
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/35574A4C72E011F1B62EB7CB78A30FBC.roa
File: 35574A4C72E011F1B62EB7CB78A30FBC.roa (raw, json)
Hash identifier: G7o1MmZys/389yZ0MnYQt9sz32X3Ar4g0uQYQhqD+gk=
Subject key identifier: 5C:7E:1A:4B:9C:64:A3:30:9A:96:9F:AA:1A:26:50:71:91:5C:A3:0A
Certificate issuer: /CN=A9118EDB/serialNumber=E6D7655154E36B69711574E20796B6802C43B715
Certificate serial: 05B5
Authority key identifier: E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/35574A4C72E011F1B62EB7CB78A30FBC.roa
Signing time: Sun 28 Jun 2026 10:59:01 +0000
ROA not before: Sun 28 Jun 2026 10:59:01 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 138500
IP address blocks: 103.127.48.0/23 maxlen: 24
2401:f9e0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl
rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1461 (0x5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118EDB, serialNumber=E6D7655154E36B69711574E20796B6802C43B715
Validity
Not Before: Jun 28 10:59:01 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a40fe75-29f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:bf:4a:40:33:22:7b:ea:59:19:a2:d5:4b:
24:e7:26:8a:61:27:4b:9a:d1:5a:73:16:28:35:ff:
b2:7e:13:56:bb:9a:20:58:fe:a2:c3:1c:40:dc:de:
29:41:16:a3:23:9d:1c:4f:21:4a:41:8f:57:e2:6e:
7b:3f:d9:94:21:e5:e2:3d:62:78:aa:e6:9a:2d:fc:
24:ce:e2:1f:b8:60:ee:ea:87:bc:9e:e8:01:4d:75:
e6:06:47:11:4c:65:b0:64:94:63:6a:f1:e2:30:d2:
3b:9d:11:be:8d:49:5a:9b:49:e8:f3:37:64:fa:79:
86:3f:df:06:f3:cb:02:ad:94:35:a3:e5:9e:e2:ee:
5b:30:94:02:96:57:6b:74:fd:7e:93:ce:8e:d6:3d:
77:95:fc:03:d4:46:ba:44:08:f6:8f:23:50:28:60:
27:da:4b:e7:39:e4:24:91:48:46:cb:b1:a3:6f:94:
4b:1e:23:d0:e0:ae:92:ea:ed:36:2b:db:a7:09:77:
0c:11:31:59:ed:d0:c9:da:41:67:7b:8c:42:6c:38:
72:75:2b:bd:c4:a3:dc:83:e9:69:08:d7:fe:0f:c9:
53:45:e2:91:f2:81:24:08:03:02:01:13:11:24:96:
b7:16:97:e2:95:fd:74:ad:b2:c3:a6:15:57:5a:3b:
fa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7E:1A:4B:9C:64:A3:30:9A:96:9F:AA:1A:26:50:71:91:5C:A3:0A
X509v3 Authority Key Identifier:
keyid:E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/35574A4C72E011F1B62EB7CB78A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.127.48.0/23
IPv6:
2401:f9e0::/32
Signature Algorithm: sha256WithRSAEncryption
82:80:3d:db:6c:67:f1:2d:9d:6a:65:3d:f0:d5:18:93:63:b6:
9b:ee:fc:24:69:11:d4:6b:94:33:8e:cf:7b:ca:46:43:d4:08:
1f:7c:58:3f:71:cf:4c:82:30:17:d1:5f:31:16:1c:61:17:28:
cc:72:a7:38:16:a7:ac:ad:46:c2:24:bf:53:88:f5:d1:c1:e4:
20:af:12:c4:6c:af:da:f7:61:3b:6d:04:ee:6d:65:82:a4:cd:
b0:f2:f0:5c:1c:bc:bc:91:b6:3a:b2:a5:5f:a8:49:60:8f:5c:
e4:30:88:ba:e3:2f:da:39:c6:6b:25:4e:4d:63:7f:93:2c:77:
56:d2:ed:5d:21:0b:0b:6b:21:31:99:f9:57:de:53:bc:75:4f:
ea:74:03:ae:bf:1a:ea:ff:72:da:f0:40:a1:f6:f7:55:85:6d:
45:f3:68:9e:8d:d1:ef:92:d5:ba:08:c9:4d:76:82:cd:9d:fb:
cc:0d:31:50:05:3a:78:10:5e:ab:28:15:b2:53:22:8f:b4:85:
49:ad:24:07:09:13:4e:05:24:38:62:05:2f:8c:fa:78:9a:e4:
3d:6b:fb:ac:22:cc:4f:3b:67:64:e4:9c:d9:a6:7a:fa:56:9b:
8c:39:16:cf:3a:e2:bf:b5:b5:87:e5:12:8f:da:15:14:9b:20:
04:6f:ec:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:39 2026 by rpki-client