
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/D9A7B280C4FA11EEA3AF2932C4F9AE02.roa
File: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (raw, json)
Hash identifier: gyHSwtQl6vEkaJUZPDO/MMRfEGWi04eS/Wu0admRoDM=
Subject key identifier: 56:32:F4:9F:38:A3:D5:C9:2D:3F:A0:A2:3C:BF:42:F6:C4:55:4A:34
Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Certificate serial: 0504
Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/D9A7B280C4FA11EEA3AF2932C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:08:24 +0000
ROA not before: Fri 12 Dec 2025 23:19:50 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 132366
IP address blocks: 103.159.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:22:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1284 (0x504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E
Validity
Not Before: Dec 12 23:19:50 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46478-0eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:71:b9:75:34:00:84:a1:ef:93:50:6e:f5:
5b:3c:32:78:b3:a0:b8:89:81:8f:58:2e:b3:2b:07:
b4:ba:53:9c:40:45:ec:40:eb:b8:f0:57:83:f5:e4:
82:b0:f2:c6:7d:84:b5:44:2d:c7:26:3a:a7:35:46:
fb:f0:2b:0b:92:2f:ac:89:43:9c:f0:96:f2:29:d8:
b0:20:fc:79:a5:58:95:53:01:69:67:b7:3e:bb:2a:
a6:ba:52:2f:70:19:92:8e:28:48:1f:8f:5e:58:43:
7f:1e:a2:5d:12:c1:25:f7:f0:c4:e2:22:8f:41:3c:
6b:d5:b6:89:bf:bb:65:43:e5:f1:b4:79:3e:77:9b:
35:e9:a1:17:df:1c:b2:5c:7d:cf:d2:f2:16:06:86:
f3:9b:0d:c2:73:68:eb:a5:6b:99:e4:40:38:67:ce:
2e:7e:b4:54:05:f8:f4:a9:fe:51:d3:31:7c:01:5c:
c3:70:0d:17:60:17:f3:ee:dd:eb:11:90:b0:79:64:
6e:74:1f:c3:d2:f1:9e:33:5d:9b:6b:78:ef:9c:1a:
74:50:90:90:99:10:fb:f3:54:14:ca:c4:ef:de:08:
c8:a7:76:09:b1:1b:86:7f:31:35:dc:7a:2d:87:5f:
9f:88:34:47:ed:8e:79:4d:7a:87:1e:f5:66:4f:33:
69:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:32:F4:9F:38:A3:D5:C9:2D:3F:A0:A2:3C:BF:42:F6:C4:55:4A:34
X509v3 Authority Key Identifier:
keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/D9A7B280C4FA11EEA3AF2932C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.159.127.0/24
Signature Algorithm: sha256WithRSAEncryption
11:eb:30:02:73:4b:6b:16:34:48:e2:3a:57:20:b4:bd:fd:bf:
4c:59:02:12:6c:09:ca:aa:51:26:bb:09:16:fd:b8:b8:b1:c7:
87:1f:ae:89:72:4c:47:e2:e7:53:12:30:50:3d:bd:68:05:85:
14:0c:65:bb:8d:d8:6b:51:e2:d5:83:93:0c:25:6d:eb:40:f8:
e8:83:fc:10:c0:c7:66:05:d4:0f:78:68:94:e9:ee:dc:ff:41:
3b:37:cf:d4:ad:b2:11:28:a4:a0:87:c8:e7:02:83:fd:33:73:
78:67:e9:68:9f:3b:7e:8c:2a:c2:18:36:48:16:20:e4:29:73:
7e:b3:fd:20:90:3f:d8:bc:ac:52:86:46:e3:8e:7a:ec:39:d4:
1a:18:03:25:2d:60:0e:46:11:f7:05:78:ec:8d:2d:2f:fb:d6:
e1:19:49:3d:67:73:42:51:c3:d9:fa:ea:c3:9c:ca:53:a7:a2:
bf:cb:77:87:70:b5:9f:30:96:f1:64:30:53:49:9d:d6:64:71:
e0:8e:12:8e:19:ab:1d:2d:24:f3:35:9b:af:ac:05:aa:17:16:
78:29:ff:8c:1c:e8:10:3e:bf:1d:bb:f5:94:a5:a7:93:96:d7:
89:6f:57:55:d4:28:d1:53:fb:aa:8d:23:84:1d:b9:d1:53:fa:
88:bb:2e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:53:06 2026 by rpki-client