
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CE4049E0CF9811E9A72F1F65C4F9AE02.roa
File: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (raw, json)
Hash identifier: n3D3uWoQtuJezhynx+w6atzLkJgnD+wG5EO+6lXG6eI=
Subject key identifier: 86:81:F8:14:F8:C5:E2:85:6A:28:C8:6A:4E:E1:A1:5B:82:65:D0:4A
Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial: 269B
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CE4049E0CF9811E9A72F1F65C4F9AE02.roa
Signing time: Mon 20 Jul 2026 16:16:30 +0000
ROA not before: Mon 20 Jul 2026 16:16:29 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 139626
IP address blocks: 222.127.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 16:17:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9883 (0x269b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Validity
Not Before: Jul 20 16:16:29 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5e49dd-7ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:fa:7d:b3:aa:17:cf:c8:ab:5c:11:77:da:
3d:1c:f6:eb:4a:3c:ff:96:14:f1:34:49:f4:1d:14:
56:eb:ab:36:93:8e:dd:40:99:16:75:50:cd:10:cc:
7d:f8:ab:2e:07:5c:90:df:0f:aa:04:e8:98:23:c8:
68:29:38:e1:2b:db:31:68:fa:c1:98:08:ed:21:f4:
d9:c9:84:9a:90:a6:24:cf:30:52:d5:dd:6c:92:c2:
58:e1:1a:2b:30:3f:bd:6b:3d:28:8f:bb:03:95:f0:
ce:b7:62:48:0a:ce:ca:41:ab:3a:d7:5a:f3:1b:0b:
fe:e6:d4:44:9a:57:0d:12:89:f2:67:9a:cc:09:47:
a4:f7:5b:63:38:96:c8:ad:e7:7a:2e:4a:78:c4:9a:
a0:28:11:f4:e6:20:5f:44:55:23:ff:c0:38:c0:68:
67:3e:c6:31:91:5f:a2:20:e5:01:f3:cc:bf:60:35:
d6:9c:e5:a7:89:f0:99:f0:a2:11:1d:1e:0e:95:64:
6e:88:12:5f:5f:dd:64:ee:01:03:09:ba:2f:f4:d1:
67:35:e3:60:39:07:ff:64:e7:ae:a1:ba:c8:0d:be:
33:bb:d1:9b:0a:a0:cb:66:1c:60:2d:81:31:dd:33:
64:7c:c3:93:26:be:c4:1b:89:9c:eb:8a:d7:e4:08:
3c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:81:F8:14:F8:C5:E2:85:6A:28:C8:6A:4E:E1:A1:5B:82:65:D0:4A
X509v3 Authority Key Identifier:
keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CE4049E0CF9811E9A72F1F65C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
222.127.101.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:c7:b1:a5:18:9d:39:2f:d9:f5:82:ba:eb:67:c1:56:ab:45:
04:15:bf:d6:e9:d7:ca:30:38:1c:0c:6f:f2:18:c0:a3:e0:36:
e7:4c:be:a7:ab:bd:f7:93:da:01:9a:4c:ea:b0:b1:ed:6f:e9:
40:98:4b:b6:bf:b9:95:16:8d:58:09:39:65:2a:46:fa:f3:ba:
12:c8:9a:ca:f1:6e:96:58:f6:78:a5:5c:67:dd:c7:18:81:10:
c9:8a:53:98:17:a4:b4:2b:16:c9:ba:71:23:66:d8:4d:66:dc:
c0:fe:1f:04:d8:a3:ec:d7:2f:9e:8a:f6:fc:4b:15:60:b5:12:
90:82:62:dc:51:d1:07:c6:4c:00:06:9c:7a:33:fd:a3:1c:77:
83:0f:c0:47:c9:db:75:a6:63:d5:7a:15:0f:e8:ba:dc:c0:2f:
2d:4f:b6:e1:06:78:a5:e5:1b:10:29:f6:71:8c:a1:49:a3:0f:
08:b8:70:b4:22:b9:38:3a:97:85:9c:da:03:19:46:fe:7b:3a:
b6:8d:d8:86:24:5b:7e:a9:03:d3:9d:b1:be:61:b7:63:c8:d0:
57:60:79:89:f8:37:25:1e:3b:77:f6:76:55:60:d0:d3:26:f9:
92:dd:8f:80:72:e5:48:0c:ae:59:fc:25:03:66:6c:a8:8b:8c:
ed:a5:76:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:54 2026 by rpki-client