
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/0E3F5E5CBBB811F0B7A3E30BC4F9AE02.roa
File: 0E3F5E5CBBB811F0B7A3E30BC4F9AE02.roa (raw, json)
Hash identifier: 4zRuuR1sO9CKHH38Jna18wV19qizi3M0wtTY0eQl8yM=
Subject key identifier: 36:68:84:ED:9F:55:C1:00:E6:A1:01:AC:48:7F:2C:A7:5B:89:50:FA
Certificate issuer: /CN=A9124096/serialNumber=BE879DA12228F52AFB4D10F63F80E026F48516A0
Certificate serial: 43
Authority key identifier: BE:87:9D:A1:22:28:F5:2A:FB:4D:10:F6:3F:80:E0:26:F4:85:16:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/0E3F5E5CBBB811F0B7A3E30BC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:17:46 +0000
ROA not before: Sat 29 Nov 2025 06:04:27 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 135556
IP address blocks: 115.187.26.0/23 maxlen: 23
115.187.26.0/24 maxlen: 24
115.187.27.0/24 maxlen: 24
2401:4ee0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.crl
rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 07:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124096, serialNumber=BE879DA12228F52AFB4D10F63F80E026F48516A0
Validity
Not Before: Nov 29 06:04:27 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a59c0a-ad7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:5e:8a:03:f8:68:c7:bf:51:41:c2:44:74:
ae:96:0b:95:4e:78:55:a9:2b:bd:86:42:a1:0c:1d:
be:fa:c7:1c:48:f0:c2:ad:19:2e:e2:52:17:f5:69:
71:79:9c:0e:26:2b:5e:03:6b:fb:d9:8d:fe:3a:29:
e3:a6:17:1a:58:9d:d4:03:47:c9:22:c8:91:26:f5:
dc:77:9d:44:8b:38:f3:7d:d7:5c:a5:dd:8e:7f:4f:
04:c1:ce:9e:28:38:ec:b2:0b:ba:cf:17:e3:57:22:
58:c7:83:d0:d3:d0:07:ab:87:f4:17:aa:ff:4e:48:
2f:26:e9:3d:f0:38:ea:72:aa:09:e4:8b:4d:9b:f3:
e1:7f:60:69:23:e3:b5:a9:93:1d:8a:91:2e:64:35:
d6:bd:14:a7:8b:c8:b9:6e:29:71:2d:ae:6a:4a:0a:
ad:e0:0d:31:c8:49:c8:4a:be:17:55:c1:a7:0c:44:
45:b7:1a:a0:df:49:6d:45:c7:f1:cd:29:c9:3c:11:
c6:3e:e8:6f:41:6e:1a:cb:91:3b:0a:ac:62:a2:e5:
1a:86:c9:0a:f1:88:f4:c9:9f:1b:c9:3f:da:bd:d0:
fb:eb:52:b7:e3:be:18:23:a1:66:91:76:a9:d6:c2:
9d:00:45:7e:31:35:4d:d4:4a:8f:71:81:93:3e:f3:
8e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:68:84:ED:9F:55:C1:00:E6:A1:01:AC:48:7F:2C:A7:5B:89:50:FA
X509v3 Authority Key Identifier:
keyid:BE:87:9D:A1:22:28:F5:2A:FB:4D:10:F6:3F:80:E0:26:F4:85:16:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/0E3F5E5CBBB811F0B7A3E30BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
115.187.26.0/23
IPv6:
2401:4ee0::/32
Signature Algorithm: sha256WithRSAEncryption
7b:41:70:d2:16:3c:9e:e4:3d:36:7b:d9:99:0e:ef:96:1a:f3:
bf:c1:60:25:c8:17:ee:69:24:1a:e3:26:2f:ee:da:0c:3c:da:
ce:47:65:52:9e:d9:e7:1f:d3:c8:68:6d:82:82:59:21:1e:a0:
03:8b:32:63:cc:8a:1d:de:c2:ef:3e:c5:65:70:55:86:b6:56:
36:f8:26:31:26:77:16:78:d2:b3:c0:fb:32:c1:43:97:0e:05:
49:85:18:00:32:0c:48:dc:63:4d:ae:d3:23:b5:9d:79:f6:4c:
e7:69:1a:86:d5:0a:73:63:03:0f:33:53:2a:92:02:c4:e8:5c:
af:67:b7:7e:d6:c9:78:1b:e6:7c:8c:6d:db:b3:9b:58:28:fd:
4d:a7:b2:f1:99:a6:c0:62:9c:0f:9d:5f:5d:8f:39:b8:ba:6c:
a0:db:95:50:c3:8a:f5:ff:7b:d8:10:de:94:63:bb:c3:7f:dd:
ad:fe:71:0e:cb:bc:98:db:69:b5:b2:c8:77:17:22:14:78:50:
35:3a:0d:f5:35:75:10:c4:7b:7e:38:6d:80:0b:9d:e1:d0:08:
dc:5f:4b:bb:aa:07:82:64:58:f1:a4:84:d6:2e:5e:78:5a:3b:
31:e0:0a:9b:d6:62:6b:31:ba:20:de:d5:c7:7c:ed:c3:69:9f:
d1:d6:f0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:12:47 2026 by rpki-client