
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/94EA7370050111EA9BDD372BC4F9AE02.roa
File: 94EA7370050111EA9BDD372BC4F9AE02.roa (raw, json)
Hash identifier: mMRUREtvZnIxIVtQ29KyF/I8MzGp8zE5JILwSK9RsUg=
Subject key identifier: A9:72:78:F5:01:94:20:B6:90:93:C5:7D:A1:A4:F2:91:2A:A1:47:66
Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Certificate serial: 0D47
Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/94EA7370050111EA9BDD372BC4F9AE02.roa
Signing time: Tue 22 Sep 2026 18:37:20 +0000
ROA not before: Tue 22 Sep 2026 18:37:20 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 7474
IP address blocks: 103.77.128.0/24 maxlen: 24
202.129.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3399 (0xd47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Validity
Not Before: Sep 22 18:37:20 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ab2cadf-e96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:4c:34:63:43:ca:c1:5b:a5:86:ce:1d:e5:
8a:a1:6f:f9:ee:d3:aa:1e:41:e9:70:da:95:38:9d:
eb:80:31:ad:68:d7:d1:3e:42:6f:83:da:84:e2:47:
7c:0e:a2:f8:06:20:da:0f:54:57:6e:cf:2c:d7:b4:
f5:9c:24:d1:bb:8b:8c:c9:db:4b:86:e3:3a:9e:12:
3c:98:46:7e:a2:f7:bb:4d:b5:ff:fd:e6:8f:e8:d5:
c9:b5:05:45:7c:dc:fc:03:27:dc:c3:31:91:c1:e2:
2a:87:f4:85:56:52:f1:22:6d:aa:4f:36:c7:57:d0:
8b:20:d2:14:45:42:37:f1:c5:bc:5b:94:7e:b3:29:
b5:11:99:8e:6a:fe:88:b9:5b:ff:a0:9d:22:97:75:
a0:8c:e6:c6:03:e8:cb:41:07:bb:23:da:1b:26:eb:
21:3a:2e:31:5b:80:ca:84:54:db:aa:28:7d:21:ac:
1d:26:ac:86:40:6d:9f:8f:86:74:9c:08:7b:15:7e:
33:99:f8:e8:6a:fc:cb:7e:f6:78:ae:22:55:82:39:
aa:64:2b:c9:bc:c2:f0:1b:7b:b6:e8:4d:1b:e6:94:
57:8a:d9:5e:09:c4:5e:d4:73:5b:15:df:68:bf:9f:
b0:ba:be:6a:4a:60:b5:3b:65:93:6b:32:61:ec:c0:
9f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:72:78:F5:01:94:20:B6:90:93:C5:7D:A1:A4:F2:91:2A:A1:47:66
X509v3 Authority Key Identifier:
keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/94EA7370050111EA9BDD372BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.77.128.0/24
202.129.218.0/24
Signature Algorithm: sha256WithRSAEncryption
13:91:d8:e7:92:47:33:36:c4:36:93:7b:a3:04:7a:92:c9:d1:
6d:d6:7c:da:1a:4e:73:1a:b7:6b:ac:a6:b3:de:bd:56:78:5c:
c6:66:a2:b3:cd:6b:85:99:ab:e3:c5:b9:c3:ad:7d:ad:6d:50:
7c:d2:24:f9:76:72:13:a0:37:0c:9b:65:2d:0d:be:6c:62:f7:
7b:24:51:38:d2:58:28:42:47:b8:66:b8:dd:b9:c6:93:5a:9d:
ec:4e:92:39:a9:22:15:a9:5c:ee:86:51:10:0f:00:3c:ab:32:
ee:de:be:52:7b:04:56:e8:5b:f3:a9:1e:24:c6:07:88:c4:cd:
5b:e8:97:2b:74:1e:54:f1:a2:04:4b:5d:e9:4b:09:0f:90:c5:
65:e8:fe:56:cc:06:ac:b7:50:a6:87:8e:c9:ec:ab:cf:31:81:
23:52:e7:98:e4:c6:21:f0:77:75:f4:4f:97:40:14:c6:ad:27:
8e:1d:0f:26:8b:fc:89:71:71:a2:65:f7:f8:4a:cc:c9:28:a1:
b9:77:83:f1:9f:0b:b0:c7:af:c5:4e:8e:4f:d1:1a:0f:d8:e2:
d2:85:69:81:f3:fd:f3:94:a7:10:07:a0:6d:6b:0c:68:1f:98:
4c:df:f2:03:54:25:b1:86:81:91:8d:5f:5d:63:9c:78:c3:21:
26:a4:c4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:28:36 2026 by rpki-client