
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/19E19DA0E5CE11EDB697BC74C4F9AE02.roa
File: 19E19DA0E5CE11EDB697BC74C4F9AE02.roa (raw, json)
Hash identifier: 41mYeLJTrr6m5wB9HGw37UApRa2JZ2ZaJVCcumD/aT0=
Subject key identifier: 5A:0A:02:C3:7B:87:23:8C:E3:D2:10:B1:DD:EA:D9:0D:3A:B2:94:62
Certificate issuer: /CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4
Certificate serial: 0251
Authority key identifier: C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/19E19DA0E5CE11EDB697BC74C4F9AE02.roa
Signing time: Sat 11 Apr 2026 02:34:46 +0000
ROA not before: Sat 11 Apr 2026 02:34:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141778
IP address blocks: 103.121.178.0/24 maxlen: 24
103.121.179.0/24 maxlen: 24
2001:df2:2ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl
rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:15:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D1D5, serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4
Validity
Not Before: Apr 11 02:34:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69d9b346-4d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:2c:6c:8e:bf:fd:05:ee:ae:dc:77:3d:78:
2c:77:e8:b8:6a:34:7d:35:20:a2:0e:38:91:a9:00:
19:1a:c8:30:b0:f8:36:58:f6:be:34:49:ae:a6:22:
ea:c0:8b:18:84:61:20:36:9f:7b:6f:8b:1c:af:6d:
92:22:26:4f:08:ea:d5:3e:1a:0b:34:af:3a:1d:9a:
cc:12:3d:b2:68:81:19:31:07:d0:aa:a1:df:69:ee:
fa:12:1e:ce:4c:dd:8c:ad:13:82:22:97:7b:93:c7:
b6:8b:11:01:52:98:0a:1c:25:c4:3a:d4:99:97:1a:
39:96:86:41:08:4b:94:63:77:e0:62:80:74:e0:7d:
64:f8:86:44:7f:8f:a4:13:86:7a:2c:92:fe:e8:d6:
a3:fb:02:d0:47:24:fc:02:4d:41:0a:5b:77:75:94:
78:17:a7:bd:9a:d8:71:96:2f:a0:8b:ba:3b:5d:70:
c3:82:b3:13:4d:cc:16:74:92:16:c9:76:73:cf:60:
2d:82:a0:ec:91:c9:14:32:41:69:8a:b6:bc:3e:ea:
00:ed:33:f0:99:7f:7b:bf:63:bc:6e:8a:7a:d7:92:
0f:04:71:e8:17:42:cf:11:7b:2d:41:f4:ad:42:85:
e7:da:8c:54:95:e8:f5:7f:7d:aa:04:d8:80:10:a2:
bb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0A:02:C3:7B:87:23:8C:E3:D2:10:B1:DD:EA:D9:0D:3A:B2:94:62
X509v3 Authority Key Identifier:
keyid:C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/19E19DA0E5CE11EDB697BC74C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.121.178.0/23
IPv6:
2001:df2:2ec0::/48
Signature Algorithm: sha256WithRSAEncryption
ac:44:ef:1c:cc:65:04:89:32:c0:43:1f:da:aa:8d:ea:9e:71:
76:2c:4e:95:a4:13:51:90:7f:7b:10:69:ff:1c:f1:12:12:7f:
ff:d6:1f:40:8b:38:00:5d:ca:0d:2e:01:8a:0f:87:19:ee:52:
dc:b7:1a:e0:da:d1:25:5a:a4:6c:54:d6:8e:84:74:a4:35:ed:
18:e5:89:b0:b8:31:0d:e1:88:ba:c1:a7:a8:14:8f:83:b0:60:
82:8e:14:ae:e4:21:16:fc:66:bf:47:30:df:82:8b:c4:b5:00:
08:c9:83:0d:20:f1:25:cb:9e:bc:7b:7d:64:9f:0b:29:db:8a:
6a:f2:14:98:2e:4f:99:b7:30:b7:eb:9d:b9:51:ed:0f:f4:d6:
b1:03:38:54:a0:6c:54:80:c1:f1:c9:f7:27:f4:d5:1b:ea:82:
0a:6c:30:cd:cf:9b:a3:d4:da:7b:80:9a:61:8f:50:00:d4:ce:
ca:53:8f:29:b6:55:76:55:d6:93:af:73:62:fe:2f:15:e7:46:
81:45:41:46:ef:ed:ce:41:81:7b:da:08:89:74:54:29:1e:35:
81:42:c1:57:65:bc:7b:d5:c5:43:1d:e1:91:e6:a8:1f:cf:ad:
61:51:e7:98:de:58:89:cc:d5:b7:f6:9a:0e:fe:f8:20:a7:ab:
c0:f7:be:9c
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQxRDUxMTAvBgNVBAUTKEM1NDUyNUU5NzA1QkQ2OUQ2MTQyNERCRUU3QjA0OTNG
NUZENkYwQTQwHhcNMjYwNDExMDIzNDQ2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ5YjM0Ni00ZDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ZcsbI6//QXurtx3PXgsd+i4ajR9NSCiDjiRqQAZGsgwsPg2WPa+NEmupiLq
wIsYhGEgNp97b4scr22SIiZPCOrVPhoLNK86HZrMEj2yaIEZMQfQqqHfae76Eh7O
TN2MrROCIpd7k8e2ixEBUpgKHCXEOtSZlxo5loZBCEuUY3fgYoB04H1k+IZEf4+k
E4Z6LJL+6Naj+wLQRyT8Ak1BClt3dZR4F6e9mthxli+gi7o7XXDDgrMTTcwWdJIW
yXZzz2AtgqDskckUMkFpira8PuoA7TPwmX97v2O8bop615IPBHHoF0LPEXstQfSt
QoXn2oxUlej1f32qBNiAEKK7ZwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFoKAsN7
hyOM49IQsd3q2Q06spRiMB8GA1UdIwQYMBaAFMVFJelwW9adYUJNvuewST9f1vCk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFENS8zNDMzNjFFRUND
OEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFwMWhRazItNTdCSlAxX1c4
S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hVVWw2WEJiMXAxaFFrMi01N0JKUDFfVzhLUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkQxRDUvMzQzMzYxRUVDQzhDMTFFREE0QzFBMTQzQzRGOUFFMDIvMTlFMTlEQTBF
NUNFMTFFREI2OTdCQzc0QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ3myMA8EAgACMAkDBwAgAQ3yLsAwDQYJKoZIhvcNAQELBQADggEB
AKxE7xzMZQSJMsBDH9qqjeqecXYsTpWkE1GQf3sQaf8c8RISf//WH0CLOABdyg0u
AYoPhxnuUty3GuDa0SVapGxU1o6EdKQ17RjlibC4MQ3hiLrBp6gUj4OwYIKOFK7k
IRb8Zr9HMN+Ci8S1AAjJgw0g8SXLnrx7fWSfCynbimryFJguT5m3MLfrnblR7Q/0
1rEDOFSgbFSAwfHJ9yf01RvqggpsMM3Pm6PU2nuAmmGPUADUzspTjym2VXZV1pOv
c2L+LxXnRoFFQUbv7c5BgXvaCIl0VCkeNYFCwVdlvHvVxUMd4ZHmqB/PrWFR55je
WInM1bf2mg7++CCnq8D3vpw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:57:20 2026 by rpki-client