:8d:69:81:13:0d:77:
d7:78:40:99:a2:0c:66:71:89:cf:4a:53:38:cd:e5:
54:96:b9:9d:9c:ec:eb:23:5e:34:15:7d:52:15:ee:
4f:87:36:72:22:39:bb:24:3e:0d:8b:ad:a2:b4:f4:
33:f6:1b:b1:e1:98:1c:c3:85:eb:73:51:2b:75:6f:
f8:69:88:ec:03:7d:e4:6d:c4:b1:38:01:cd:77:f9:
c6:3e:df:c0:dc:1a:a9:a3:b4:2c:8b:e3:15:12:a5:
7b:30:96:19:d6:19:fe:69:26:d8:16:09:55:b2:08:
b2:50:66:cc:35:09:14:03:07:d5:1e:9f:ba:fa:fd:
b9:88:13:05:e0:cc:61:e5:9b:8a:3d:64:e2:f1:6e:
28:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C9:27:87:31:FB:EC:84:EB:15:D6:20:5F:E1:3A:D4:A5:1F:41:A0
X509v3 Authority Key Identifier:
keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/2A578744C77A11F1909FC0023A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.49.42.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:cd:7c:c3:cb:dc:d5:7c:8c:14:c0:18:aa:f3:68:e5:1f:45:
f9:4d:77:44:77:33:81:48:71:66:8c:23:f3:8a:4a:6b:88:1f:
8c:59:26:c8:2e:6c:56:ff:00:df:74:35:96:a1:0a:a8:93:9b:
63:6c:7f:fb:41:06:3d:a2:e5:80:50:05:5c:8a:76:16:2b:d9:
fd:e3:87:90:30:39:44:90:90:3b:99:fe:5f:88:a0:aa:ef:2d:
03:cb:0e:1d:60:b8:8c:b8:04:24:fe:78:58:9e:36:1a:aa:94:
94:79:7d:c1:d7:17:37:15:71:e9:17:68:a7:d2:12:17:76:fd:
02:57:1f:32:31:ed:9c:9a:80:f0:12:94:bb:46:f2:1d:fa:fd:
da:06:4a:c3:66:03:7a:ff:7e:d2:cf:06:83:4b:0c:80:c8:7c:
2f:28:22:c6:2e:b8:b2:d7:59:fc:b7:de:39:f1:99:5b:90:83:
9d:89:00:1f:47:d1:19:45:8b:5d:e3:c4:05:d5:f3:9b:ab:06:
44:54:a7:5f:fc:b2:52:0c:0c:9a:79:4b:82:35:6b:89:33:1d:
da:34:dd:3b:24:a0:42:a3:33:b5:9b:0c:7b:59:66:6f:fe:0c:
72:c0:72:ed:a4:cf:2c:bf:7d:e0:be:f1:66:fd:43:72:be:b4:
9b:89:09:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:06:28 2026 by rpki-client