
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/3987426E53AC11F1A96C853AB4833773.roa
File: 3987426E53AC11F1A96C853AB4833773.roa (raw, json)
Hash identifier: 1fcsU1JakugdZ+b2jMGMeoHuQorFf/tI7vFtaxcZV3o=
Subject key identifier: 9A:9B:6F:07:33:16:89:A0:1B:68:D1:82:FC:B4:E8:DF:30:1D:AC:6F
Certificate issuer: /CN=A9184FC8/serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858
Certificate serial: 27
Authority key identifier: 96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/3987426E53AC11F1A96C853AB4833773.roa
Signing time: Tue 19 May 2026 17:57:39 +0000
ROA not before: Tue 19 May 2026 17:57:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 163.128.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl
rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 09:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184FC8, serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858
Validity
Not Before: May 19 17:57:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a0ca493-6ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:05:ad:85:30:92:8b:ed:60:22:1e:6f:e8:
28:0b:fb:fc:aa:db:85:28:2b:0f:cd:39:43:ef:72:
80:5b:c0:2f:f7:86:94:fc:80:31:f9:be:68:2e:8f:
df:a9:0b:f6:ac:fe:6d:61:69:9c:6a:99:f8:6a:c4:
8d:5d:13:38:02:8b:e6:99:6e:38:8b:f9:80:5a:61:
75:40:38:53:22:5c:fd:8f:1f:e6:d7:fd:23:c8:4a:
b2:fb:e9:eb:d0:41:51:01:0e:ac:8e:4a:9d:9d:de:
fc:e2:e7:15:ef:13:9d:d4:5b:ff:09:a6:5d:db:10:
f5:7f:98:3c:cc:d3:59:9b:92:24:5b:34:1c:ce:91:
ff:f5:ee:59:1d:29:5e:27:87:eb:e0:02:13:29:1d:
fa:50:27:5e:1e:b0:95:c2:3a:40:a9:3f:6d:63:52:
d7:1d:5c:dd:5c:ac:e2:84:c4:28:9b:c2:45:ca:ad:
5a:c8:af:ec:b7:e5:52:d7:8c:a0:5c:73:9e:71:23:
fb:cc:88:16:4c:d3:cc:24:d5:6f:c5:bc:a2:11:06:
5b:c5:63:e1:e1:e7:66:13:1e:a0:bd:78:ab:8a:5b:
8a:24:ae:97:9f:7d:f8:bd:f2:67:77:09:df:5d:99:
ea:c5:49:af:3c:5a:fb:fc:b1:95:7f:21:5f:64:4d:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9B:6F:07:33:16:89:A0:1B:68:D1:82:FC:B4:E8:DF:30:1D:AC:6F
X509v3 Authority Key Identifier:
keyid:96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/3987426E53AC11F1A96C853AB4833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.141.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ed:fd:6e:c0:d3:97:db:74:71:7f:f4:f4:0d:7d:da:4e:3a:
80:16:da:7a:5e:28:b4:6e:2b:1a:e3:e1:64:9b:d5:fb:11:eb:
2e:04:13:6d:38:5a:98:d3:98:f6:b3:ed:59:b7:ca:74:2b:31:
80:8f:60:38:4c:05:3e:2c:68:ba:ea:13:34:3d:1b:d2:9b:8a:
7b:90:c9:e0:5d:9d:d6:db:32:f9:ab:74:c3:eb:a1:93:28:e8:
57:4d:e1:f3:cc:c3:2b:86:51:61:0d:69:2d:41:ba:5e:3c:3d:
bd:c1:b2:0b:80:93:b7:78:20:d6:ec:89:1e:2b:ce:cf:eb:b0:
52:ab:23:b0:7d:97:3b:17:d0:b9:bd:91:97:92:43:f5:45:7b:
5e:28:b5:34:f5:e8:d5:09:8b:17:1b:b7:65:69:ea:8c:61:18:
95:04:e0:18:aa:80:17:1d:80:cd:44:14:3e:21:96:b1:ce:b5:
83:af:2b:95:7b:ae:e3:90:c5:47:4b:2f:66:01:fe:f9:c1:31:
83:3c:cf:5f:ba:ee:da:f7:c7:18:30:a0:bb:1b:21:a8:f1:ed:
38:f0:c8:53:48:79:58:b1:35:2d:83:44:71:72:d8:cb:48:5c:
6d:66:c5:b9:b1:d8:02:70:0c:f6:f9:88:2b:29:18:37:e4:d8:
63:56:c6:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 21 11:12:06 2026 by rpki-client