
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/04A9BC6EDAC011EE94B8705AC4F9AE02.roa
File: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (raw, json)
Hash identifier: CCRIx6xx0eQTTafK35qMinnGOYOtSbUUlnFtAWNi/ek=
Subject key identifier: A5:6E:02:D7:E6:C4:31:81:4D:25:57:45:30:DB:B7:2F:E5:30:2D:D8
Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946
Certificate serial: 01AC
Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/04A9BC6EDAC011EE94B8705AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:45:41 +0000
ROA not before: Thu 29 Jan 2026 03:23:10 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 199524
IP address blocks: 103.178.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl
rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946
Validity
Not Before: Jan 29 03:23:10 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a5a295-7f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:53:b5:90:9a:23:1b:ca:97:94:a4:fa:c0:
71:1a:19:3e:3f:44:dd:fb:3b:66:e1:57:e2:cd:c9:
04:fd:48:3e:8e:7a:8c:d3:0e:af:92:f4:63:19:7d:
4c:b2:58:c6:37:1d:08:30:42:69:2f:e3:22:54:de:
b1:d8:9d:e1:1a:bc:cb:96:c0:c5:1a:9b:3c:56:b0:
71:54:50:89:e8:12:b2:09:1b:66:63:57:51:c0:e3:
4a:71:de:df:1d:5c:55:24:35:4e:8f:4a:4f:4d:dd:
9d:10:8a:63:0c:41:d6:48:21:c9:51:21:5f:77:fe:
fe:2f:5b:a7:a6:92:61:1b:d1:bc:31:b9:11:de:28:
70:c4:ce:9b:7d:65:9d:d2:3f:be:fd:be:ac:db:85:
60:b2:97:41:4f:ed:89:9c:f3:71:a3:6a:0f:45:0d:
3b:01:70:d9:94:c6:68:5d:15:8b:5f:1d:9d:30:42:
5c:4f:58:ff:48:12:a7:c9:04:bd:19:46:d9:6e:0b:
d1:eb:6c:6e:56:4c:a9:68:9c:ae:2f:4e:9f:af:01:
11:65:c0:b7:a3:05:61:3b:f2:87:e8:ae:21:3d:33:
05:df:7c:2a:6e:18:c3:ca:bb:50:9f:6a:db:27:0e:
47:ab:bc:c1:31:f3:bd:c8:48:52:d0:0d:40:a4:6e:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6E:02:D7:E6:C4:31:81:4D:25:57:45:30:DB:B7:2F:E5:30:2D:D8
X509v3 Authority Key Identifier:
keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/04A9BC6EDAC011EE94B8705AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.178.28.0/23
Signature Algorithm: sha256WithRSAEncryption
34:4b:b9:4e:08:d4:c1:46:b9:2f:d9:f1:57:c3:c8:43:06:b9:
46:fd:3f:82:e4:ef:c2:92:0e:25:58:ad:c9:1c:66:20:24:19:
db:d7:ea:c0:65:de:95:a0:95:e1:8d:8f:86:72:ed:73:0e:1d:
4b:82:5d:96:9e:fd:d5:29:c7:4a:1c:27:1c:bf:70:d4:84:61:
00:91:f8:16:d1:8f:01:fe:d3:29:fc:2c:81:84:fe:13:67:85:
71:ff:67:61:8e:32:60:12:71:92:c2:cc:77:61:42:a0:1e:4d:
63:0c:d9:66:6c:84:7f:a8:2b:f8:ce:35:bc:2d:34:9d:67:6e:
bc:18:d7:2c:bb:43:89:47:2b:1a:4d:ed:a2:78:69:8a:e8:33:
35:f3:99:95:e4:61:5d:d4:87:52:e7:b6:46:94:8a:f1:4d:46:
d7:f5:02:7d:a5:84:55:e7:62:3e:9d:68:81:59:8f:c6:92:51:
40:dc:45:85:7a:3c:26:2e:3c:2d:5f:f6:9a:e2:36:02:30:b6:
e1:fb:8b:73:83:a0:a9:9c:ec:07:b4:b9:cb:ee:16:d1:1a:91:
87:84:f6:f8:ae:a8:be:2d:5e:f3:1b:0c:ba:15:23:6b:82:16:
d9:47:74:64:53:36:e1:72:6e:c3:93:00:27:47:56:29:a1:51:
da:c0:ca:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:11:00 2026 by rpki-client