
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/76FA27AE4E0E11F190083CE1CC833773.roa
File: 76FA27AE4E0E11F190083CE1CC833773.roa (raw, json)
Hash identifier: va/1lyhr1y7ZVbyMMDIeDeUDTkfRGTrO+6LCCS/pWVI=
Subject key identifier: B1:78:5D:2F:85:F1:86:9E:D3:5F:01:A9:AD:FF:5C:B8:60:74:90:2E
Certificate issuer: /CN=A9127687/serialNumber=CA5DC5ED52B640B174BE38E269D4C49E25674F17
Certificate serial: 04
Authority key identifier: CA:5D:C5:ED:52:B6:40:B1:74:BE:38:E2:69:D4:C4:9E:25:67:4F:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/76FA27AE4E0E11F190083CE1CC833773.roa
Signing time: Tue 12 May 2026 14:37:57 +0000
ROA not before: Tue 12 May 2026 14:37:57 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 136987
IP address blocks: 121.200.57.0/24 maxlen: 24
121.200.58.0/24 maxlen: 24
121.200.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.crl
rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:38:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127687, serialNumber=CA5DC5ED52B640B174BE38E269D4C49E25674F17
Validity
Not Before: May 12 14:37:57 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a033b45-a362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:fe:cc:e6:6e:4a:1d:88:01:52:b6:cf:2e:
cd:6c:31:a1:f0:c9:cc:fd:b8:42:29:c7:5e:b0:e4:
4c:cd:9b:4a:eb:00:ab:0f:09:c0:0b:66:4d:a6:7c:
27:da:84:18:7f:20:53:d0:5d:1e:6c:92:bc:35:a0:
c8:a8:6f:be:01:da:67:91:65:bf:45:11:b8:31:7a:
1c:cc:1a:0b:f0:43:06:90:db:9c:b7:0d:e2:00:c9:
74:79:36:dc:59:08:ed:74:77:e1:5a:d3:45:70:18:
ce:00:e3:2c:81:8f:7a:fb:5a:5d:fb:25:a7:52:28:
11:86:c9:7a:b1:c6:b6:e0:bd:db:5e:f7:06:16:02:
24:25:72:88:dc:0c:6b:7a:16:8d:90:ed:4b:a6:41:
ee:4f:67:64:15:64:0c:81:cd:ba:b6:45:eb:9a:1c:
12:b3:51:4b:1e:dd:10:0c:ee:4a:4b:0b:6f:76:a6:
1c:25:d3:81:9c:5c:5f:49:e5:b9:c6:a5:d6:cb:29:
b3:8c:b7:59:ca:46:15:52:6d:48:0e:45:bb:9b:88:
1c:00:f1:ab:b5:64:40:7c:5d:01:3e:27:1f:ba:07:
1e:fa:f3:47:76:35:1c:c1:77:81:b8:33:2d:c0:d7:
ad:de:7c:c6:31:70:61:91:ec:bd:fd:96:53:bd:87:
1f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:78:5D:2F:85:F1:86:9E:D3:5F:01:A9:AD:FF:5C:B8:60:74:90:2E
X509v3 Authority Key Identifier:
keyid:CA:5D:C5:ED:52:B6:40:B1:74:BE:38:E2:69:D4:C4:9E:25:67:4F:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/76FA27AE4E0E11F190083CE1CC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
121.200.57.0-121.200.59.255
Signature Algorithm: sha256WithRSAEncryption
93:dd:c4:56:e4:91:6b:8e:74:ef:83:66:5d:38:1f:6c:99:a4:
d0:fd:ef:57:5b:97:08:54:6a:6c:c6:bb:83:0b:45:61:c8:e8:
44:ab:69:db:66:7a:ea:47:38:e3:3d:cf:31:57:34:52:3d:82:
37:88:ef:81:58:ef:8f:9f:ff:ab:47:c8:15:60:a4:3b:2d:8d:
a6:ab:47:80:b4:c4:38:d8:a0:c0:66:ae:5f:fa:0f:c3:9c:00:
71:e4:2e:f4:71:cd:47:44:cd:67:27:8b:df:d7:74:27:e3:89:
80:01:ec:1a:05:94:43:c9:06:95:0b:ad:9d:64:d7:14:e5:6f:
48:62:bd:8a:a2:cb:d7:0b:81:7f:49:08:86:b6:a9:87:b8:ad:
d3:57:d8:a8:a3:d5:8b:da:e8:98:56:35:7a:98:44:36:29:5a:
39:fe:3f:cc:f5:de:75:58:98:b1:ab:29:3d:db:12:3d:6c:bc:
c7:92:15:5d:cf:e7:71:c1:b2:89:89:f2:ef:d5:a4:db:5a:86:
02:0d:62:42:3c:61:39:ad:66:ab:bd:68:72:1c:9b:6b:f7:ee:
c0:b7:4c:5a:b3:7f:ea:64:a7:e3:71:5c:c4:b4:ef:55:04:ec:
b1:35:07:69:a0:83:74:c9:ee:56:75:ef:2c:92:12:dc:0e:f5:
a8:5d:c9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:44:24 2026 by rpki-client