
$ rpki-client -vvf rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/E7126E0AB08111F0B4456572C4F9AE02.roa
File: E7126E0AB08111F0B4456572C4F9AE02.roa (raw, json)
Hash identifier: 0GAesb+JQxtp5ammK5xQgRS65FUnFD4BF2qHgcR+Ggs=
Subject key identifier: 53:56:EC:85:16:A7:E4:C1:16:63:CD:9C:54:4E:5F:E8:51:86:56:08
Certificate issuer: /CN=A912418E/serialNumber=5C52037E02E0237AA4A4786E908C1426EBB9A947
Certificate serial: 45
Authority key identifier: 5C:52:03:7E:02:E0:23:7A:A4:A4:78:6E:90:8C:14:26:EB:B9:A9:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/E7126E0AB08111F0B4456572C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:10:33 +0000
ROA not before: Fri 24 Oct 2025 02:34:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135277
IP address blocks: 103.96.242.0/23 maxlen: 23
103.96.242.0/24 maxlen: 24
103.96.243.0/24 maxlen: 24
103.96.248.0/24 maxlen: 24
103.212.41.0/24 maxlen: 24
2001:df1:4200::/48 maxlen: 48
2401:aca0::/32 maxlen: 32
2401:aca0::/46 maxlen: 46
2401:aca0::/48 maxlen: 48
2401:aca0:1::/48 maxlen: 48
2401:aca0:2::/48 maxlen: 48
2401:aca0:3::/48 maxlen: 48
2401:aca0:4::/46 maxlen: 46
2401:aca0:4::/48 maxlen: 48
2401:aca0:5::/48 maxlen: 48
2401:aca0:6::/48 maxlen: 48
2401:aca0:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.crl
rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:46:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912418E, serialNumber=5C52037E02E0237AA4A4786E908C1426EBB9A947
Validity
Not Before: Oct 24 02:34:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3d859-987f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:a0:23:ef:04:13:bb:4b:99:59:d7:7a:69:
ec:dc:92:d1:55:c9:e3:5e:63:fa:f9:b0:c8:56:9d:
7f:99:97:a4:3e:53:1c:da:55:7a:f6:23:4c:46:77:
a7:7a:4c:fb:ba:79:4d:43:ec:b3:41:1c:ec:d9:65:
71:89:7b:b0:fb:5d:24:c3:a9:bc:0c:98:07:a5:ba:
f7:91:94:f8:d8:dd:28:9c:4a:13:6f:ba:b6:a5:e6:
b9:bc:5a:2e:36:86:21:4c:4c:29:20:4f:dd:cd:5e:
7a:26:9a:62:00:fa:97:3a:dc:49:aa:73:9d:b5:14:
1c:58:f0:3d:65:16:66:c2:05:7e:54:92:44:df:1c:
45:e6:7a:5a:62:4b:a7:61:c0:aa:d6:5e:e7:9b:61:
58:a7:c4:59:ab:87:5c:14:07:f3:81:a4:78:7a:f1:
ed:09:17:5a:0f:b5:8e:89:79:e5:5c:ea:d3:42:2b:
ab:d7:0f:a3:db:63:54:4d:be:a1:35:db:0a:2e:cf:
ef:f2:e5:ed:3c:55:d0:ff:cd:e7:9b:c6:a7:fd:b0:
46:68:17:96:5c:df:7a:89:a5:a5:07:70:79:55:a5:
44:6c:be:d6:04:a7:17:13:8e:6e:ba:ef:9e:02:29:
2f:81:45:c3:25:78:45:c8:9b:d4:32:db:7d:2e:3e:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:56:EC:85:16:A7:E4:C1:16:63:CD:9C:54:4E:5F:E8:51:86:56:08
X509v3 Authority Key Identifier:
keyid:5C:52:03:7E:02:E0:23:7A:A4:A4:78:6E:90:8C:14:26:EB:B9:A9:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/E7126E0AB08111F0B4456572C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.96.242.0/23
103.96.248.0/24
103.212.41.0/24
IPv6:
2001:df1:4200::/48
2401:aca0::/32
Signature Algorithm: sha256WithRSAEncryption
a6:16:af:92:d8:ba:34:8a:a4:76:d1:0b:17:f4:1c:32:e6:bd:
b9:f9:8c:f9:df:e7:6c:5f:ac:ef:99:36:44:ec:8b:e4:94:e5:
f4:eb:07:09:1c:d8:ee:e1:5e:c4:1b:e7:36:e8:56:7f:bc:d0:
26:fe:35:0c:eb:30:e6:74:ac:76:67:a2:7d:5f:3a:d8:00:d3:
79:77:64:33:dc:29:b3:c6:a0:70:f2:e7:df:5d:bc:a5:10:40:
a7:d4:b2:f4:ff:df:9d:b2:0a:e4:ae:9d:cc:8f:17:0d:21:78:
5f:94:57:f4:2d:19:a8:e8:ba:6e:28:8b:91:87:81:25:e2:f2:
db:2f:3d:fd:81:86:10:00:24:03:f0:59:c7:b5:9a:78:80:4b:
fb:e7:71:86:9d:d5:2a:8b:5d:63:2c:0d:dc:b3:e2:0d:65:2e:
2a:69:ca:7a:7c:25:02:19:8c:27:a2:4b:ab:33:d2:72:ae:2f:
18:57:a8:6c:a6:6e:c1:8d:73:23:df:96:d5:ae:c7:7b:17:6c:
1a:12:74:93:df:55:f4:ab:f8:e1:cd:db:7b:85:d5:a0:14:f4:
5f:2e:4e:6b:c6:e6:90:68:0d:8e:a7:e4:2a:d9:00:8f:8b:00:
91:f8:ef:bc:25:d2:af:6e:cf:1d:c7:29:ef:67:7b:bd:dc:7b:
68:e8:c7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:54 2026 by rpki-client