
$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/EB9FE0C2500C11F0AC93B675C4F9AE02.roa
File: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (raw, json)
Hash identifier: Q+dL2W7eAJ3DJlsw7AhajpgSkws/8wtOeo5r7hNa/fM=
Subject key identifier: E7:F6:85:1C:30:FB:71:8E:45:85:7C:63:22:5D:A8:08:D5:2A:DE:9D
Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial: 044D
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/EB9FE0C2500C11F0AC93B675C4F9AE02.roa
Signing time: Sat 07 Mar 2026 00:34:06 +0000
ROA not before: Sat 07 Mar 2026 00:34:06 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 8796
IP address blocks: 103.127.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 09:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1101 (0x44d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Validity
Not Before: Mar 7 00:34:06 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69ab727e-2933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:50:30:5d:bc:37:1e:8a:a0:18:27:71:01:
6c:66:11:65:08:3e:9d:20:b2:e0:4c:e8:4e:3e:f0:
15:2c:8e:9f:70:06:51:52:d0:25:7c:db:a3:43:4b:
1a:88:42:39:e7:38:d6:55:43:5b:d2:9c:e1:1c:7d:
e7:3c:7b:db:b9:a6:44:0d:7a:cc:92:ab:e8:c8:8c:
e6:02:96:d4:1f:bc:4c:c7:39:d1:30:d0:83:fc:85:
94:43:56:37:1b:1f:9e:ab:11:6b:0b:a3:11:e4:18:
cf:01:7b:f1:9b:f8:18:9f:c4:c7:ba:07:a7:1c:44:
30:c6:87:e3:bd:a3:5c:2c:75:61:88:56:2d:53:9d:
a1:d8:53:c7:a9:9c:bc:a0:dd:77:1b:bf:fc:fb:42:
5d:ea:97:5e:9d:ce:5f:98:ef:0b:a4:2f:a3:04:b7:
6e:b3:be:e2:85:4a:5f:61:da:4a:fe:a8:d6:b4:4b:
47:c7:6f:32:a6:6c:90:89:a2:8a:93:19:ef:ee:c8:
35:13:d0:7d:64:bc:b8:49:a5:62:19:17:ec:af:4d:
5a:c8:0f:0b:22:03:10:4f:fc:b4:9e:b9:9a:eb:88:
04:5b:f5:11:0f:23:2d:98:14:bb:93:a7:bb:3f:04:
50:0e:60:8e:1b:42:e9:d3:ca:32:63:3d:7c:ad:6b:
01:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F6:85:1C:30:FB:71:8E:45:85:7C:63:22:5D:A8:08:D5:2A:DE:9D
X509v3 Authority Key Identifier:
keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/EB9FE0C2500C11F0AC93B675C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.127.240.0/22
Signature Algorithm: sha256WithRSAEncryption
22:6c:22:f1:de:e6:0e:92:59:c0:6d:d2:0a:7c:88:16:06:c6:
3e:2c:44:d8:dd:7e:16:2b:7f:36:46:de:0c:7a:11:a5:95:76:
56:2d:f3:66:27:58:d1:f3:63:1f:e0:eb:06:0e:a2:6a:d0:5f:
e1:0d:37:b7:ae:95:f5:c1:75:d5:d4:ed:fc:06:2f:ba:ce:4b:
b3:2f:16:11:e3:9d:75:e0:ad:c7:89:79:c8:fb:27:06:e9:37:
27:d6:ee:b9:30:27:75:8b:d6:cf:e4:c2:77:52:37:f1:b4:d5:
6c:e9:ce:7a:d3:4d:9e:79:80:a3:6d:18:95:66:1f:1e:f9:4d:
50:67:77:f7:f9:ba:66:4e:d1:f0:83:81:99:30:68:e7:b6:bb:
0e:fa:80:43:f8:14:99:a6:d6:b4:74:25:38:ad:f9:a8:4e:c0:
53:17:db:cc:6c:ae:5c:d3:32:22:94:ae:2c:01:81:86:4d:ad:
ff:05:54:79:f9:b9:55:26:90:d2:72:bd:e2:84:42:14:90:13:
cd:bd:8a:77:90:8e:97:bd:b0:d9:06:35:da:9c:d1:72:56:e5:
02:f0:80:cd:92:e1:5a:47:05:55:c4:0e:f4:a9:a7:0b:84:22:
37:95:b8:dc:2f:67:2a:81:a9:a9:22:ad:e0:e0:a7:9e:9b:e5:
19:67:10:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:33 2026 by rpki-client