
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/AF27640226FA11F0B0383240C4F9AE02.roa
File: AF27640226FA11F0B0383240C4F9AE02.roa (raw, json)
Hash identifier: 4LD8HC62z2DhT4Dg2lOYzbuBHzfVnUe3OyB/4hGuDkM=
Subject key identifier: FA:AE:76:E7:25:1F:C3:6C:8C:36:12:98:54:CB:40:36:9F:A1:34:CE
Certificate issuer: /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial: 0194
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/AF27640226FA11F0B0383240C4F9AE02.roa
Signing time: Wed 29 Apr 2026 05:41:45 +0000
ROA not before: Wed 29 Apr 2026 05:41:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55914
IP address blocks: 202.129.255.0/24 maxlen: 24
203.12.174.0/24 maxlen: 24
203.12.175.0/24 maxlen: 24
203.191.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 05:41:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Validity
Not Before: Apr 29 05:41:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f19a19-1100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fd:41:4a:c5:f1:b5:bd:c2:12:a5:92:f9:a0:
b0:a3:4c:0c:f4:0a:2d:3a:0c:f3:05:3a:74:b8:3d:
cd:d4:43:92:f6:78:c4:c2:ed:99:3d:aa:00:37:33:
ac:62:6a:98:24:a6:4f:01:cd:9e:59:37:bc:b1:51:
dd:f0:44:7e:94:72:08:ca:80:93:03:30:fa:75:a3:
8d:ab:ca:e4:e6:95:93:57:5a:9b:81:4e:13:89:3c:
dd:5e:d8:4b:13:df:93:61:4c:8a:b5:fb:2f:14:a6:
7d:f7:41:72:0b:c1:96:8b:49:a2:11:1b:5d:01:e8:
00:e1:0a:b0:0e:96:aa:5b:7b:bb:38:74:61:41:fa:
b9:e1:1a:af:db:2f:bc:d4:18:c7:5d:59:38:dc:b9:
16:de:23:51:c1:a7:c2:05:a1:13:3b:24:2c:07:3d:
88:e3:79:43:81:43:a2:eb:49:28:ca:4c:4a:48:0a:
07:31:cd:04:48:59:d4:34:60:e7:6e:4f:32:63:5c:
f3:61:6b:79:2c:d3:0a:ea:e0:2f:40:ef:95:f2:c5:
2f:53:d9:ad:f2:d7:80:ca:3e:dc:e6:d7:cc:0b:37:
5c:50:8c:eb:9c:f9:e1:f3:56:50:45:dc:14:04:d2:
95:59:c5:8f:5e:a8:44:44:43:b3:d1:b1:a6:b4:33:
ef:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AE:76:E7:25:1F:C3:6C:8C:36:12:98:54:CB:40:36:9F:A1:34:CE
X509v3 Authority Key Identifier:
keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/AF27640226FA11F0B0383240C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.129.255.0/24
203.12.174.0/23
203.191.6.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:c0:86:af:e6:91:7c:a1:93:b6:c9:13:a3:56:8d:13:c6:51:
8b:49:bb:6c:9c:8c:4b:6b:8f:9f:78:4e:68:09:9c:75:19:6a:
66:84:3f:e6:c6:94:09:0f:b0:30:80:f2:e3:ee:03:9f:21:d3:
f3:8f:ac:26:6b:e2:04:79:0c:63:60:29:10:7f:89:69:1f:ec:
2c:46:b3:dc:0d:cb:ff:bd:29:27:5e:43:03:2f:9b:f0:6b:3a:
26:39:50:44:82:e8:62:a0:ce:97:2c:59:04:45:3b:2c:0e:0f:
57:e6:80:72:40:9d:b3:d8:86:ae:85:ce:67:2b:62:3b:31:2d:
77:cf:34:1e:24:b8:13:8b:ee:17:6f:11:40:8a:8e:45:4f:c6:
ac:93:2f:73:81:f3:c0:ce:99:3a:8a:26:24:47:62:c7:48:81:
9b:a8:ea:37:74:eb:8f:95:2d:a4:5e:b8:c2:2e:fb:f0:7b:0a:
9f:8e:7f:e7:37:cb:d0:65:44:13:9b:e1:ff:5a:32:74:1e:ec:
d4:8e:d6:14:f5:c8:41:9b:0e:77:21:17:b3:6f:af:38:f9:c8:
a9:71:ca:9e:21:f6:a8:30:96:c3:57:80:0b:5e:38:d1:3f:f0:
ff:ff:a6:6b:87:15:e0:d3:40:eb:e3:b8:d8:16:bb:ad:24:aa:
57:b2:ff:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 14:34:50 2026 by rpki-client