
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/5042B970E25B11EA9E988045C4F9AE02.roa
File: 5042B970E25B11EA9E988045C4F9AE02.roa (raw, json)
Hash identifier: yGyRKh06TFma60wn7/oVG0CZ1hXIDiNrfwQrrBtGYeE=
Subject key identifier: 4D:88:87:11:D9:AA:1A:4B:30:A6:F1:21:EF:C8:63:BD:56:E3:17:42
Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
Certificate serial: 0897
Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/5042B970E25B11EA9E988045C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:58:20 +0000
ROA not before: Fri 30 May 2025 20:06:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137532
IP address blocks: 103.112.64.0/24 maxlen: 24
103.112.65.0/24 maxlen: 24
2405:e6c0::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl
rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2199 (0x897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
Validity
Not Before: May 30 20:06:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48c4c-06d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:6b:84:f4:44:d7:a9:6d:05:1d:fb:f9:02:
c9:75:c4:4f:cb:26:7c:60:3e:ca:cb:3a:ca:a0:15:
c1:54:35:05:93:87:dd:e1:e4:d6:11:b1:b1:8a:11:
9f:d6:50:23:7a:99:34:33:b4:15:7d:23:cb:ee:b5:
3b:60:f8:be:39:04:35:2e:01:99:66:73:16:29:a2:
bc:50:eb:7d:60:65:07:18:99:ac:8b:69:e0:8d:2d:
a5:58:a6:7f:91:cf:5e:b3:38:7d:4c:21:eb:b2:76:
27:29:a7:66:94:7d:e3:07:ad:b5:38:a8:3f:d9:c3:
66:9e:db:d4:fa:02:94:04:f6:f7:3b:f3:00:ce:de:
f5:d5:17:1f:07:2f:21:50:f9:9b:2f:63:26:82:6e:
18:17:45:1a:54:ae:f1:3d:c4:68:15:70:16:ce:61:
1f:5a:d4:2a:81:2f:7a:07:8a:1f:37:9d:5c:a1:17:
0c:56:88:c3:93:6d:f9:00:08:79:c4:54:95:a1:a7:
08:e4:db:d0:c9:fa:49:e7:db:df:72:1d:41:66:20:
64:1e:14:2e:05:b2:eb:50:31:f5:20:f1:a6:82:04:
7a:59:a8:c7:26:01:2c:1a:d0:5b:0c:ff:69:4a:83:
0d:80:45:cb:29:5b:e2:45:df:e1:fc:36:14:9e:96:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:88:87:11:D9:AA:1A:4B:30:A6:F1:21:EF:C8:63:BD:56:E3:17:42
X509v3 Authority Key Identifier:
keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/5042B970E25B11EA9E988045C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.112.64.0/23
IPv6:
2405:e6c0::/32
Signature Algorithm: sha256WithRSAEncryption
03:5e:ec:9b:5f:bf:18:68:74:68:fd:e2:9a:e0:96:8d:d9:ee:
26:40:da:3f:bb:96:5a:d5:4f:d3:32:a3:00:a1:86:af:50:7a:
b1:1e:1d:3a:8d:43:42:1d:ad:97:fe:47:a5:82:ff:75:47:10:
e2:54:a7:84:65:42:12:36:2a:fc:b1:d8:e9:25:87:15:25:4c:
5a:db:25:e6:f0:7d:2c:2e:0e:39:4d:b1:d1:6a:2d:8d:fc:75:
1d:45:7b:54:5b:18:39:13:1e:ef:a6:3a:62:5d:c9:1e:4c:f4:
20:25:1d:68:96:ac:15:2e:0a:df:26:c1:da:30:eb:35:a1:28:
c2:f7:97:c9:ab:b1:d2:03:39:c0:4f:c8:12:52:92:c0:bc:1f:
b7:c2:27:c7:bd:de:f4:6a:46:bb:a7:38:86:81:34:61:2f:12:
92:43:c2:2c:be:c8:2b:2b:b8:b3:a3:46:b9:65:be:2a:a0:36:
39:2f:c6:f9:e4:01:80:ca:c2:55:7e:f8:74:bb:ef:85:19:e5:
4a:70:9b:e3:21:d9:9d:e7:4e:21:20:58:2d:40:7d:18:03:01:
e1:e8:ac:2f:0a:3d:44:32:23:e0:34:cf:04:52:0e:7c:72:0d:
98:fd:8d:3c:31:57:99:ae:51:15:2c:7f:4c:fe:22:f0:f1:70:
51:11:43:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:23:51 2026 by rpki-client