
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/28741DDC85CD11ECA5E28171C4F9AE02.roa
File: 28741DDC85CD11ECA5E28171C4F9AE02.roa (raw, json)
Hash identifier: aMf5ZQEPQtwObqmvJT5ItKQeDQ+Q+Lo8Gpi2rkRE0lI=
Subject key identifier: 76:39:E1:F5:FA:5F:88:10:AD:FB:35:3F:D5:05:2E:0B:A4:F8:11:49
Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Certificate serial: 04AF
Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/28741DDC85CD11ECA5E28171C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:21:04 +0000
ROA not before: Sat 31 Jan 2026 00:20:22 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 140607
IP address blocks: 103.177.240.0/24 maxlen: 24
103.177.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1199 (0x4af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C28, serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Validity
Not Before: Jan 31 00:20:22 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a44b50-7b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:0a:87:ad:31:a3:a1:0c:f6:da:6d:24:cc:
8e:71:d5:79:f1:d7:0f:cd:39:32:f3:d7:6c:f3:93:
5e:96:4f:51:9e:be:a0:15:23:f0:19:7e:dc:b4:e2:
58:9f:96:2f:5b:fd:f6:1b:74:01:04:b7:6e:e0:4a:
a8:21:25:9b:c1:d5:dc:36:28:e4:38:82:11:db:c7:
cc:1e:81:34:02:59:9f:b8:f6:cf:a2:b4:2c:93:6e:
96:e7:29:1f:7c:fa:6a:d8:55:bc:f5:05:a3:be:b9:
7e:4d:56:ee:f7:84:84:a3:64:18:93:1a:66:56:30:
d0:cf:83:85:af:b0:4d:7f:5d:82:0d:ff:21:93:7b:
c4:6a:12:be:69:f9:2b:c4:88:c9:fc:7c:28:33:95:
12:f5:75:1f:1e:50:9e:92:c1:26:5f:ce:df:96:14:
88:16:ef:91:f9:0a:75:6c:7a:14:94:a2:2b:00:4e:
83:4c:00:06:be:6e:50:4a:3a:9a:f9:d1:2b:98:8f:
e4:2a:95:90:30:79:38:70:3f:f4:9d:fe:10:36:36:
dc:2f:c4:ec:49:95:89:35:1d:32:28:db:f2:ab:d0:
fc:0d:9e:ab:ea:0b:09:d7:9e:4a:6c:4b:88:46:86:
24:d6:f7:48:f9:d1:46:fb:80:2e:29:2b:67:d0:00:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:39:E1:F5:FA:5F:88:10:AD:FB:35:3F:D5:05:2E:0B:A4:F8:11:49
X509v3 Authority Key Identifier:
keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/28741DDC85CD11ECA5E28171C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.177.240.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:d7:d5:86:0e:70:7b:b0:21:15:4a:f0:17:70:8e:fb:e1:9a:
47:4e:53:78:63:79:14:24:d9:73:fb:f3:9f:69:8b:e4:2b:24:
46:67:72:4b:ca:91:77:1f:26:ec:a5:ac:db:c5:92:fe:4f:0c:
26:73:06:c2:90:80:f5:ca:67:2c:ee:48:80:7b:9d:62:f2:f7:
2a:df:c2:ec:ff:51:13:2c:ba:3b:bb:ac:4e:48:95:2e:c8:19:
26:7a:75:fa:65:c7:a2:07:c6:dd:54:a1:60:86:e7:80:db:f7:
0c:d3:fb:d2:90:e0:de:66:2d:67:fd:0f:d3:d4:1f:a1:6c:df:
f7:28:50:3b:d6:ae:c1:80:6b:97:48:f6:2c:8a:2a:04:c4:ac:
2e:18:d1:76:ed:25:85:2a:f7:1b:06:e5:5e:20:6c:e0:34:49:
49:1e:20:45:45:79:a9:9c:c3:ed:ee:04:24:8c:b2:fe:63:1a:
16:1b:9d:a7:12:4f:88:6f:92:d9:1e:82:f4:2b:8b:6d:8d:94:
08:ac:ff:18:a9:f2:44:23:78:3f:39:43:5e:3a:3f:44:ef:9b:
ed:e0:ce:9e:82:b6:e7:b0:fb:57:8a:d9:00:c2:af:7c:80:d9:
1f:e8:63:79:b1:1e:bf:cd:af:07:93:f1:92:e4:5d:17:91:bb:
75:54:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:49 2026 by rpki-client