
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/C9E2B406804111EEA6703F81C4F9AE02.roa
File: C9E2B406804111EEA6703F81C4F9AE02.roa (raw, json)
Hash identifier: s9x9gIirWntlK8Owx596ebxdwlOGog5ZPg7HYcpO694=
Subject key identifier: DE:C2:44:56:3C:5F:01:73:79:DA:52:9C:A8:AA:DC:4C:3E:13:4B:5C
Certificate issuer: /CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
Certificate serial: 03E7
Authority key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/C9E2B406804111EEA6703F81C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:32:12 +0000
ROA not before: Thu 30 Oct 2025 22:12:48 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 133206
IP address blocks: 194.127.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl
rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 999 (0x3e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CDC5, serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
Validity
Not Before: Oct 30 22:12:48 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a431cc-d4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:d0:fd:57:f2:4d:be:1d:11:c0:4c:1c:84:
0e:b8:3f:aa:f7:e5:b6:08:44:a0:08:ad:94:a4:bc:
e2:d6:42:e5:7c:99:cd:26:1a:f1:a3:f5:90:77:a1:
93:4a:de:14:15:39:64:55:80:f9:4f:9d:20:34:bb:
4a:d1:61:f0:77:e6:25:d3:53:3a:b8:1e:17:29:f2:
38:d5:95:3b:f3:c2:60:1a:6e:66:a8:2b:48:6c:81:
a2:b9:76:c9:23:74:14:4c:cb:6e:b7:b0:95:d4:97:
b6:32:3f:3a:6f:4b:e8:e9:4f:69:94:74:4c:92:a8:
3b:ad:0e:0f:45:87:06:29:ff:40:55:3f:5a:4a:d1:
39:cd:97:5a:a2:9c:07:cf:9b:10:b7:c2:5f:f8:29:
3c:cd:b4:b3:94:31:37:43:47:75:e3:b5:ff:ef:01:
61:fd:69:59:dc:6e:9a:ab:a0:cc:50:82:5f:af:ed:
2d:46:ca:29:0a:b9:dd:af:67:04:fe:87:34:10:5c:
7b:9f:d3:37:73:bf:55:2d:8a:32:e0:a9:1c:ff:01:
5f:17:69:57:52:d4:f5:c2:25:b7:76:58:14:63:e9:
e7:39:87:62:4c:06:ad:e9:f6:22:fa:55:5f:62:fe:
7e:cb:bf:a5:b5:25:18:5f:06:8d:db:d7:2b:ca:9c:
ac:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C2:44:56:3C:5F:01:73:79:DA:52:9C:A8:AA:DC:4C:3E:13:4B:5C
X509v3 Authority Key Identifier:
keyid:62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/C9E2B406804111EEA6703F81C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
194.127.104.0/23
Signature Algorithm: sha256WithRSAEncryption
03:8b:47:ce:9b:0b:30:ed:9c:78:5d:fa:18:d3:28:76:0c:ac:
5e:b9:51:21:28:a7:09:a0:43:ef:ad:97:41:af:3e:2b:3a:f7:
99:e3:91:4e:df:b8:d8:8d:be:fe:e0:11:f8:39:59:8b:55:96:
32:83:28:90:40:3c:8b:f5:f8:b7:b9:11:fe:cc:d9:dc:df:5e:
74:bf:1f:2d:46:26:c1:1f:10:af:c9:c1:d1:ed:9f:a4:25:d6:
1e:11:c3:c3:2c:82:c7:95:8c:f7:4b:27:24:2b:c5:1e:d7:30:
3b:85:ad:e0:c3:a7:b5:3c:fe:26:47:d5:f8:78:76:f8:66:58:
14:9e:0e:d8:18:14:81:88:0c:76:c9:66:2f:04:7f:6d:fa:01:
82:fb:0c:5d:32:0e:61:d5:cd:97:89:be:c5:ec:13:0f:25:e3:
70:b3:f2:46:5b:f5:ee:ac:f1:53:92:7c:c4:6a:19:23:46:ef:
df:a7:a6:16:cd:db:39:06:c0:b9:00:3a:ca:b8:01:ae:14:46:
ff:68:0d:8f:37:d7:a3:63:ba:a4:5a:2c:64:6f:7c:96:fd:ee:
23:21:38:8a:6a:b4:93:4d:68:33:76:13:7b:f3:fb:3d:75:c8:
4a:e7:08:da:7a:c2:46:c8:d7:69:c7:4e:87:7b:75:80:d8:89:
3f:c9:78:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:30:54 2026 by rpki-client