
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa
File: 9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa (raw, json)
Hash identifier: Z6zpJNeDiRoumvX5lCIDf2X6SZzpmpEYlhnAJ6yadjo=
Subject key identifier: 41:6E:D4:BB:94:69:6F:71:28:6D:D9:3F:8B:82:85:05:6D:40:AF:A7
Certificate issuer: /CN=A9120AC1/serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14
Certificate serial: 0552
Authority key identifier: 77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:37:14 +0000
ROA not before: Thu 05 Feb 2026 09:23:26 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 963
IP address blocks: 141.193.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl
rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1362 (0x552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120AC1, serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14
Validity
Not Before: Feb 5 09:23:26 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a46b3a-5d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:65:53:6c:75:b4:aa:54:15:7e:29:39:af:
ed:00:43:1c:f1:b2:0c:0d:84:3b:ec:bb:51:08:9f:
9a:41:c7:02:f1:58:1d:b8:3a:2d:52:ad:58:11:c9:
7e:a8:ac:20:7d:8d:e5:be:a0:d0:2d:ea:64:4c:88:
83:1d:f1:31:86:a1:18:d7:8a:da:32:d0:4e:b4:ac:
66:b2:80:7b:98:0c:9a:64:49:56:07:83:e5:af:a0:
b5:9b:3d:e3:75:06:11:e4:85:4c:6b:6c:c1:79:15:
22:55:52:6b:77:2d:40:8a:9f:3c:c2:ac:28:86:9a:
3c:66:18:a8:86:9b:50:8e:09:fb:2d:08:b5:fd:f8:
84:91:1f:bb:a4:d2:c7:ec:e2:3d:5e:b9:69:57:1e:
1d:52:a3:79:bc:e9:3d:cc:3c:f9:7d:a0:ab:fc:11:
6f:11:c0:be:51:5f:4c:47:b5:09:a1:09:03:99:73:
8f:e7:a9:a6:12:e6:0d:8f:66:dc:f3:c8:fa:8d:d4:
56:ff:56:76:d2:b7:ea:d9:e0:b6:ec:d0:f8:de:ba:
5c:ac:6d:aa:05:e3:aa:32:57:3f:6b:cc:2c:74:c3:
57:86:91:a0:83:4d:d0:e0:27:57:e3:1a:26:bf:ee:
1a:3e:6e:9e:99:83:00:b9:32:ff:67:5f:e1:30:25:
25:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6E:D4:BB:94:69:6F:71:28:6D:D9:3F:8B:82:85:05:6D:40:AF:A7
X509v3 Authority Key Identifier:
keyid:77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
141.193.152.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:86:0f:33:7b:94:83:c1:c2:10:a6:83:1f:74:e1:4d:4c:cc:
cb:8a:c1:d6:83:0e:ed:85:27:a1:f6:ac:d6:b6:41:ce:d9:ba:
d7:c7:cf:80:4d:66:58:8e:08:fa:cd:e0:00:43:2b:93:95:6f:
05:1e:15:ca:6d:1f:7a:57:27:ff:56:3c:ac:84:5c:7f:dd:e4:
7f:02:60:b3:d7:50:2c:c9:03:d3:26:47:db:36:b0:da:ba:77:
96:e2:5a:46:da:43:27:04:f6:f3:e1:70:73:ca:13:4c:58:ed:
8f:eb:b1:c9:a0:34:69:76:4b:d1:80:b8:f2:c4:a7:20:e3:8e:
ac:e1:29:d3:6a:35:02:13:fb:d2:20:b7:b6:39:17:03:91:b9:
df:e3:6e:64:6e:31:09:86:b7:0e:44:f6:f4:47:c0:4f:08:00:
ef:8d:a2:7d:22:ba:ae:6b:de:48:fd:d1:60:db:5b:74:e3:82:
f5:0d:11:c6:e3:eb:48:0d:74:ff:8e:e4:a8:cc:e6:24:5c:ec:
8d:8b:c0:e3:4f:e2:4b:ff:e8:9d:ad:e7:a3:e3:d7:f8:fc:e8:
e7:ba:43:bd:a5:f2:4f:e9:92:28:ee:01:0b:0f:40:bd:c4:a1:
da:ba:eb:55:8b:88:f1:2c:24:50:b2:18:bf:e3:16:ab:67:5a:
06:ae:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:46 2026 by rpki-client