
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CE4049E0CF9811E9A72F1F65C4F9AE02.roa
File: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (raw, json)
Hash identifier: dg5M28BM7Q9OSqEdMHsSLtI4cW3tbLsfo6oxRxnZkgU=
Subject key identifier: 1D:AE:58:D8:74:19:01:03:36:49:BC:E8:5E:50:D5:19:1F:EA:BA:C8
Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial: 261A
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CE4049E0CF9811E9A72F1F65C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:52:45 +0000
ROA not before: Mon 04 Aug 2025 16:24:10 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 139626
IP address blocks: 222.127.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 15:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9754 (0x261a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Validity
Not Before: Aug 4 16:24:10 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48afd-412f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:98:65:7a:df:bb:6c:fc:68:41:7e:ac:38:
3c:c2:d4:bc:d2:9b:87:e3:ac:8e:44:a0:06:18:6e:
47:13:05:6e:9c:1a:d5:d6:89:8f:e3:61:4a:d6:c5:
21:35:32:e3:4c:05:13:f2:86:2c:88:b0:b7:cb:72:
33:a9:21:f6:92:f5:f3:d5:23:20:f8:e3:ab:b4:78:
f6:44:e4:a1:c7:ee:c2:6c:1d:a7:1c:99:73:e4:5a:
5a:13:9d:4a:8b:30:4d:99:51:17:32:25:cf:b8:05:
62:29:e9:05:67:5c:81:2e:19:01:0b:6e:47:03:60:
50:5f:50:bb:7d:f6:c7:33:49:ff:f5:86:e9:d8:49:
07:59:e9:44:6d:13:0f:95:c8:7e:a1:6f:94:21:ea:
e4:3e:c8:4b:b8:0e:fc:d2:5e:b5:d6:a1:70:3f:80:
58:5f:ac:ad:f3:20:af:0c:5e:ab:8b:45:10:38:92:
36:fb:74:02:e5:28:32:6b:1b:15:92:9b:81:37:04:
17:02:73:36:c4:33:dd:07:33:dd:31:9d:17:f5:28:
0e:85:50:3e:c9:60:f7:36:7c:a7:40:f6:4a:66:d1:
a1:84:62:45:3d:83:f7:24:e2:99:8c:fc:78:dd:8c:
56:39:05:01:88:a0:fa:1d:98:7c:b1:4d:9e:6c:fa:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AE:58:D8:74:19:01:03:36:49:BC:E8:5E:50:D5:19:1F:EA:BA:C8
X509v3 Authority Key Identifier:
keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CE4049E0CF9811E9A72F1F65C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
222.127.101.0/24
Signature Algorithm: sha256WithRSAEncryption
86:7b:1d:39:66:13:8e:a3:57:86:6b:af:82:12:ba:5e:a3:42:
ac:72:15:48:04:4d:1a:39:b5:fe:fe:ba:7d:dc:62:26:94:ea:
3a:af:5d:af:ca:6d:32:87:f8:53:ab:4d:15:c1:db:cb:98:76:
07:d0:19:93:47:b7:67:51:be:76:53:2b:24:a7:5b:18:31:23:
e6:36:93:c0:95:c9:1a:97:a7:3e:3e:9f:0e:68:71:4e:e6:36:
e9:b3:42:4e:8c:5d:29:43:9a:23:dd:d1:eb:73:34:b7:d7:b8:
eb:91:97:a4:c6:23:c5:e5:77:c8:c5:80:35:3c:da:a3:ff:83:
07:0d:5b:af:e8:9a:ec:27:bb:14:0c:78:4c:42:09:79:f0:ae:
5d:1b:df:54:55:2c:3b:18:16:ab:7f:5b:3c:97:54:3a:3d:d6:
d1:9f:82:44:dc:42:82:ca:6f:98:dd:d4:ec:c3:95:1a:5e:3a:
9c:fe:a1:b7:1b:45:0d:d9:09:af:9d:2b:18:b8:42:86:27:ff:
f3:6f:c6:60:7f:04:13:70:cd:28:a3:df:1c:d6:14:4c:84:4b:
84:1c:f3:cd:50:ab:b0:fc:c5:75:ef:85:52:c5:e3:d6:b8:f3:
8b:21:3e:d9:73:89:c0:74:6e:74:23:f0:d0:f9:e7:0b:78:65:
74:a1:cd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:30:45 2026 by rpki-client