
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/08B79AD09C4111F0A9483031C4F9AE02.roa
File: 08B79AD09C4111F0A9483031C4F9AE02.roa (raw, json)
Hash identifier: ubB2L+A+WYJ8AjqCrJi8J5YRaDtXq+7jruwojcEkTbc=
Subject key identifier: 36:6A:F6:D6:65:A5:9C:0A:C0:4E:A0:1F:DC:D5:C1:C3:D7:8C:A7:C2
Certificate issuer: /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
Certificate serial: 7E
Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/08B79AD09C4111F0A9483031C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:16:37 +0000
ROA not before: Mon 27 Oct 2025 22:30:09 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 17728
IP address blocks: 203.28.195.0/24 maxlen: 24
203.32.55.0/24 maxlen: 24
203.34.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl
rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 06:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
Validity
Not Before: Oct 27 22:30:09 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a58db5-2f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:fa:ee:52:fe:c8:1b:5f:7b:69:f2:de:f8:
23:ad:c1:42:93:f6:84:83:23:48:29:6c:7a:2f:57:
37:f5:1c:e9:05:6c:a7:86:66:c8:0b:1e:fd:7e:09:
c2:1c:b1:e0:dd:f4:ac:d6:66:ef:df:81:bc:c4:98:
87:dc:5c:c4:ad:a1:34:37:28:42:ab:11:49:29:9c:
75:8b:ee:5e:aa:df:0b:2e:4e:bc:11:f7:77:b0:74:
a4:98:8e:52:f5:02:68:18:6b:04:ec:0d:71:e9:6c:
e1:89:e8:c1:0f:68:d0:3b:c0:ea:60:07:5d:c8:b9:
32:87:fd:43:af:ed:b5:3f:e5:4e:f6:aa:61:8f:ca:
f8:7f:b3:e1:7e:8a:00:22:c6:60:8d:5b:18:92:a1:
08:72:24:b6:14:e9:aa:c4:66:d0:91:59:d3:fc:9e:
ab:61:62:9e:19:97:31:1f:7b:11:8d:06:7d:7e:52:
bb:7b:9f:0b:02:ed:1c:8a:52:3f:cf:ae:68:d0:db:
c0:21:6b:c2:30:e6:f6:ca:0e:2d:0e:cc:fd:05:ff:
80:8a:26:a6:dd:7a:87:d1:30:49:04:be:06:92:5d:
ea:33:a1:09:6d:ae:c6:57:6b:d5:91:c6:4a:b6:01:
c4:4c:09:87:0a:fb:05:d0:1a:c7:ce:fb:16:80:2d:
ce:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6A:F6:D6:65:A5:9C:0A:C0:4E:A0:1F:DC:D5:C1:C3:D7:8C:A7:C2
X509v3 Authority Key Identifier:
keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/08B79AD09C4111F0A9483031C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.28.195.0/24
203.32.55.0/24
203.34.190.0/24
Signature Algorithm: sha256WithRSAEncryption
69:76:8e:90:2a:bb:7a:ca:59:d1:fe:4b:ee:bf:ef:d8:46:0d:
6f:8b:ba:fb:6d:dc:d7:c0:42:9e:22:0d:ba:f6:e3:36:ad:70:
c3:6c:b0:c8:dd:5c:df:77:c4:4a:6e:4f:f6:a3:a7:9b:7d:88:
89:71:84:85:81:5d:0f:86:e5:3e:81:71:75:ad:23:79:81:66:
0b:12:4c:ad:cf:85:4d:e3:fc:04:fc:4c:10:5b:ba:92:34:74:
1d:88:e9:19:c2:cd:89:29:42:f4:42:78:66:02:68:32:8b:a6:
23:3c:82:c1:92:f7:9e:b3:d7:7d:f3:6a:00:5f:3a:d8:80:ef:
ab:9b:7c:cc:48:22:ca:65:40:3a:34:80:e6:76:59:98:e6:12:
08:71:b9:8b:6f:34:8b:00:0f:d6:0f:f9:03:3e:89:6b:8e:61:
71:e2:64:96:e0:69:39:99:c3:3a:a9:ee:37:88:71:3b:12:38:
a7:28:e3:b9:68:f2:96:8b:fb:83:62:01:b8:75:f0:b1:25:da:
02:d9:f9:7c:b7:aa:28:80:35:ef:57:f6:97:6a:05:2e:40:76:
5e:27:c3:04:47:31:01:f7:a7:1c:d1:ce:96:51:fe:41:f3:06:
c4:33:9c:0e:4d:f4:bb:3b:15:14:d8:ae:01:34:c7:2f:e5:7e:
0f:f3:49:38
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NUQxRjExMC8GA1UEBRMoMENBQjY4RTA2OTA4M0E0Mzg4RThGQzY5NzU4RjA0NTk2
MkZEMDFBRjAeFw0yNTEwMjcyMjMwMDlaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTU4ZGI1LTJmNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+RPruUv7IG197afLe+COtwUKT9oSDI0gpbHovVzf1HOkFbKeGZsgLHv1+CcIc
seDd9KzWZu/fgbzEmIfcXMStoTQ3KEKrEUkpnHWL7l6q3wsuTrwR93ewdKSYjlL1
AmgYawTsDXHpbOGJ6MEPaNA7wOpgB13IuTKH/UOv7bU/5U72qmGPyvh/s+F+igAi
xmCNWxiSoQhyJLYU6arEZtCRWdP8nqthYp4ZlzEfexGNBn1+Urt7nwsC7RyKUj/P
rmjQ28Aha8Iw5vbKDi0OzP0F/4CKJqbdeofRMEkEvgaSXeozoQltrsZXa9WRxkq2
AcRMCYcK+wXQGsfO+xaALc7JAgMBAAGjggJsMIICaDAdBgNVHQ4EFgQUNmr21mWl
nArATqAf3NXBw9eMp8IwHwYDVR0jBBgwFoAUDKto4GkIOkOI6PxpdY8EWWL9Aa8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RDFGL0FEMjAyMUE0OTc3
NDExRjA4MEJGMUU2NEM0RjlBRTAyL0RLdG80R2tJT2tPSTZQeHBkWThFV1dMOUFh
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvREt0bzRHa0lPa09JNlB4cGRZOEVXV0w5QWE4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUQxRi9BRDIwMjFBNDk3NzQxMUYwODBCRjFFNjRDNEY5QUUwMi8wOEI3OUFEMDlD
NDExMUYwQTk0ODMwMzFDNEY5QUUwMi5yb2EwKwYIKwYBBQUHAQcBAf8EHDAaMBgE
AgABMBIDBADLHMMDBADLIDcDBADLIr4wDQYJKoZIhvcNAQELBQADggEBAGl2jpAq
u3rKWdH+S+6/79hGDW+Luvtt3NfAQp4iDbr24zatcMNssMjdXN93xEpuT/ajp5t9
iIlxhIWBXQ+G5T6BcXWtI3mBZgsSTK3PhU3j/AT8TBBbupI0dB2I6RnCzYkpQvRC
eGYCaDKLpiM8gsGS956z133zagBfOtiA76ubfMxIIsplQDo0gOZ2WZjmEghxuYtv
NIsAD9YP+QM+iWuOYXHiZJbgaTmZwzqp7jeIcTsSOKco47lo8paL+4NiAbh18LEl
2gLZ+Xy3qiiANe9X9pdqBS5Adl4nwwRHMQH3pxzRzpZR/kHzBsQznA5N9Ls7FRTY
rgE0xy/lfg/zSTg=
-----END CERTIFICATE-----
Generated at Sat Mar 21 15:01:58 2026 by rpki-client