
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/E0CFA54EFE4D11EF8274971BC4F9AE02.roa
File: E0CFA54EFE4D11EF8274971BC4F9AE02.roa (raw, json)
Hash identifier: IQs2mgIIn1eSW55HIZcwfqfurLI2M7cs6R03kQuYr9A=
Subject key identifier: A0:3D:4F:0E:34:E7:68:F4:45:DD:20:8F:AE:68:4A:84:40:BA:99:D5
Certificate issuer: /CN=A9197ADE/serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741
Certificate serial: DB
Authority key identifier: D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/E0CFA54EFE4D11EF8274971BC4F9AE02.roa
Signing time: Wed 29 Apr 2026 07:41:46 +0000
ROA not before: Wed 29 Apr 2026 07:41:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38494
IP address blocks: 123.176.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl
rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197ADE, serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741
Validity
Not Before: Apr 29 07:41:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f1b63a-d765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:35:0c:e8:04:9c:0b:87:62:e2:46:d5:06:
fe:54:a7:a1:09:01:5b:8d:6f:d9:71:f7:a6:27:ea:
2e:e0:5a:3f:ef:64:6d:21:be:ff:a8:dc:b2:31:8a:
e4:fe:29:a3:7f:88:50:5f:29:f5:f0:d2:3d:31:fe:
ca:75:a7:35:2e:d5:28:29:d5:a4:f6:e6:ae:9a:17:
6b:67:ee:ab:95:34:56:2d:28:7a:b8:73:87:c6:c6:
38:ec:42:3b:ec:60:29:d1:aa:a4:09:3f:eb:c0:93:
12:fa:a6:ae:37:7b:8c:32:88:f4:1e:1f:40:d5:87:
a4:ca:ab:17:04:fe:01:f2:5b:26:c7:b1:bd:7d:c0:
af:97:f1:bf:c0:b7:ff:a7:5b:47:7d:fc:70:80:5e:
b5:01:c6:13:0d:45:81:33:26:a9:db:74:47:58:d0:
f8:41:c1:74:3b:6c:a3:11:bc:6d:f2:bd:36:28:25:
ae:88:2f:c9:dc:a4:84:06:10:34:c5:83:e8:c2:a5:
4f:41:bd:fb:ef:5e:60:95:7f:28:6e:20:44:53:9b:
94:82:12:f2:42:a0:9f:41:96:b7:52:8e:7b:8d:9a:
fd:e7:8d:54:c7:1a:4e:00:0d:5d:83:5b:76:a5:f0:
99:d7:58:d1:bf:4f:d4:c5:72:7d:41:e5:51:58:d2:
52:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3D:4F:0E:34:E7:68:F4:45:DD:20:8F:AE:68:4A:84:40:BA:99:D5
X509v3 Authority Key Identifier:
keyid:D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/E0CFA54EFE4D11EF8274971BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
123.176.120.0/24
Signature Algorithm: sha256WithRSAEncryption
39:91:2d:11:22:10:69:3b:a4:22:2a:ac:c1:f8:86:d2:c4:bc:
da:ae:73:3f:13:fc:1a:ce:a3:fa:60:ff:03:05:d7:00:7b:ae:
00:2a:dc:bd:27:ec:9b:63:68:f2:4d:c7:82:14:11:d5:78:cf:
ee:a4:73:02:30:79:32:9e:10:a3:94:c7:33:2a:f2:ce:a1:6f:
1f:c5:df:d4:f1:5a:0a:eb:b3:96:45:08:6a:3f:3a:ef:ba:e8:
b4:9c:ec:14:30:fc:13:6a:b8:f8:fe:7f:cf:9a:15:00:a5:bb:
58:8f:a6:db:aa:29:d9:38:54:6c:ea:e4:57:92:72:97:b3:79:
e3:9f:1e:4d:9d:f6:16:e7:93:3e:db:ca:08:f4:40:82:af:30:
ea:cf:84:e3:a6:ad:b8:be:0a:02:a7:a1:13:f7:29:44:84:05:
31:c7:c7:8c:0d:c0:cd:13:9a:03:e6:d7:b6:87:33:27:48:2e:
43:54:e8:34:a4:12:c9:36:ff:11:78:64:ee:8b:71:28:4e:56:
85:16:19:82:c8:fd:8b:1c:2b:91:fc:1b:a2:c6:9f:e3:3a:6b:
15:d5:da:98:18:63:fc:de:dc:b3:88:8a:43:37:29:da:67:1c:
03:6d:0d:df:ff:b1:7d:64:aa:f9:56:13:e3:75:26:d0:f1:d2:
06:a2:d8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:03:22 2026 by rpki-client