
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128327/A39A1AC8C64811F199AB02135911F970/F92F9180C6CE11F182E3BF3A4311F970.roa
File: F92F9180C6CE11F182E3BF3A4311F970.roa (raw, json)
Hash identifier: bDkf2tUhU80f+DWxFQUtN4omc21ua4W1RARNmibiLeQ=
Subject key identifier: 56:41:4B:F2:73:A9:F8:DF:04:1B:E5:15:69:D7:3D:F5:2C:2B:EC:13
Certificate issuer: /CN=A9128327/serialNumber=F032B744FC85F9AE65A3FA7144416FBA3F36493C
Certificate serial: 0D
Authority key identifier: F0:32:B7:44:FC:85:F9:AE:65:A3:FA:71:44:41:6F:BA:3F:36:49:3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8DK3RPyF-a5lo_pxREFvuj82STw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128327/A39A1AC8C64811F199AB02135911F970/F92F9180C6CE11F182E3BF3A4311F970.roa
Signing time: Tue 13 Oct 2026 06:26:08 +0000
ROA not before: Tue 13 Oct 2026 06:26:08 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 18066
IP address blocks: 103.84.160.0/22 maxlen: 22
2400:a240::/48 maxlen: 48
2400:a240:1::/48 maxlen: 48
2400:a240:2::/48 maxlen: 48
2400:a240:3::/48 maxlen: 48
2400:a240:10::/48 maxlen: 48
2400:a240:11::/48 maxlen: 48
2400:a240:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128327/A39A1AC8C64811F199AB02135911F970/8DK3RPyF-a5lo_pxREFvuj82STw.crl
rsync://rpki.apnic.net/member_repository/A9128327/A39A1AC8C64811F199AB02135911F970/8DK3RPyF-a5lo_pxREFvuj82STw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8DK3RPyF-a5lo_pxREFvuj82STw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 09:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128327, serialNumber=F032B744FC85F9AE65A3FA7144416FBA3F36493C
Validity
Not Before: Oct 13 06:26:08 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6acdceff-b584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:d2:ee:7f:51:e0:b0:91:9c:35:cf:c8:ed:
a9:ae:62:61:80:79:03:9d:8c:0c:f3:86:1e:93:e6:
d2:18:24:59:aa:4d:13:85:fb:a4:5d:9c:5d:bb:5a:
9a:20:cc:53:86:f1:52:2a:be:f9:3d:27:ff:fc:5d:
8e:7b:bb:39:22:01:b1:84:5f:66:ab:c4:60:80:e5:
25:a6:0e:70:a0:a3:bc:d9:8f:95:fe:a8:53:c1:e2:
71:04:66:9c:85:5e:0a:19:31:c4:85:59:70:81:70:
0a:26:61:aa:96:e9:d3:28:9d:c3:c5:ec:a5:f0:ee:
8f:9a:68:3c:79:4d:c0:ff:07:d4:71:0b:d0:d5:f9:
94:af:d8:6b:52:e1:38:59:39:35:07:4c:67:24:32:
3e:46:9d:b3:05:30:39:dc:f2:21:db:2d:13:b2:03:
f8:87:5c:35:37:85:cb:fe:87:43:c6:36:4b:16:96:
25:fd:eb:6c:95:85:07:b6:50:64:d3:da:c6:e5:71:
66:b6:d3:87:41:2a:be:09:e1:85:20:f3:64:2d:6e:
16:cd:28:a7:66:fb:76:65:e8:8b:3c:d5:bd:78:7f:
02:51:ad:0d:7d:9b:63:fd:ec:2c:95:b7:45:0e:91:
b7:78:14:32:e9:ec:28:d7:70:45:43:e6:6f:1c:71:
e5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:41:4B:F2:73:A9:F8:DF:04:1B:E5:15:69:D7:3D:F5:2C:2B:EC:13
X509v3 Authority Key Identifier:
keyid:F0:32:B7:44:FC:85:F9:AE:65:A3:FA:71:44:41:6F:BA:3F:36:49:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128327/A39A1AC8C64811F199AB02135911F970/8DK3RPyF-a5lo_pxREFvuj82STw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8DK3RPyF-a5lo_pxREFvuj82STw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128327/A39A1AC8C64811F199AB02135911F970/F92F9180C6CE11F182E3BF3A4311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.84.160.0/22
IPv6:
2400:a240::/46
2400:a240:10::-2400:a240:12:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c4:c5:a2:da:a8:99:d8:3d:f5:70:cb:ea:0e:3a:00:ba:0c:85:
b2:e2:ab:f8:ef:f6:01:99:8a:d0:f4:e2:7a:81:5e:c8:bc:c4:
57:13:9c:b4:93:e5:c7:3c:29:76:4d:8b:0c:34:06:c0:42:68:
bb:23:c1:fa:93:e4:84:e1:86:d0:2d:e9:7d:59:09:e8:fa:45:
8c:64:59:03:e7:70:eb:20:ab:33:0b:62:e1:2a:78:af:2e:8b:
25:be:36:09:c3:1a:c9:ff:96:69:da:69:1c:93:1b:06:92:b0:
66:a5:50:61:c4:c0:a3:f0:e1:74:95:67:bd:0d:94:7d:3c:3a:
ed:0c:ca:6e:7a:33:94:9b:bd:35:92:51:d6:b7:26:e0:f7:40:
38:2f:ae:c3:7f:c9:1e:4b:fb:71:6d:5c:c1:5d:af:fa:16:0b:
04:7a:3a:12:c1:8f:62:36:03:fc:56:6f:6a:59:02:7e:00:07:
9b:b2:c2:7b:1b:36:e3:6e:f9:da:28:19:b8:75:75:23:cf:5e:
4b:a1:e4:de:ab:77:e7:7a:ec:fc:bd:21:f8:85:41:93:c0:76:
50:9b:8a:45:23:c3:0c:e2:0b:81:ab:1c:71:7a:f0:d3:59:31:
cf:4b:a5:22:2d:f1:dc:69:34:f0:10:52:c8:69:3a:64:ca:91:
12:ab:59:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:59:00 2026 by rpki-client