
$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/0EF0E842839E11EEA1892A12C4F9AE02.roa
File: 0EF0E842839E11EEA1892A12C4F9AE02.roa (raw, json)
Hash identifier: 2fkGW1bkGlUA5bGgALjxvNXrPUAl1hO1HVzydoUaRto=
Subject key identifier: F6:16:0D:65:03:A5:C3:9D:C9:E7:4B:B2:E9:F5:51:EB:3F:82:2F:22
Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
Certificate serial: 0D86
Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/0EF0E842839E11EEA1892A12C4F9AE02.roa
Signing time: Thu 16 Apr 2026 18:22:37 +0000
ROA not before: Thu 16 Apr 2026 18:22:37 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 135341
IP address blocks: 103.134.126.0/24 maxlen: 24
103.134.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl
rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3462 (0xd86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91642A0, serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
Validity
Not Before: Apr 16 18:22:37 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69e128ed-a18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:d2:72:31:46:db:4b:7f:42:33:52:b7:b5:
4b:b6:b5:b0:fa:66:0f:ae:60:a3:a7:01:74:80:5e:
ef:82:ac:53:d2:d9:11:b2:bd:17:93:e3:a5:4d:ae:
4c:78:ef:74:8d:74:9d:67:1b:63:b4:1d:16:a5:ae:
a9:14:9b:83:5a:e1:08:cc:a9:04:8b:d4:a3:b4:29:
37:0c:f5:ee:a5:04:e7:bc:dc:ad:33:83:7c:21:d4:
1f:b7:61:34:50:fa:50:ea:4a:dd:06:4f:f1:22:b7:
fc:82:50:d3:59:8e:6b:33:ad:1b:21:e0:11:32:1c:
cc:b9:44:ee:ca:0c:73:7a:b4:3f:57:37:83:2d:f5:
5b:04:03:a2:57:59:ab:9e:22:7e:d8:c9:5e:55:0d:
76:fb:0b:f3:1e:b7:f8:0f:25:7a:f1:bc:37:81:1f:
8c:c5:ca:cb:b7:7c:69:ed:c4:20:d2:a1:2f:0f:36:
3e:56:7c:c3:8d:73:ab:6e:43:72:02:90:80:ff:c1:
63:e1:08:7f:d1:17:b9:0a:4a:32:17:1b:93:83:04:
77:e7:78:c8:7d:f9:ea:90:2a:ae:c7:e5:90:db:93:
36:a8:9c:7a:f5:50:98:76:bb:fa:18:98:d8:71:09:
b6:98:67:02:bc:9d:c3:57:e6:cc:88:38:fc:d7:48:
44:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:16:0D:65:03:A5:C3:9D:C9:E7:4B:B2:E9:F5:51:EB:3F:82:2F:22
X509v3 Authority Key Identifier:
keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/0EF0E842839E11EEA1892A12C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.134.126.0/23
Signature Algorithm: sha256WithRSAEncryption
24:b4:c2:29:3e:00:53:61:7e:96:75:e7:64:ad:f4:a6:7b:d4:
45:e1:58:5b:8f:8c:0d:1e:c6:3b:cc:6f:74:d9:ca:a9:4b:38:
fa:1b:87:ab:51:72:b9:4d:bd:60:26:5b:84:77:df:45:08:a7:
cc:64:e5:73:e9:e8:07:df:06:f5:59:66:dc:b0:10:0b:a4:02:
d1:f5:47:96:1a:cd:b0:b4:f8:35:de:9e:2c:ae:cd:3e:94:62:
2c:a6:de:0c:3d:52:98:7a:99:f4:2e:69:be:e7:9b:19:4c:ca:
6b:2a:21:16:6c:89:4a:58:c7:71:b2:6f:7a:ac:fb:d8:7c:ea:
cc:92:ce:cc:7c:58:5b:f7:01:27:a1:ff:84:0d:93:cd:f5:c4:
f8:52:a4:8f:b2:21:67:05:bd:17:07:26:60:6b:57:53:07:88:
47:58:8f:28:0c:ac:cf:78:ce:5f:0b:8c:fe:41:fd:35:e7:3f:
3e:e4:24:11:e2:38:84:65:11:6e:cb:4e:a9:97:94:30:73:4e:
3e:e6:26:8c:96:4a:c3:26:50:54:30:19:89:6f:db:97:64:5c:
c3:02:fd:ce:4b:91:78:2b:8a:c1:a8:7a:57:a7:e3:0d:7e:c3:
c2:85:8a:59:8b:4a:6e:fb:78:cf:fa:e4:c1:9a:0b:9d:f3:71:
ea:6f:d9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:38 2026 by rpki-client