
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/90195128FAC411EEB1CDF882C4F9AE02.roa
File: 90195128FAC411EEB1CDF882C4F9AE02.roa (raw, json)
Hash identifier: 6f62DrCIqXQzH0Me6UWUB3Obo/TfW+7iKkRiIr7raYQ=
Subject key identifier: E8:55:8B:9D:9D:A7:A3:D3:C8:08:3A:FB:52:5A:3B:F1:2C:A7:E4:32
Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955
Certificate serial: 016C
Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/90195128FAC411EEB1CDF882C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:33:25 +0000
ROA not before: Fri 05 Dec 2025 02:42:53 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137199
IP address blocks: 203.32.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl
rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955
Validity
Not Before: Dec 5 02:42:53 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a59fb5-5ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:ff:61:48:50:86:a2:d5:20:bf:5f:8d:69:
ef:ee:fb:5b:0d:4f:df:a2:a4:b1:2f:70:e4:83:b2:
e0:3d:04:6e:3d:f3:8b:65:68:02:97:64:c8:af:82:
fb:5c:83:52:e1:4c:43:70:04:1f:ad:9b:1c:1d:b3:
09:56:c5:d7:a6:9a:80:72:62:03:b3:df:01:97:13:
78:48:54:10:04:bd:fd:e0:41:19:46:68:ba:34:8d:
52:31:ff:0c:ad:73:3f:3a:66:45:e1:e0:af:ae:cb:
32:79:14:1d:7e:88:56:ca:a1:77:b1:d4:de:df:ae:
cc:97:15:05:db:83:a0:cc:e8:17:13:3c:55:bc:4d:
69:26:db:4c:f3:92:85:75:3c:0b:2b:53:76:6d:44:
f6:88:21:8b:19:4f:10:53:13:df:2b:ba:27:5a:be:
3e:f0:17:f4:de:1f:2b:46:51:0c:da:1d:08:c5:09:
37:34:23:16:23:8b:07:84:3b:df:a5:d7:d3:8c:7e:
86:d6:76:11:2c:67:88:a6:cc:e0:93:5d:a2:17:a5:
e2:d7:d5:6f:53:d9:67:15:c5:6f:b9:13:9c:97:98:
52:8d:6d:50:ef:d8:e1:a1:b7:e4:3c:eb:05:8f:0f:
d8:26:04:84:61:a9:40:cd:0b:a6:d8:6a:8a:db:a8:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:55:8B:9D:9D:A7:A3:D3:C8:08:3A:FB:52:5A:3B:F1:2C:A7:E4:32
X509v3 Authority Key Identifier:
keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/90195128FAC411EEB1CDF882C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.32.66.0/24
Signature Algorithm: sha256WithRSAEncryption
38:7c:d2:5c:d5:2f:c7:40:1d:89:ee:4e:68:71:2a:23:73:92:
7b:d8:78:b9:d3:7c:86:a4:53:21:42:07:f4:25:3b:d9:08:af:
47:b4:55:66:11:6f:77:10:1c:e1:69:99:bc:69:15:37:8c:82:
f8:55:45:88:da:fc:ec:6a:a9:c3:11:b6:64:b6:0a:1f:e7:75:
d2:96:39:c1:f6:d3:68:3c:a0:d9:72:af:5b:ac:ba:0e:1a:30:
70:a1:e2:87:c0:42:11:c8:6b:9d:f8:40:31:e8:9b:72:ac:98:
f9:7e:79:27:a1:e7:b1:9e:b1:0b:6b:78:a9:d3:0d:91:ce:c7:
c0:0e:c1:18:ac:29:92:fd:8d:34:81:11:fb:7d:7c:e7:fd:d4:
22:57:8c:6d:43:73:5b:fd:b8:d9:3b:c9:e4:3e:db:18:56:62:
b1:d9:8a:59:66:c9:57:cb:32:88:65:a3:c7:ee:72:3f:5d:c6:
15:75:5d:95:f6:7a:40:d1:90:bc:0e:46:0f:fd:7c:c8:f2:80:
8c:3b:eb:49:c7:83:fb:71:9f:60:b9:d5:b7:45:df:51:89:ef:
a6:36:83:2a:bb:3b:a2:14:d0:d6:4e:94:4c:10:32:50:6d:63:
71:23:0e:45:a4:0e:33:50:96:66:44:46:fc:70:2d:eb:7f:8d:
91:f4:63:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:51 2026 by rpki-client