
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/813EDCA4137E11EF9969A86BC4F9AE02.roa
File: 813EDCA4137E11EF9969A86BC4F9AE02.roa (raw, json)
Hash identifier: MD6k5wA0AqG/dEECYzynxqcMbFFUqeKVXvzHIx4QFZQ=
Subject key identifier: A2:3C:A7:43:12:E4:D1:F5:FB:4C:68:0D:61:B5:6D:1B:78:ED:CD:9A
Certificate issuer: /CN=A9128C33/serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E
Certificate serial: 01CE
Authority key identifier: AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/813EDCA4137E11EF9969A86BC4F9AE02.roa
Signing time: Mon 02 Mar 2026 05:14:10 +0000
ROA not before: Mon 29 Sep 2025 05:02:47 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 151671
IP address blocks: 103.255.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl
rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128C33, serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E
Validity
Not Before: Sep 29 05:02:47 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a51ca1-3c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:2d:4c:bd:56:45:f0:c8:98:0e:a6:20:d1:
bc:0f:96:be:ae:7c:9b:f9:26:72:83:01:a6:85:06:
d2:d9:4e:15:52:98:a2:af:5b:31:f7:c5:bb:21:c4:
37:07:73:4e:c6:3a:19:60:16:2e:2f:4a:d1:54:e0:
62:33:a2:4a:3c:ba:92:50:1c:9d:f8:0b:2f:ab:94:
bd:1e:fc:4e:bf:56:51:d8:d0:28:c2:56:0f:61:da:
53:93:fc:47:fe:47:ea:90:ae:36:a5:53:9e:71:b8:
47:61:a5:89:61:7b:e6:cf:e9:c7:01:b5:be:fa:0b:
76:4b:da:08:ad:aa:5d:48:01:8c:95:1e:59:32:0d:
9c:d7:cd:cd:b0:a9:1f:aa:ac:fb:3e:ee:cd:b4:aa:
86:05:59:9a:7c:f0:57:7d:14:69:cd:3e:9d:3e:17:
52:e8:f9:5b:82:c6:91:ce:9e:e4:67:91:cb:a8:cb:
b5:2e:ab:7a:82:66:a0:75:3a:6d:5d:b3:fd:e8:5c:
92:c4:96:ed:73:da:82:68:c8:6f:41:03:57:23:a9:
5c:5d:5f:b7:bc:b9:95:ab:b0:ea:ac:da:10:30:4a:
5f:a8:7b:8b:ef:80:3d:20:86:0c:30:00:7d:f8:bf:
37:3a:36:4e:d7:85:ff:ae:9e:38:d0:a3:5c:fb:73:
6c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3C:A7:43:12:E4:D1:F5:FB:4C:68:0D:61:B5:6D:1B:78:ED:CD:9A
X509v3 Authority Key Identifier:
keyid:AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/813EDCA4137E11EF9969A86BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.255.96.0/24
Signature Algorithm: sha256WithRSAEncryption
99:fd:b0:ac:33:0a:fe:6f:60:d6:71:50:89:f5:fc:06:ac:50:
93:51:0d:f2:99:a6:9e:7b:0d:b0:94:5d:37:27:0c:85:95:61:
2f:d7:96:79:26:7d:c5:d9:55:0f:e9:54:31:00:9e:ea:5c:dd:
68:84:f8:bf:08:a7:71:f3:28:20:c8:d3:be:06:87:89:20:75:
8b:43:77:b0:5b:fe:9b:b3:fa:7c:c6:cb:d2:70:e5:77:1b:23:
e6:66:c7:49:07:c8:5e:38:87:70:f3:f8:dc:57:99:7c:d2:ea:
5c:63:99:90:e0:23:1d:8f:5a:5a:97:82:5c:fe:c7:a9:64:50:
a1:eb:47:ae:3d:b8:b6:b5:9a:bf:81:65:60:65:6b:7b:1b:eb:
31:c6:3b:9a:8f:d3:61:fe:88:fb:a5:9c:b6:45:3a:3e:52:03:
8a:cd:bf:31:3c:44:a8:6b:71:2a:83:de:67:9c:20:fc:96:87:
dd:0f:d5:7c:dc:0b:3b:cc:34:87:d6:62:18:73:d9:30:f5:60:
80:32:46:59:44:2d:0f:d2:b7:2a:b5:5f:49:c0:e9:cd:af:79:
88:64:e7:75:03:9f:01:db:30:fa:3a:99:18:5c:a6:17:0b:be:
e0:26:08:cf:da:a6:f9:ab:16:e9:3b:4a:8c:fb:35:0b:9a:f9:
74:51:11:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:11:38 2026 by rpki-client