
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/AFAC764C2C1711EC817C5912C4F9AE02.roa
File: AFAC764C2C1711EC817C5912C4F9AE02.roa (raw, json)
Hash identifier: y8fOQUHUEDgFmtL9MQBSGb81f+TiCWn3yini6uVHoSM=
Subject key identifier: 71:D5:C9:52:3C:9C:6F:88:D7:F8:9F:17:6D:0F:74:E5:E5:53:FF:E5
Certificate issuer: /CN=A9149CEF/serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00
Certificate serial: 05B3
Authority key identifier: D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/AFAC764C2C1711EC817C5912C4F9AE02.roa
Signing time: Fri 28 Aug 2026 23:44:32 +0000
ROA not before: Fri 28 Aug 2026 23:44:32 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 9927
IP address blocks: 103.170.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl
rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 22:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1459 (0x5b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149CEF, serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00
Validity
Not Before: Aug 28 23:44:32 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a921d60-0ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:68:28:ec:4a:d9:d1:fa:26:d9:27:cd:8e:
50:aa:d4:14:a0:92:5c:ad:f2:ce:07:6a:bf:93:9a:
41:07:71:cc:13:55:b7:d4:f5:79:d0:12:c3:a6:8d:
3d:d1:82:31:3c:9f:1d:4d:a1:4b:04:c9:c2:ea:4a:
73:01:f8:d6:66:8b:9e:f3:d3:d3:92:76:bb:ee:1d:
c5:b7:e4:a4:76:53:fe:20:4f:21:9a:49:d6:ad:a4:
87:77:86:0a:e9:3c:27:7a:eb:38:05:2c:d8:3b:30:
d9:fc:86:64:7e:38:9b:f7:df:c9:73:dd:60:d5:2e:
46:5f:81:1d:d9:3e:fc:62:ff:f5:5c:0b:20:f5:a9:
29:1c:ae:92:73:03:2d:85:3d:bd:1a:1f:40:81:fd:
04:04:ec:88:78:2e:5b:9a:c7:b1:d9:7c:93:e2:d6:
3d:41:b2:e5:3f:ca:cd:06:dd:98:61:08:7e:fb:42:
98:03:25:7a:be:4a:83:30:c7:de:47:c2:68:32:bc:
c8:dd:d1:d4:53:b9:94:a0:06:d1:1d:58:cd:d0:e2:
d3:5f:6d:2a:98:45:78:49:59:13:8a:2e:5a:47:b4:
07:28:6f:b3:a6:0b:0f:f5:64:05:16:5e:39:bd:fe:
54:be:ee:3a:58:6c:99:f8:f4:ef:56:ea:11:33:ad:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D5:C9:52:3C:9C:6F:88:D7:F8:9F:17:6D:0F:74:E5:E5:53:FF:E5
X509v3 Authority Key Identifier:
keyid:D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/AFAC764C2C1711EC817C5912C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.170.126.0/24
Signature Algorithm: sha256WithRSAEncryption
52:cb:b0:9a:83:23:ce:b4:52:d7:3b:f6:39:29:98:2c:7f:06:
58:c0:81:d0:37:76:8d:84:90:b7:37:16:e7:6f:47:cd:8f:63:
d1:71:d3:4b:30:f3:ff:e4:19:6f:8e:89:90:5f:86:58:6c:b7:
2c:e9:29:fe:3c:ab:73:91:f0:54:08:0c:32:b8:3e:14:24:36:
e2:82:d4:c9:db:e7:cf:94:48:cc:83:57:a4:b8:1f:01:a6:8b:
60:e5:bb:0e:f1:88:d1:b2:f0:e8:20:ab:7d:5f:64:49:a8:38:
80:f0:40:62:ad:d9:d6:78:b7:5d:da:bd:95:1e:00:e3:7a:7e:
bf:10:e4:db:c0:b2:c1:93:c2:88:4b:0d:d6:38:b4:68:6c:a3:
13:f7:7d:5e:ef:cd:20:72:87:4a:07:e6:05:95:d0:a4:cf:14:
8b:c7:b2:06:c5:f4:e2:b5:ae:74:f4:fa:aa:9f:d4:ee:6e:ef:
ab:94:c8:2c:e7:50:a6:f1:8d:c0:d8:f5:94:b8:11:20:d3:ea:
c4:88:b3:80:38:6b:85:77:d9:5c:44:41:3e:43:72:6f:66:9e:
72:17:38:b9:2d:10:06:ec:9d:97:f3:74:ca:a3:fa:65:fd:0d:
30:8c:b2:a0:3c:8e:70:f1:5e:45:38:cf:da:aa:93:0f:2f:96:
41:72:67:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:33:35 2026 by rpki-client