
$ rpki-client -vvf rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/9E042B40426711F1AD7785F0A4833773.roa
File: 9E042B40426711F1AD7785F0A4833773.roa (raw, json)
Hash identifier: DvDS2Q+V1SLNcDatI04IG5vSAcTuYj/rSehqEU7/mWU=
Subject key identifier: 3D:8E:6F:A3:DF:6B:95:73:A2:CF:C9:2D:65:7B:7E:55:04:8F:C0:3B
Certificate issuer: /CN=A914855F/serialNumber=3A906C61E13DB89E61DCCAF1036A32BEDAA87F5F
Certificate serial: 02
Authority key identifier: 3A:90:6C:61:E1:3D:B8:9E:61:DC:CA:F1:03:6A:32:BE:DA:A8:7F:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/9E042B40426711F1AD7785F0A4833773.roa
Signing time: Mon 27 Apr 2026 18:33:42 +0000
ROA not before: Mon 27 Apr 2026 18:33:42 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 141380
IP address blocks: 163.128.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.crl
rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914855F, serialNumber=3A906C61E13DB89E61DCCAF1036A32BEDAA87F5F
Validity
Not Before: Apr 27 18:33:42 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69efac06-d12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3b:12:f7:6c:30:3b:a0:60:68:f8:7f:96:86:
19:ce:05:ed:73:2a:0a:96:79:6e:1d:c3:eb:00:59:
3b:8e:e0:7b:68:34:a5:96:80:5d:cf:97:c3:1f:3c:
7b:99:1d:a6:4d:83:fe:a7:b4:f6:a0:6d:80:f1:71:
b5:bc:15:98:27:96:a9:c4:79:dd:cc:c7:b0:46:f7:
67:22:79:b8:0b:f1:7d:6b:af:31:8c:02:2c:74:f4:
1b:b9:59:67:b3:6a:bc:85:a4:72:01:54:f9:0f:f2:
e6:aa:63:c8:28:d0:b1:ee:c2:ee:13:ac:60:47:ed:
37:0b:cc:a6:62:5d:25:ce:64:d7:e6:34:cf:60:3e:
8c:db:cb:d8:f2:79:f4:81:f8:4e:bb:95:ba:1d:9b:
7c:63:0e:a3:68:26:99:34:26:b1:ff:99:5b:13:5a:
fe:7a:7e:cc:d7:73:9d:c3:7c:a7:e2:42:12:47:d5:
da:0c:4c:b7:df:c1:ba:8b:dc:be:1d:fd:9b:ee:ff:
6d:f1:eb:9d:62:26:54:d2:f5:53:8f:9b:15:28:65:
35:6a:99:51:ef:84:04:ff:dd:d3:7c:6e:5d:2e:b9:
d5:67:2d:46:8f:10:2b:28:9a:23:3d:65:a4:b6:2c:
ed:58:55:03:ae:c0:49:4b:e3:a0:20:71:56:f6:d1:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8E:6F:A3:DF:6B:95:73:A2:CF:C9:2D:65:7B:7E:55:04:8F:C0:3B
X509v3 Authority Key Identifier:
keyid:3A:90:6C:61:E1:3D:B8:9E:61:DC:CA:F1:03:6A:32:BE:DA:A8:7F:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/OpBsYeE9uJ5h3MrxA2oyvtqof18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpBsYeE9uJ5h3MrxA2oyvtqof18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914855F/60D78154426711F1B76157FEA3833773/9E042B40426711F1AD7785F0A4833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.122.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:9f:b1:84:83:68:10:50:44:4f:a2:29:63:ea:5c:43:6c:be:
f9:46:03:2d:4e:f8:b7:8d:c1:f5:d4:68:8b:33:ea:ec:24:d3:
dc:4c:ff:6e:7f:86:69:34:c6:9c:cc:ee:f5:77:93:64:42:e6:
91:d4:bf:5b:a6:a1:0f:91:e1:db:d3:a5:60:79:3f:fe:03:45:
03:f1:57:87:02:7c:02:98:53:ef:85:eb:ae:12:d5:5d:01:3f:
01:c5:df:47:1b:35:01:ad:eb:81:af:44:1c:b7:57:cf:eb:bf:
06:69:7a:33:4d:ec:86:71:62:b7:87:f8:1a:ba:97:16:d6:91:
5f:3c:00:fc:ec:2d:1c:42:3d:1a:96:8e:a3:91:7f:5c:e8:88:
b3:77:7d:48:17:cc:65:63:56:9c:c5:74:17:3d:42:93:03:15:
7d:30:09:bd:12:f2:86:fb:72:70:5a:18:99:cd:e2:e5:74:d5:
7a:d3:2f:57:bb:f6:b1:2d:2b:9c:ce:90:d5:77:0a:8c:de:33:
39:41:14:90:35:2f:19:2f:25:ea:75:f2:9e:c6:b3:e0:b8:99:
55:f8:5d:3a:dd:dd:a8:a6:68:62:ea:14:a7:dc:ba:7c:d1:7d:
7f:24:a2:fa:1f:4c:07:41:61:d8:fa:ab:bd:0e:c6:74:d2:19:
25:fe:e5:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 06:38:16 2026 by rpki-client