
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/01A09AD4529A11F1B2F4C97190833773.roa
File: 01A09AD4529A11F1B2F4C97190833773.roa (raw, json)
Hash identifier: NfdzF777/UwYTCe/PzbVSLCJnNVSjxZR+DIbcSpMCqY=
Subject key identifier: 33:1B:0D:E7:37:0A:12:03:9C:72:1B:B7:0E:22:DB:E9:E5:83:58:71
Certificate issuer: /CN=A9191BBE/serialNumber=20A15FD39F7534C7A7A2531FED8B5A1708A93F52
Certificate serial: 3C
Authority key identifier: 20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/01A09AD4529A11F1B2F4C97190833773.roa
Signing time: Sat 29 Aug 2026 08:58:22 +0000
ROA not before: Sat 29 Aug 2026 08:58:22 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 55925
IP address blocks: 103.105.73.0/24 maxlen: 24
202.94.73.0/24 maxlen: 24
2001:df1:6400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.crl
rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 08:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191BBE, serialNumber=20A15FD39F7534C7A7A2531FED8B5A1708A93F52
Validity
Not Before: Aug 29 08:58:22 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a929f2d-52ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:08:c4:e3:b4:0d:f8:f5:fc:fb:23:d1:3b:85:
5e:32:4f:2d:64:a3:2f:13:db:b0:e8:a5:85:57:e0:
b2:fa:a0:93:80:d7:69:81:25:5b:f5:23:ee:86:fe:
1b:4c:a7:1b:c4:a8:bf:63:f7:99:44:cd:04:7f:8c:
94:fe:a3:a6:a3:0d:e6:9c:3c:29:ec:ea:02:de:d2:
40:99:99:ed:43:47:da:c0:f0:62:68:ae:f0:79:7b:
f3:49:9e:ec:58:87:c8:8f:b0:d9:00:66:df:dd:6d:
37:32:4d:b7:b1:d5:11:c4:99:cf:0d:fd:4d:f8:f8:
03:dd:47:e1:82:75:a2:f4:b4:20:4c:69:41:27:61:
22:3b:18:9a:3f:c1:ec:07:8f:8a:3f:d6:fc:94:bf:
ea:7b:d0:73:5d:88:bc:2b:4a:e7:09:ec:0b:79:31:
89:61:91:46:36:49:d3:b4:53:10:d6:ea:2e:bd:4f:
43:ea:4e:b4:28:0f:19:3e:d1:8a:8a:c9:af:2b:e3:
d7:ab:2f:0f:d1:af:f6:b4:82:00:5b:52:0d:6d:7f:
44:72:63:dc:01:89:53:e7:b9:6e:02:f5:88:05:ea:
12:ca:73:c3:51:3b:ab:d0:e3:99:1d:97:bb:03:f5:
c4:3d:ed:47:e4:a2:76:f0:7f:70:0f:b5:b1:21:bc:
9d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1B:0D:E7:37:0A:12:03:9C:72:1B:B7:0E:22:DB:E9:E5:83:58:71
X509v3 Authority Key Identifier:
keyid:20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/01A09AD4529A11F1B2F4C97190833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.105.73.0/24
202.94.73.0/24
IPv6:
2001:df1:6400::/48
Signature Algorithm: sha256WithRSAEncryption
9d:fe:59:e8:69:20:a6:7c:b9:bc:fb:14:b4:8a:cc:a2:fc:8e:
b2:41:c6:5e:ae:dd:ee:6f:14:d0:bc:11:ad:69:92:a7:94:f0:
e8:1e:f6:16:cc:06:47:62:46:06:a7:aa:0b:eb:cc:39:82:40:
61:28:be:51:c1:8c:21:fd:68:6c:72:ae:2b:01:41:d8:6a:9d:
a7:7f:8e:b7:be:f8:f7:3a:d9:44:1d:b3:3a:bf:96:fd:e9:dd:
ac:be:e4:08:d7:5d:e0:6c:d0:86:9c:bc:ae:9f:9c:52:1c:3d:
e2:e6:76:2a:70:7d:b2:93:d9:f9:18:76:6f:5a:4d:35:b8:bd:
34:05:e6:23:0f:69:2d:73:84:d3:7a:8f:0f:2a:68:92:9a:02:
63:e8:d3:e0:19:82:d9:ac:47:4d:53:04:fe:c1:97:33:15:82:
ff:a3:6c:e2:06:3d:ef:11:ee:85:3c:f0:72:5d:26:1a:42:db:
1e:66:29:ea:f0:47:dd:5c:23:50:0f:f2:37:73:3a:3a:6c:d3:
b8:38:bd:d6:7d:57:56:10:65:8a:ca:02:09:bd:30:bc:b2:1f:
0e:50:75:a5:3e:56:e4:cb:5b:7d:d0:a9:c0:89:28:14:07:04:
19:bd:89:67:d6:3b:5c:b5:f8:77:20:ef:17:9b:16:2c:c3:a0:
1f:1c:80:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:37:30 2026 by rpki-client