
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa
File: 7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa (raw, json)
Hash identifier: 2okYUQLpXLjFASnkLnBoJ7EV0CsOknY2IZxTrGpUiiU=
Subject key identifier: 4A:A8:1F:53:C1:D2:68:C3:BD:2A:5E:10:B5:FB:3E:10:B8:96:A1:CE
Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial: FE
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:59:26 +0000
ROA not before: Thu 05 Feb 2026 16:25:01 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 21840
IP address blocks: 103.49.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 05:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Validity
Not Before: Feb 5 16:25:01 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a47e7e-af0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:d9:02:0f:49:ae:8e:77:7e:90:6e:da:3d:
db:84:1e:4a:21:ee:ec:4a:42:f8:18:b2:ef:08:46:
32:9f:a0:68:67:28:7d:68:52:3f:5a:c6:d0:a9:6b:
8d:d3:14:28:e1:67:47:e6:12:f2:cc:b8:c1:3e:79:
2c:cb:d5:39:56:4e:6c:09:4c:ec:9c:61:31:cd:16:
15:20:ff:de:42:d2:d7:52:8d:00:31:d4:db:65:f1:
83:23:03:d2:f8:6f:18:95:0d:2d:48:43:9d:e4:d6:
8c:b4:70:53:a9:43:be:db:e4:55:5f:b2:38:91:fd:
c4:25:bd:2e:70:ba:cd:db:36:00:bb:1b:69:23:39:
7d:dd:87:bb:2d:3a:b9:ba:d7:96:eb:2f:30:1a:b0:
fa:4c:8c:98:29:37:0b:0e:1d:cd:c5:19:ee:07:96:
41:5b:bc:59:c9:9a:0f:31:13:19:fe:46:07:fa:31:
66:5b:53:26:cc:a3:02:16:34:70:67:14:e7:bf:24:
aa:69:23:0d:a9:99:66:f1:35:de:06:b8:fe:e4:57:
98:04:12:90:55:75:04:1e:b5:a5:d4:06:6b:43:09:
f7:c3:e0:32:8b:93:7d:a7:50:cc:f6:e9:ec:8a:7e:
ae:a8:5c:68:68:76:ad:4f:a8:ef:3c:96:b0:13:c2:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A8:1F:53:C1:D2:68:C3:BD:2A:5E:10:B5:FB:3E:10:B8:96:A1:CE
X509v3 Authority Key Identifier:
keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.49.40.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:a3:19:fd:12:ac:b1:fa:d0:16:9f:88:9b:2c:ed:a5:ee:61:
1a:99:8e:ac:5c:e7:04:8f:52:3b:09:11:59:4f:cb:2c:7d:68:
48:b7:ef:2a:3e:ec:17:b1:5c:f8:d6:fa:5d:22:58:1d:da:fd:
17:f4:1f:bf:09:65:9b:a5:f7:ab:9a:26:69:71:dc:6b:7a:ef:
19:1e:54:a4:13:10:f7:a4:35:93:d4:e2:47:89:57:ef:ab:10:
2e:1b:73:06:0e:83:42:62:dd:ed:67:91:4f:6a:54:3e:46:c8:
c9:9d:2f:dd:c3:d7:3b:ac:6a:42:2a:76:de:06:20:aa:be:80:
d9:ae:28:ed:80:0d:38:67:90:31:06:d2:bd:08:5a:4c:6e:75:
44:20:36:d3:ca:16:d7:f9:66:f8:4e:7d:47:7d:b7:8f:5e:c3:
0b:d6:32:0d:3a:0a:f3:23:dd:b0:d8:8e:14:9e:99:f3:1d:6d:
71:2a:4b:7c:e8:36:5f:c4:11:06:6a:f9:f7:33:0f:72:f2:af:
e8:12:30:4f:cf:3f:31:c3:95:0e:a5:44:15:4a:35:0c:52:1d:
9e:28:5b:f3:ab:1e:cb:8e:fd:51:9a:a2:1a:21:a1:a5:c6:f4:
be:f3:33:68:d7:b9:88:ef:14:a9:78:75:9e:41:29:bc:31:70:
cd:ca:37:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 04:01:38 2026 by rpki-client