
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/8EAC217CCA5611F089E70D44C4F9AE02.roa
File: 8EAC217CCA5611F089E70D44C4F9AE02.roa (raw, json)
Hash identifier: DEFVGm59VVJPmUFHSPNcZ52zcqrPZ6/Nyvm2+lEJprE=
Subject key identifier: 4C:92:67:E3:76:BB:D7:9C:84:C5:B5:8D:5C:00:EA:F5:5D:02:12:BB
Certificate issuer: /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
Certificate serial: F1
Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/8EAC217CCA5611F089E70D44C4F9AE02.roa
Signing time: Thu 01 Oct 2026 08:56:27 +0000
ROA not before: Thu 01 Oct 2026 08:56:27 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 208185
IP address blocks: 203.28.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl
rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
Validity
Not Before: Oct 1 08:56:27 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abe203b-e738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:22:0e:3e:f6:f5:5f:12:c7:6e:e8:f2:df:
c6:55:75:2d:44:3c:db:c3:50:c4:e7:e6:4c:0b:e9:
b9:fe:36:bf:78:a9:76:a3:c8:24:c3:9d:69:ee:22:
f5:23:6d:02:86:84:b2:12:b9:1b:8f:3b:bc:6d:97:
02:8c:55:1a:66:5b:fc:22:2b:ba:ce:e2:2c:04:d6:
88:c4:91:65:ce:84:4a:af:0b:55:f8:28:65:b4:34:
c7:5d:bb:0b:99:2e:b1:e9:b6:96:5a:77:c0:74:52:
12:81:80:d2:ae:f7:76:59:0a:0f:2e:92:d4:2c:d6:
67:17:81:6f:7e:3e:af:19:fc:5d:47:96:38:4e:7f:
b1:2e:40:50:af:41:2f:e8:dd:cd:32:59:8e:2e:2d:
4e:02:ba:cc:d8:f0:5c:f6:f3:19:0c:8d:e6:1b:e0:
8a:c1:4c:0f:71:04:c5:bb:4e:fe:c6:ed:4a:6d:f2:
ed:4f:8a:97:7a:47:90:12:3a:8a:5a:8c:fe:89:72:
94:eb:18:ee:98:07:24:df:a8:d2:ff:4e:fe:4d:d1:
b8:95:98:b8:62:83:81:63:79:36:41:a9:03:6a:40:
4d:07:1e:42:09:24:33:10:e1:6d:a3:20:91:d3:0b:
23:47:22:51:9a:63:39:38:76:d5:0c:c5:c0:c8:71:
01:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:92:67:E3:76:BB:D7:9C:84:C5:B5:8D:5C:00:EA:F5:5D:02:12:BB
X509v3 Authority Key Identifier:
keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/8EAC217CCA5611F089E70D44C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.28.195.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c3:fd:0b:dd:a0:91:fd:7d:1e:20:1a:9a:89:21:13:0e:ac:
a0:18:4b:1a:cd:d3:3b:58:1a:4d:33:66:39:99:54:36:41:f5:
fd:d6:c6:31:30:e8:17:ed:8f:43:d0:c2:18:20:da:fd:c6:f5:
b6:32:25:33:43:0d:28:14:16:db:2c:5d:6e:ad:9d:ac:c3:be:
82:05:1c:d1:a8:3b:65:87:92:2c:aa:c1:af:30:a4:e7:2b:85:
48:aa:29:d4:c4:7e:b3:37:c3:9f:f6:c5:ae:9c:14:6f:7c:a5:
80:af:a7:62:1d:7c:96:68:81:b7:38:c1:29:8d:fa:7e:7a:56:
38:ab:0b:44:26:80:40:a2:7a:21:47:9a:df:6b:e8:1f:da:aa:
0b:b4:64:7e:7a:17:c0:30:f8:53:fe:89:79:5d:e2:50:a2:b7:
68:14:2f:18:42:da:60:1d:1f:9e:48:83:db:21:17:47:ef:97:
e9:0e:f1:49:86:8d:fb:78:8b:99:28:d8:44:ed:ef:21:e2:89:
7f:a6:a7:5b:06:ca:21:5c:63:43:02:1f:0a:b4:94:54:fa:42:
ac:19:cb:05:de:08:7a:36:0c:02:09:f5:56:6d:91:54:f7:b1:
6f:59:e5:d9:75:e1:ba:a6:56:93:65:8c:15:d2:74:92:e9:64:
90:94:f4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:28:47 2026 by rpki-client