
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/08B79AD09C4111F0A9483031C4F9AE02.roa
File: 08B79AD09C4111F0A9483031C4F9AE02.roa (raw, json)
Hash identifier: fnlmor83f4zOs/e32/aecWKfxIQo6ta8eCmsFjhtaQ8=
Subject key identifier: 67:A1:0C:BC:98:BF:94:D4:24:58:6C:5D:91:40:09:31:ED:66:FE:42
Certificate issuer: /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
Certificate serial: F0
Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/08B79AD09C4111F0A9483031C4F9AE02.roa
Signing time: Thu 01 Oct 2026 08:56:23 +0000
ROA not before: Thu 01 Oct 2026 08:56:23 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 17728
IP address blocks: 203.28.195.0/24 maxlen: 24
203.32.55.0/24 maxlen: 24
203.34.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl
rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
Validity
Not Before: Oct 1 08:56:23 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abe2037-5b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f4:2e:55:2f:62:60:35:2f:22:a0:13:a3:1f:
4a:5a:9d:8a:b1:e8:d9:f6:f4:8a:db:3b:e9:02:fc:
0c:64:6c:39:b2:b7:61:58:66:73:95:bb:05:a4:a1:
3b:fd:a1:c3:f2:b7:f2:ce:08:9d:a2:6b:d9:b6:81:
c5:65:f4:f8:90:cf:6d:19:80:5f:30:34:31:a4:8e:
b0:11:9e:3e:89:de:d2:9c:af:bb:3a:dc:2c:6a:b5:
e5:c2:05:2c:c4:a1:70:d0:5d:89:45:a6:cc:9f:47:
5a:1f:c3:fa:fb:1a:91:8d:18:88:52:c7:ca:83:d7:
87:1f:c4:80:33:b0:17:77:59:8f:b8:7c:0e:1c:ba:
0d:03:ff:c8:ef:0a:f4:82:3b:c0:bd:b4:32:61:4d:
e2:84:ac:b9:74:bd:30:05:1b:c6:f6:c6:ff:ae:60:
0e:69:b2:5f:6d:6d:67:95:d1:56:22:0c:a7:28:63:
fa:6f:4a:33:1b:eb:ea:0c:c3:b7:92:30:1e:1b:13:
e1:9a:e7:fc:7e:e9:f0:71:b5:2b:a5:a3:66:72:a9:
91:d7:31:66:f7:f5:4c:df:d7:ba:b4:dd:55:d3:54:
24:c1:b8:46:a3:dd:f8:09:29:5f:b5:fd:e6:96:92:
32:3a:19:25:82:2e:a0:7e:d3:84:ee:b8:1e:3a:72:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A1:0C:BC:98:BF:94:D4:24:58:6C:5D:91:40:09:31:ED:66:FE:42
X509v3 Authority Key Identifier:
keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/08B79AD09C4111F0A9483031C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.28.195.0/24
203.32.55.0/24
203.34.190.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e8:9a:84:73:52:5e:80:95:62:00:79:c6:ae:6c:94:41:c8:
d8:b3:2d:b5:84:d2:fb:e0:bd:ef:71:ef:ae:0c:22:b5:81:aa:
66:61:73:b0:86:5a:c6:be:2e:ea:f1:94:a0:2d:36:39:2f:84:
40:f4:d9:94:79:c8:87:5b:40:fd:93:ac:26:31:a5:85:3a:b2:
ed:2d:ac:f0:64:00:48:2a:0d:26:0c:fa:d8:dc:67:93:bc:d3:
72:59:2a:2e:9b:93:2d:97:6a:da:d8:61:f8:3f:b9:45:1b:bf:
49:4c:bd:79:97:45:7e:4b:be:75:b5:27:9b:47:f3:b2:73:4c:
8c:19:2a:87:a1:31:3c:7e:1f:0b:d4:ec:16:ae:29:26:fd:88:
f9:05:fe:94:aa:b0:0f:7e:43:fe:26:d1:0a:66:3f:5d:5c:21:
55:74:f0:40:33:38:9d:6d:a7:a1:33:29:ac:99:40:99:7b:dd:
18:6c:fe:78:33:b4:69:0b:38:7d:75:95:2d:48:4e:0a:8a:21:
19:28:01:98:6b:53:0b:46:c7:28:1e:6c:7b:5f:91:cc:08:23:
54:38:41:d2:2d:0c:bf:af:a5:24:22:22:cf:85:a2:a6:ab:86:
4b:ec:76:26:a1:1f:8a:b1:ff:46:9a:47:59:af:f1:17:bc:b2:
72:72:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:04:43 2026 by rpki-client