
$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/9B6126AEE1D811EF881A2765C4F9AE02.roa
File: 9B6126AEE1D811EF881A2765C4F9AE02.roa (raw, json)
Hash identifier: phsa0aOE8eqCOpQqL6MkEfoEn022+mvXBZ0Y/k/Gb6A=
Subject key identifier: D8:17:A1:1B:B7:59:26:A9:DC:AF:B0:3C:9A:2A:E4:ED:00:F2:60:98
Certificate issuer: /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial: 01C7
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/9B6126AEE1D811EF881A2765C4F9AE02.roa
Signing time: Fri 01 May 2026 04:36:32 +0000
ROA not before: Fri 01 May 2026 04:36:32 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 213502
IP address blocks: 43.239.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91348C9, serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Validity
Not Before: May 1 04:36:32 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f42dcf-45b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:d3:28:20:34:24:54:97:46:f0:46:40:c0:
a0:f0:49:6f:4d:4d:39:57:3d:24:87:0d:55:9f:f1:
3d:db:86:bf:06:50:e9:b8:97:e7:f7:41:51:97:31:
f0:b2:74:20:0a:c8:27:db:c1:9a:9f:70:7a:6c:df:
f9:ef:2b:14:9c:07:d0:a0:a4:d7:98:08:41:25:e9:
bf:4a:bf:6b:e9:cc:92:50:47:17:0f:25:c2:63:32:
63:44:a9:da:29:a8:c7:72:de:8b:93:94:6d:ed:5c:
36:b5:81:3f:00:0d:83:06:3d:39:9a:f1:3e:15:e7:
f8:85:a9:5f:46:60:9a:bf:b9:0a:6d:de:d8:3d:d2:
f0:39:d7:2e:f5:53:28:de:c6:3d:b0:00:bb:7a:d7:
08:c1:3e:63:f0:43:cd:f5:99:27:04:41:f8:42:1b:
e9:4d:03:c2:24:52:b7:40:da:0b:97:49:54:45:5d:
17:a4:64:8a:50:54:e2:f2:6c:de:2b:09:36:bd:4d:
14:95:5d:40:0e:b7:3b:a1:84:e8:f0:7b:2a:3e:31:
61:2d:c4:90:19:27:ef:43:c0:46:72:34:24:22:7c:
88:6d:a7:24:86:46:c0:ea:ff:ef:9d:4b:ce:7b:26:
b6:45:98:11:e9:ba:50:5a:9f:62:9b:a2:2e:bc:29:
c9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:17:A1:1B:B7:59:26:A9:DC:AF:B0:3C:9A:2A:E4:ED:00:F2:60:98
X509v3 Authority Key Identifier:
keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/9B6126AEE1D811EF881A2765C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.239.94.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a8:77:f0:b1:ca:1f:73:b1:87:5e:dc:f7:ad:bd:c4:35:69:
c5:10:e2:44:eb:31:f6:69:4d:3e:36:24:08:a7:16:ac:e8:42:
6e:dd:5e:0c:9b:1f:a4:ee:17:84:cd:43:53:85:9b:d9:d6:fd:
9d:5e:38:99:c0:73:60:6c:ec:cb:c6:10:fc:c3:9c:f6:9c:af:
ae:0c:51:c7:b0:e5:25:2b:8d:54:27:c7:37:e5:2a:fb:38:ff:
ac:31:0a:2a:d9:d6:fc:36:de:6f:50:21:84:46:ff:f1:50:0a:
9a:dc:4a:2c:a1:f3:9f:69:a5:df:0c:31:98:b0:d8:bb:3b:24:
c1:c7:0c:cd:32:54:0d:7d:a8:ff:58:60:4b:9c:7d:7f:88:83:
a5:40:5c:0c:76:9c:79:18:c9:18:43:53:99:61:a3:c5:4c:be:
49:49:a7:b4:53:7c:bc:fb:93:ff:53:4d:10:1f:b5:9b:2a:a2:
f4:df:c7:cc:be:33:57:b3:3e:d3:d4:2e:3b:0f:10:04:aa:4c:
4e:d5:69:24:86:da:7b:2f:73:dc:e3:f9:98:90:09:e7:84:89:
9a:6d:7b:ba:8a:23:22:81:28:d9:ef:16:dc:4a:f1:56:db:1f:
bc:ba:fe:30:f2:27:86:63:7f:4b:9c:52:38:ee:14:df:9b:23:
5c:bb:14:14
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQ4QzkxMTAvBgNVBAUTKDBDNzYyQjJDOTAyNEIzNEM5ODg0ODJGMUQ3MUQ3NDlB
RTdEQzRBRUIwHhcNMjYwNTAxMDQzNjMyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY0MmRjZi00NWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwKPTKCA0JFSXRvBGQMCg8ElvTU05Vz0khw1Vn/E924a/BlDpuJfn90FRlzHw
snQgCsgn28Gan3B6bN/57ysUnAfQoKTXmAhBJem/Sr9r6cySUEcXDyXCYzJjRKna
KajHct6Lk5Rt7Vw2tYE/AA2DBj05mvE+Fef4halfRmCav7kKbd7YPdLwOdcu9VMo
3sY9sAC7etcIwT5j8EPN9ZknBEH4QhvpTQPCJFK3QNoLl0lURV0XpGSKUFTi8mze
Kwk2vU0UlV1ADrc7oYTo8HsqPjFhLcSQGSfvQ8BGcjQkInyIbackhkbA6v/vnUvO
eya2RZgR6bpQWp9im6IuvCnJ9wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNgXoRu3
WSap3K+wPJoq5O0A8mCYMB8GA1UdIwQYMBaAFAx2KyyQJLNMmISC8dcddJrn3Err
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhDOS9DRkMxMEUwQUNF
OTcxMUVFOTIzRjA0NzBDNEY5QUUwMi9ESFlyTEpBa3MweVloSUx4MXgxMG11ZmNT
dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RIWXJMSkFrczB5WWhJTHgxeDEwbXVmY1N1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzQ4QzkvQ0ZDMTBFMEFDRTk3MTFFRTkyM0YwNDcwQzRGOUFFMDIvOUI2MTI2QUVF
MUQ4MTFFRjg4MUEyNzY1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAK+9eMA0GCSqGSIb3DQEBCwUAA4IBAQCwqHfwscofc7GHXtz3rb3E
NWnFEOJE6zH2aU0+NiQIpxas6EJu3V4Mmx+k7heEzUNThZvZ1v2dXjiZwHNgbOzL
xhD8w5z2nK+uDFHHsOUlK41UJ8c35Sr7OP+sMQoq2db8Nt5vUCGERv/xUAqa3Eos
ofOfaaXfDDGYsNi7OyTBxwzNMlQNfaj/WGBLnH1/iIOlQFwMdpx5GMkYQ1OZYaPF
TL5JSae0U3y8+5P/U00QH7WbKqL038fMvjNXsz7T1C47DxAEqkxO1Wkkhtp7L3Pc
4/mYkAnnhImabXu6iiMigSjZ7xbcSvFW2x+8uv4w8ieGY39LnFI47hTfmyNcuxQU
-----END CERTIFICATE-----
Generated at Wed May 13 07:33:07 2026 by rpki-client