
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/BDA4E3289A8311EF8E25CE76C4F9AE02.roa
File: BDA4E3289A8311EF8E25CE76C4F9AE02.roa (raw, json)
Hash identifier: H18KD2kOZSxjm/b3p7HYt+YDpe2JlZmhqopujxMGKR0=
Subject key identifier: 44:75:C7:3F:63:E5:0D:98:A3:0B:10:76:8A:60:07:49:11:ED:A1:67
Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial: 296B
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/BDA4E3289A8311EF8E25CE76C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:25:09 +0000
ROA not before: Tue 02 Sep 2025 16:03:42 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 132212
IP address blocks: 125.5.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10603 (0x296b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Validity
Not Before: Sep 2 16:03:42 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a49295-9515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:16:b2:f1:08:b7:50:e2:cf:86:24:6e:05:
7d:ee:ce:27:ca:e5:05:1c:19:32:ec:b0:b8:fa:08:
92:d6:9f:d3:c6:3f:ac:b6:67:4d:3e:37:ad:a3:d8:
07:2e:98:71:f1:c4:e1:1d:4b:9e:0e:1b:f8:18:62:
f4:c2:33:94:03:dc:e8:01:90:6d:72:0d:c6:df:0f:
5e:2d:09:f8:81:e6:bd:77:c5:7b:83:d2:9e:83:90:
43:04:fc:86:50:10:c8:cd:22:a2:f1:31:e7:d1:b6:
99:b8:83:61:7f:6f:d5:6b:1c:9f:7c:3f:90:e9:d2:
d5:78:7f:8d:8d:ce:db:d3:9a:86:01:a4:4b:74:82:
8c:6e:48:be:87:02:75:a1:2b:cb:52:f6:18:cf:1c:
03:47:41:48:38:2e:62:34:9d:0f:3c:4f:18:71:e3:
24:76:ff:eb:ef:e1:91:eb:eb:b1:50:85:dc:89:f6:
87:17:45:c5:d4:c0:7a:6d:7d:69:2a:c3:67:a9:db:
5d:43:1a:20:c0:88:e8:59:1c:7b:b2:a9:38:3b:e3:
6e:4d:6e:6e:b3:f2:a6:bf:78:83:c6:bd:11:83:aa:
b9:0e:6a:79:08:f3:de:5f:b0:b9:6f:74:56:5f:d6:
2c:8c:b0:7f:d7:ed:31:52:8e:0e:67:07:c4:c2:d3:
ee:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:75:C7:3F:63:E5:0D:98:A3:0B:10:76:8A:60:07:49:11:ED:A1:67
X509v3 Authority Key Identifier:
keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/BDA4E3289A8311EF8E25CE76C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
125.5.236.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:37:89:76:cf:60:83:40:66:6f:5d:2c:4d:ab:19:f5:0e:8c:
ae:6d:b5:99:b6:a0:a6:08:a5:8e:ee:df:0e:04:41:37:da:91:
71:c4:d1:a7:52:48:fb:01:e1:b9:a3:65:86:ce:16:26:ae:6a:
2b:44:f7:3d:7b:92:ac:6f:d2:8d:38:a2:bb:95:e3:ea:90:b6:
c9:82:83:30:1b:55:fb:a6:8a:af:0e:91:44:35:db:94:db:a2:
65:db:1b:2d:42:50:b4:73:fd:8d:97:7b:e8:cd:3e:6a:fe:28:
40:77:ea:c8:37:9c:a2:3a:ca:98:e5:d7:5e:c4:e9:fd:a0:fb:
ee:28:2a:26:26:eb:12:08:a4:6b:d1:36:46:49:36:73:29:24:
83:a7:dc:84:f1:6c:4e:f4:5e:26:7a:51:c6:97:fe:86:80:35:
38:42:30:ae:0e:da:79:ef:29:2a:94:3f:06:ba:37:bd:55:60:
50:e3:01:7b:d2:f0:47:06:1a:75:fb:78:1d:0c:f3:62:c0:5c:
bd:07:1d:66:11:a1:59:6e:64:bc:f8:cc:1c:c0:bf:7c:8b:cd:
c5:7e:04:4c:75:e4:eb:63:99:34:34:32:60:55:9d:7e:7a:74:
cd:d8:23:14:7a:c0:97:8a:5d:67:5c:33:ad:04:26:70:71:bc:
5a:40:2a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:36 2026 by rpki-client