
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/42CD71AEE33511EC9EDB371BC4F9AE02.roa
File: 42CD71AEE33511EC9EDB371BC4F9AE02.roa (raw, json)
Hash identifier: akLFFGOMj+dAHfljUl6hKPCtbjq9Zn0f4/FQ8M9sWBI=
Subject key identifier: FF:EB:A8:ED:9D:53:85:CB:EC:CD:45:74:33:C8:7C:03:CB:92:9E:58
Certificate issuer: /CN=A9188D0C/serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4
Certificate serial: 0378
Authority key identifier: 5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/42CD71AEE33511EC9EDB371BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:00:19 +0000
ROA not before: Fri 01 Aug 2025 02:38:20 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 56264
IP address blocks: 103.189.6.0/24 maxlen: 24
103.189.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl
rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888 (0x378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188D0C, serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4
Validity
Not Before: Aug 1 02:38:20 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a40023-aeb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:b2:be:12:96:8f:81:88:ec:92:1e:8e:b4:
9f:5c:45:52:95:16:78:d4:be:8c:f4:fb:32:41:54:
18:e1:3e:96:74:5b:70:de:3b:72:af:4b:56:a7:94:
8e:09:15:b9:39:94:3b:65:e3:f5:3d:da:9f:1a:f6:
b6:de:37:24:c5:25:e7:56:8e:88:4b:a2:e7:ae:12:
a7:98:82:73:eb:f7:03:80:71:4b:d4:ea:05:21:b9:
b3:0a:e7:f4:2a:f3:79:42:0b:04:c7:b8:8f:6b:19:
20:f8:c5:9f:4a:53:38:ee:32:df:82:ad:48:27:a4:
21:90:f6:c9:86:9a:da:3a:8a:fd:89:08:b0:be:ab:
43:e2:76:99:3c:d5:f5:b1:2a:e6:35:9e:88:ce:59:
7b:d1:85:28:b2:e9:0f:ee:72:c4:d0:d0:f7:62:75:
3f:39:de:64:41:4a:b3:cf:ee:8a:63:32:75:10:1a:
56:8d:a8:f5:93:36:4f:5d:01:8c:ac:a7:0f:a8:b0:
ae:cf:2d:d0:52:28:39:b0:da:53:29:c4:18:96:ea:
0c:a0:eb:e0:5a:d9:fe:1b:6b:a0:bc:1f:07:69:8d:
2b:78:b0:12:3f:f0:1f:dc:b9:1f:4c:26:cf:09:93:
cd:00:5e:64:ab:73:7a:9b:fb:60:d8:fd:b4:82:c5:
6d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EB:A8:ED:9D:53:85:CB:EC:CD:45:74:33:C8:7C:03:CB:92:9E:58
X509v3 Authority Key Identifier:
keyid:5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/42CD71AEE33511EC9EDB371BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.189.6.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:b7:39:9e:ab:8a:55:70:9a:3b:02:24:99:2b:3d:27:3f:6f:
26:c2:c8:42:e9:d8:2b:08:e9:0a:b7:fd:23:8c:c0:7c:2d:e1:
ae:18:33:34:1f:35:40:c4:07:8d:d2:e4:92:f0:b6:de:e6:9c:
21:24:08:1e:fb:43:3f:42:d6:44:bc:0f:c6:0d:ec:16:c1:4d:
7f:02:8c:42:45:95:d1:a9:94:71:9c:df:6d:61:c1:3a:71:4e:
02:f8:27:51:7f:dd:3a:67:83:eb:9a:fc:6b:c0:b1:1f:64:c0:
af:09:39:91:d9:51:9a:6c:9a:48:7b:3b:39:2d:82:44:1d:a6:
98:d7:33:2e:54:c6:63:8e:a0:b4:33:29:06:28:aa:06:63:3a:
23:77:84:b9:7a:d4:09:62:88:3f:c6:dc:e4:2e:22:7e:03:69:
cc:ff:74:0d:de:36:01:3b:96:53:f1:a4:e9:14:20:22:af:36:
65:f3:7e:90:24:a6:63:12:78:9a:88:12:2d:37:8e:0b:a7:15:
a8:f5:12:85:0a:2d:ee:2a:c6:f1:c1:0a:d2:e6:f0:f3:39:c2:
23:36:11:02:8d:14:2b:fb:24:60:19:36:e7:7e:28:9b:33:cd:
a0:f7:d8:43:01:6b:68:6c:54:0a:65:9f:c0:2e:56:9f:e9:34:
61:1a:16:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:05 2026 by rpki-client