
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/42B2A584790C11F0BFDABE73C4F9AE02.roa
File: 42B2A584790C11F0BFDABE73C4F9AE02.roa (raw, json)
Hash identifier: d07BUh1ehjR2H6atZT4gZxx1nTwyrrMun9HGnJk0rnE=
Subject key identifier: 83:0B:5C:E3:88:B4:F2:F5:95:60:B4:AC:01:78:85:14:E6:F0:77:A5
Certificate issuer: /CN=A9161CEF/serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF
Certificate serial: 7B
Authority key identifier: 84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/42B2A584790C11F0BFDABE73C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:04:35 +0000
ROA not before: Wed 18 Feb 2026 19:16:37 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 140071
IP address blocks: 103.148.26.0/23 maxlen: 24
2001:df2:b980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl
rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:24:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161CEF, serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF
Validity
Not Before: Feb 18 19:16:37 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a48dc3-ab0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:10:c3:d1:3f:fe:69:d3:56:3f:12:d0:55:b2:
90:de:b0:82:16:34:aa:b1:61:7e:30:37:61:cd:cd:
9c:db:71:81:a4:2a:57:b4:b5:31:f8:d8:06:08:c2:
ba:b0:ee:1b:a4:73:24:95:3f:cb:0b:6e:32:a5:0a:
c2:d2:00:91:6f:87:89:d6:46:bd:19:87:97:cc:dc:
46:7b:7f:77:f6:59:a4:72:ee:3d:14:58:66:71:cd:
b2:37:00:9d:82:e7:b7:83:94:b7:04:e0:d4:a3:b8:
50:46:1a:a4:5d:6d:12:3c:14:2d:a2:d8:bc:d6:aa:
c7:96:64:93:d6:fe:e5:25:4e:18:ec:09:c3:bf:80:
0f:ee:9e:9c:4a:c0:39:2a:68:b2:73:37:32:15:90:
0c:b4:5d:68:6a:c2:98:a9:ba:32:fd:7e:f8:5d:46:
df:b4:71:93:d5:57:f8:2c:9f:fc:0a:56:0d:7f:79:
c7:96:9e:d6:4e:14:06:12:24:dc:b4:a9:33:25:f4:
d4:d4:1b:a3:cc:61:21:d4:0f:9a:97:c1:b7:a5:3f:
a8:21:07:e9:70:7e:32:58:f7:54:65:4a:e1:0c:bb:
6e:45:a6:0e:a5:94:a5:08:b7:3e:e1:0f:34:b1:39:
30:d9:34:b3:4c:e1:f6:a3:62:3b:c4:9c:eb:80:9c:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0B:5C:E3:88:B4:F2:F5:95:60:B4:AC:01:78:85:14:E6:F0:77:A5
X509v3 Authority Key Identifier:
keyid:84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/42B2A584790C11F0BFDABE73C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.148.26.0/23
IPv6:
2001:df2:b980::/48
Signature Algorithm: sha256WithRSAEncryption
0d:7f:31:36:55:b6:db:30:0d:6e:5a:61:af:e0:2a:93:6d:a3:
af:45:cd:4e:94:9d:62:34:22:ed:e3:a8:71:aa:3e:16:79:96:
84:18:40:5e:a0:c7:7d:be:d9:cf:61:08:c6:dc:be:56:ef:d7:
34:a9:e3:d6:e0:14:fc:c8:46:7e:8f:d7:83:60:ee:49:7d:a1:
ac:66:d8:0a:6f:27:3a:b4:ca:a9:46:90:93:dd:9f:bb:6e:88:
c2:41:29:ff:db:09:82:15:ec:0c:02:24:46:b7:f0:d0:a3:cf:
71:cc:f1:f4:71:2e:06:83:55:ef:3b:74:5a:15:96:6e:a1:22:
04:5f:0d:f1:97:d2:36:5b:6d:50:02:57:68:b5:f2:42:9f:98:
69:27:f1:a6:35:cb:12:6b:ee:1e:a7:40:ff:4e:5a:fb:e7:6f:
d2:a8:91:b4:99:3f:99:cf:74:3d:a1:7e:b9:eb:6b:1b:b7:04:
d6:25:8f:0b:0b:56:ff:ba:e4:63:02:f7:57:3b:9b:19:d5:d4:
78:a9:a2:31:b9:ba:3a:ff:1e:6a:c6:e7:ca:ce:88:c5:24:7a:
cf:26:55:d6:00:a4:a0:39:37:b2:b8:a0:bb:db:63:f1:32:a7:
8b:1c:8f:60:26:ac:fc:cc:ed:20:96:ec:44:5b:55:c7:69:6c:
69:e6:07:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:53 2026 by rpki-client