
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/9D4131DE13D511EF883BC527C4F9AE02.roa
File: 9D4131DE13D511EF883BC527C4F9AE02.roa (raw, json)
Hash identifier: oNk2Yj7BAXr53shotI4NPG4FvCYNPLa/xgmkzr6F1Yc=
Subject key identifier: 8C:D0:D5:56:7F:18:30:08:1A:95:F7:66:EB:A6:81:C3:C3:D9:8D:75
Certificate issuer: /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91
Certificate serial: 0D1D
Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/9D4131DE13D511EF883BC527C4F9AE02.roa
Signing time: Mon 04 May 2026 18:22:29 +0000
ROA not before: Mon 04 May 2026 18:22:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 202.77.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl
rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:17:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3357 (0xd1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3E1, serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91
Validity
Not Before: May 4 18:22:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f8e3e5-ebfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:b2:89:a1:e7:f6:66:c4:eb:b6:ac:10:bd:
0c:d9:4b:10:72:3e:58:db:95:0e:5d:a1:d7:02:a4:
b4:53:15:db:76:46:69:4c:ab:d3:05:2c:bf:cf:57:
f2:8e:88:2f:e8:f5:3e:3c:77:47:0e:29:5b:d5:64:
f1:f4:cd:37:e8:f9:bb:68:1d:ea:16:15:ea:05:f3:
3f:77:09:ae:ae:51:d5:2e:2f:ad:33:72:4b:6c:38:
db:9b:fe:21:f0:c2:0a:a2:6e:a0:f3:ce:23:40:3c:
4c:dd:fa:ed:97:47:c6:be:3b:90:16:07:ef:e8:fd:
3a:1b:21:7f:95:27:bd:7b:3d:e4:96:77:3a:e1:d7:
ba:5f:8e:66:af:f5:3d:de:a0:34:6c:a6:ed:f5:b6:
7a:d6:e4:61:6f:c7:77:5d:a9:f3:ab:d9:d6:ba:09:
ca:b6:37:57:f9:11:6b:ca:df:52:36:ab:2e:56:d5:
90:f6:6e:f2:db:e6:42:3a:05:f3:68:8a:0e:e2:d7:
3e:ca:ad:45:9c:64:c2:99:31:05:52:f6:dd:ab:86:
75:6d:6c:d3:1e:8f:3c:b3:91:c2:73:94:d0:4e:e6:
46:e3:7c:37:18:91:52:bc:db:c9:1e:78:97:a3:dc:
72:b7:0c:52:ad:1a:75:0f:e3:32:a0:9c:52:24:77:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D0:D5:56:7F:18:30:08:1A:95:F7:66:EB:A6:81:C3:C3:D9:8D:75
X509v3 Authority Key Identifier:
keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/9D4131DE13D511EF883BC527C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.77.88.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:f9:ba:d3:63:d4:98:9a:78:f8:1e:3c:ae:7a:2f:ab:56:81:
eb:c6:aa:2c:15:2a:03:42:a4:d7:7f:12:37:9c:f4:79:14:0a:
b4:f0:d5:1f:3c:55:6f:02:8b:85:7c:b4:db:ed:b5:d0:11:36:
26:a3:72:09:a0:71:e0:b0:90:e1:36:77:ff:57:66:a7:1f:2f:
9e:70:84:b2:c9:fe:d4:0b:bb:78:eb:3a:24:f3:31:96:41:a2:
1d:69:e1:f4:d4:1c:e3:89:65:c0:da:4a:23:39:b9:e5:07:72:
d8:73:3a:87:95:4c:61:cc:4c:9f:c9:5e:15:1d:e6:a6:b9:a2:
2d:89:04:5c:5b:08:1e:92:21:25:5d:3a:41:40:d9:55:d6:e1:
51:6d:02:a9:49:bb:90:e4:ef:19:17:e4:8d:a7:f8:36:76:07:
8b:b1:6e:1d:73:15:2e:26:87:e0:75:5f:68:c8:b5:8b:80:d2:
ab:28:fd:5c:af:79:ab:a0:d4:f1:9f:c4:b8:e3:4e:a9:44:39:
db:44:72:eb:8b:1e:e7:4d:80:8d:b7:3f:d5:fb:30:6e:8a:c1:
b5:11:ec:9b:ea:b3:4d:5e:ba:fb:1f:62:3a:36:57:a6:65:49:
a3:d0:22:12:f8:de:5f:20:b4:92:76:ca:7e:b3:03:a7:71:fd:
a9:f2:ca:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:02:22 2026 by rpki-client