
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/5042B970E25B11EA9E988045C4F9AE02.roa
File: 5042B970E25B11EA9E988045C4F9AE02.roa (raw, json)
Hash identifier: tRcSxQhINR6HjVxDrQplrAKNWyDOOwNBxWfhbN/Sg5E=
Subject key identifier: 02:4A:18:5E:66:B9:BF:26:17:3A:10:CC:C2:AB:6D:15:4A:60:DE:4D
Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
Certificate serial: 08CF
Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/5042B970E25B11EA9E988045C4F9AE02.roa
Signing time: Mon 08 Jun 2026 10:59:45 +0000
ROA not before: Mon 08 Jun 2026 10:59:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137532
IP address blocks: 103.112.64.0/23 maxlen: 23
103.112.64.0/24 maxlen: 24
103.112.65.0/24 maxlen: 24
2405:e6c0::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl
rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2255 (0x8cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
Validity
Not Before: Jun 8 10:59:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a26a0a1-7772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bd:47:1b:64:62:0c:20:d8:b1:e4:13:a7:53:
22:6f:b0:40:db:e9:9c:a4:1a:52:d7:21:4c:c5:f9:
51:54:07:a3:b2:58:2e:97:d6:97:cb:a5:9f:01:1e:
2c:a5:9b:3f:ef:fd:d1:2d:f6:97:d3:e6:db:95:74:
ea:ed:ed:c1:7a:88:91:f2:f0:ae:e6:18:ad:02:0f:
c1:45:61:9c:6c:72:38:f9:49:75:69:de:bf:a5:07:
a6:fc:b9:17:bb:55:b6:44:2c:7c:c3:4d:11:52:ed:
5d:95:6c:5b:ad:4b:0f:59:b9:c9:15:ba:5f:9a:7d:
91:c7:bf:51:a2:7f:52:9a:63:80:b6:21:a1:2e:de:
ad:51:8f:11:24:f5:c6:02:74:cc:58:41:99:e1:7b:
85:ce:5e:de:9f:30:7e:d8:1d:0e:98:84:6b:50:8e:
d9:7e:a3:f1:c6:22:4c:cb:3f:08:ef:f6:90:70:9b:
e6:ca:ac:cf:fc:69:59:e4:9b:da:b2:a0:6b:11:ab:
93:6c:45:30:f7:de:e3:5a:9d:58:e1:e1:24:ec:a6:
09:88:e4:97:5c:87:4a:e7:4f:01:0f:ae:b0:40:2b:
a3:e3:9e:8f:25:cd:b2:5a:7e:3c:03:e1:e7:40:48:
1c:7c:09:4e:6a:ac:74:f5:f4:2c:2b:7a:fa:5c:a9:
6d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4A:18:5E:66:B9:BF:26:17:3A:10:CC:C2:AB:6D:15:4A:60:DE:4D
X509v3 Authority Key Identifier:
keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/5042B970E25B11EA9E988045C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.112.64.0/23
IPv6:
2405:e6c0::/32
Signature Algorithm: sha256WithRSAEncryption
29:7a:c4:f2:c1:32:08:f9:78:f6:a9:28:4b:da:c3:8f:a8:72:
5e:be:b4:b7:3e:cd:17:02:ec:23:5b:c1:91:44:ef:e4:90:86:
5b:96:8e:f2:29:6f:a2:f2:b4:7f:50:a2:c1:b5:7a:1d:25:d3:
c6:3e:cd:c9:3d:ed:e5:44:f0:c7:57:54:43:cf:40:19:07:d0:
fb:5e:5f:9f:3f:b9:df:a8:70:4c:82:15:5a:fe:ad:7d:ae:2c:
e3:9b:e6:2d:fc:a0:20:eb:26:24:f6:45:6c:bd:7b:2f:28:45:
34:2a:4c:27:c0:57:68:67:92:0c:47:c1:25:4d:b6:96:d7:95:
16:99:e2:2c:59:57:99:51:73:82:77:64:0d:ee:3f:eb:76:66:
76:87:77:8a:b1:94:a3:5a:a8:4f:92:4d:57:c7:3a:e5:30:56:
9c:ab:7f:f7:f8:35:fa:74:9c:3f:c7:2c:80:ee:1a:02:a0:0e:
13:5a:e1:d1:10:2e:d3:c3:e3:0b:59:72:cf:e7:b6:10:57:fd:
24:42:70:26:b2:59:68:8d:64:4f:37:4a:f5:47:1c:43:e8:39:
f1:dc:43:34:7a:fc:cc:b4:ca:65:55:aa:81:6c:7c:c2:28:fe:
1f:57:dc:a8:d1:a9:0a:5c:50:d6:37:9e:67:8a:ec:97:8b:f3:
df:28:43:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:20:18 2026 by rpki-client