
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/89E0172A2F2B11EE8CD3F880C4F9AE02.roa
File: 89E0172A2F2B11EE8CD3F880C4F9AE02.roa (raw, json)
Hash identifier: dd8IIaigjdeFVHSi8ZJQL2JFa2im8RBvLxqCRUWskxU=
Subject key identifier: A0:2A:92:59:50:54:76:BC:5E:CF:DC:E9:C6:6F:D3:1A:23:20:B0:95
Certificate issuer: /CN=A9182644/serialNumber=F881D94D7A269AF688483A651D373918E786501E
Certificate serial: 01EE
Authority key identifier: F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/89E0172A2F2B11EE8CD3F880C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:17:17 +0000
ROA not before: Wed 03 Sep 2025 04:22:18 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140870
IP address blocks: 103.125.156.0/24 maxlen: 24
103.125.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl
rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182644, serialNumber=F881D94D7A269AF688483A651D373918E786501E
Validity
Not Before: Sep 3 04:22:18 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4122c-7c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:24:cf:10:cf:ac:05:e2:c8:6d:9e:51:3a:
da:0b:41:7a:11:d6:1e:df:76:1b:08:87:18:7e:34:
df:74:42:49:7a:f5:d5:66:dc:7a:b3:4a:48:78:a7:
9a:3d:32:3e:ea:e9:49:5a:56:e4:23:54:2c:18:bc:
6c:95:08:fd:ea:a8:5c:3b:ae:c2:9b:ca:36:5f:31:
6b:aa:68:13:24:a0:41:3c:b0:a1:eb:10:6b:14:5a:
2c:eb:93:f3:a0:0f:a4:a6:07:43:c6:6b:11:8d:78:
da:86:9f:ae:46:7d:06:c0:92:4f:5e:96:94:6f:28:
d5:70:44:18:0e:7e:be:b5:60:02:a6:7b:d6:34:3d:
b0:17:fe:5d:cf:25:f8:38:c0:2c:fe:af:f6:e9:1e:
85:d1:d8:e3:2d:10:68:3e:4c:08:79:9e:3f:cf:5c:
1b:0f:e6:ca:8f:cc:33:2d:36:4c:f0:8a:e6:e1:b7:
26:4d:78:96:ab:e6:8a:fd:dd:0a:71:36:c1:3f:4f:
a3:e5:4a:68:81:cc:ea:f7:2f:5d:fc:c8:03:02:2e:
a6:53:b1:7e:58:03:56:a7:42:4a:72:3f:3f:2e:02:
61:de:80:52:a6:34:b0:8f:47:d9:09:9f:84:f5:ed:
a5:e6:1a:6d:13:8e:a5:5e:5d:f5:7a:57:b2:dc:39:
99:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2A:92:59:50:54:76:BC:5E:CF:DC:E9:C6:6F:D3:1A:23:20:B0:95
X509v3 Authority Key Identifier:
keyid:F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/89E0172A2F2B11EE8CD3F880C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.125.156.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:8e:e0:1b:51:bb:b3:ff:fc:10:3c:01:6a:3e:03:06:81:62:
8a:d3:dd:9c:86:b7:11:c4:4f:39:4f:cd:da:b4:ed:42:2e:f0:
35:83:9c:fe:d1:86:d3:1a:d0:ee:df:50:78:97:ee:a5:e0:a4:
ac:7b:27:97:a3:06:dd:b9:32:bb:7b:06:12:f8:7d:c5:68:87:
0d:87:9c:31:02:71:c4:44:2d:be:9e:55:6c:cd:f9:b0:63:41:
75:e1:b7:35:89:a4:38:f5:24:fb:80:79:2a:ff:a9:3c:0b:97:
05:09:13:fe:1c:cd:bd:23:84:76:75:4b:9e:8d:fe:85:b5:90:
35:0a:28:f9:65:d7:b8:58:60:00:32:e6:92:46:d6:a3:9a:ff:
f1:78:74:bb:ad:b1:35:fd:d8:38:7b:e6:85:fe:30:8c:0e:6c:
55:73:bc:e9:dd:d9:13:99:10:e6:92:b1:45:db:36:2d:b6:92:
48:ee:78:f4:a6:5a:f1:be:e2:7f:3e:52:bd:57:7c:86:e9:0f:
62:72:d4:51:7e:b0:c0:b2:2a:bd:07:8a:aa:37:28:2e:80:f8:
77:2b:e2:ba:e8:52:19:fe:7d:ad:ee:1e:c3:23:22:c6:8f:0b:
e0:b9:b6:c6:93:f4:5a:98:54:56:75:a7:5c:61:a3:87:e1:b8:
c8:59:02:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:04 2026 by rpki-client