
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2F88F46802CE11E6B167303FC4F9AE02.roa
File: 2F88F46802CE11E6B167303FC4F9AE02.roa (raw, json)
Hash identifier: YhmFklQYNFuVzlZwVyl13/fVO2Rx5D3vIX4W/p/maYc=
Subject key identifier: 0C:28:4F:A7:8E:DA:28:1E:AF:58:ED:22:81:D6:0D:0F:02:48:16:2D
Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial: 262A
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2F88F46802CE11E6B167303FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:52:59 +0000
ROA not before: Mon 04 Aug 2025 16:24:26 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 38822
IP address blocks: 222.127.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 15:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9770 (0x262a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Validity
Not Before: Aug 4 16:24:26 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48b0b-dcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fb:39:73:27:0c:af:8e:7b:92:1e:2b:bf:25:
95:2a:2e:34:51:f0:13:a4:3e:53:1a:97:e4:51:2b:
bf:e3:02:45:39:4a:11:85:66:6b:db:ee:a4:bb:a7:
b9:7a:5d:15:1b:e2:bd:f4:d1:3b:79:28:b9:d0:a1:
64:c3:c2:44:62:43:97:84:d3:cc:81:00:1d:66:5c:
0f:62:1b:c5:77:78:e1:79:68:5c:60:74:fd:c3:ba:
d8:54:ae:4d:0b:68:94:65:fa:28:ef:be:ad:99:4f:
e2:4f:dd:c4:76:83:ab:13:a6:a8:a2:ee:65:1b:c1:
81:9f:21:4b:3d:e7:60:66:d9:9d:51:9e:90:b6:87:
6e:fd:f2:2f:67:8e:35:27:36:3c:20:65:17:82:f5:
05:19:f8:51:45:e8:9d:ec:b8:63:4f:bc:5a:32:f6:
1a:5c:46:f8:db:25:a1:4c:fd:cc:96:bc:59:3f:26:
92:99:0b:1c:30:82:d7:27:f1:78:07:94:df:a1:c5:
42:54:ec:2c:3d:9d:cc:eb:ee:85:2a:37:dd:0d:3f:
ab:3e:a9:48:00:70:74:20:b3:e2:31:48:f2:f4:a5:
b1:c5:48:24:98:e1:d2:e8:8f:4c:29:d2:c8:94:c8:
2c:1c:9b:84:d7:49:0c:0d:a4:22:8a:88:52:da:03:
53:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:28:4F:A7:8E:DA:28:1E:AF:58:ED:22:81:D6:0D:0F:02:48:16:2D
X509v3 Authority Key Identifier:
keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2F88F46802CE11E6B167303FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
222.127.138.0/24
Signature Algorithm: sha256WithRSAEncryption
40:58:42:1b:b9:06:b9:ad:e7:34:70:fc:8c:41:4f:46:e8:70:
51:c5:1f:02:99:64:44:4b:d1:5a:51:45:0a:00:41:81:54:40:
f5:cf:4f:df:44:38:f4:38:bb:cc:01:11:ee:7b:30:12:ac:4d:
eb:ae:46:be:a4:35:35:5b:af:30:db:67:f6:ee:4d:dd:d6:78:
ca:6d:2e:a4:04:1b:6c:5d:82:f6:f7:4f:0e:5a:77:66:d0:bb:
b0:66:c2:c2:f6:ce:97:f8:5d:92:02:92:d8:c6:08:fc:5f:5a:
d6:6f:0a:45:9f:49:82:0d:89:3b:92:5a:cc:04:b9:45:7c:2e:
0c:d1:69:8d:e8:cb:2e:8b:85:91:58:51:0b:34:2d:81:81:ec:
10:2c:2e:ef:c3:7f:3d:9b:bc:ae:fb:df:ff:1b:24:20:aa:05:
df:e9:4f:12:d0:f7:30:a0:09:7f:97:0e:61:f0:bf:91:14:6b:
8f:c7:6e:86:65:a9:c5:bd:62:54:e1:f4:67:f4:b4:9f:eb:fb:
64:08:45:ac:56:2f:46:76:3f:5c:79:95:95:c6:0b:6a:22:fa:
34:9d:b0:75:0c:d6:b0:97:d8:cb:c7:6d:d3:99:6a:73:24:d8:
60:c1:07:6e:3c:12:89:05:b3:3a:23:5b:cd:72:be:75:a2:2d:
4f:d6:24:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:33:58 2026 by rpki-client