
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa
File: 42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa (raw, json)
Hash identifier: eXgRHsIVRc9u6kHMAWlAPva+g61Bb19zupw4KQEne+U=
Subject key identifier: 8C:F6:56:71:CE:7B:3E:85:84:8B:75:6F:B3:23:13:EC:98:2D:CE:48
Certificate issuer: /CN=A9194A58/serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B
Certificate serial: 193B
Authority key identifier: 40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa
Signing time: Fri 18 Sep 2026 16:30:12 +0000
ROA not before: Fri 18 Sep 2026 16:30:12 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 137023
IP address blocks: 103.102.27.0/24 maxlen: 24
103.130.11.0/24 maxlen: 24
103.131.180.0/24 maxlen: 24
103.131.181.0/24 maxlen: 24
2401:dec0::/32 maxlen: 32
2401:dec0::/33 maxlen: 33
2401:dec0:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl
rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 16:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6459 (0x193b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194A58, serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B
Validity
Not Before: Sep 18 16:30:12 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aad6714-331d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:3e:94:81:46:ae:ad:b3:da:d1:0a:81:c2:
8c:12:5f:14:b9:34:59:42:c1:dd:c5:2a:c3:89:65:
7f:f5:a2:be:fb:8f:b7:f0:ee:53:1c:a3:00:96:f3:
6f:13:e6:0c:ac:07:9b:2b:28:c2:dd:14:d1:a4:f1:
ab:76:5e:ea:70:94:07:5f:2c:43:79:0a:c3:f5:78:
74:e1:4d:92:e5:55:86:a5:ce:e2:39:d1:9b:02:31:
54:e2:18:42:3b:08:0e:e1:e5:1c:c4:3c:c0:b0:db:
a7:01:d9:a5:03:bb:42:81:21:ff:10:40:9f:b3:ea:
64:4f:74:b3:c0:3f:45:cc:aa:65:59:be:b0:80:65:
e1:c9:a2:94:e3:a5:c6:10:15:ee:82:32:c0:b0:98:
d0:a0:d0:7b:41:6f:e0:cf:89:18:f8:de:43:5a:d2:
e5:80:f8:ac:75:00:d9:1f:0f:3b:3c:2b:50:3c:2a:
66:e8:f3:14:17:db:54:cf:28:6f:6e:33:3d:31:6b:
53:c5:f8:59:10:08:38:6f:c8:aa:ac:67:5b:8c:3c:
c0:1e:9f:1c:b7:54:79:50:80:85:79:17:2b:25:91:
01:cf:7c:02:4e:17:a6:3d:18:ed:b9:f7:0c:a5:a2:
70:72:71:88:bd:c5:c1:a5:66:b3:cc:a9:c6:ee:9d:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F6:56:71:CE:7B:3E:85:84:8B:75:6F:B3:23:13:EC:98:2D:CE:48
X509v3 Authority Key Identifier:
keyid:40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.102.27.0/24
103.130.11.0/24
103.131.180.0/23
IPv6:
2401:dec0::/32
Signature Algorithm: sha256WithRSAEncryption
40:57:eb:19:ab:a2:df:b4:a7:f5:1b:02:c5:51:04:2e:40:10:
c0:2b:cf:47:9f:42:a0:30:cb:6b:2b:52:d0:e3:a6:a5:d2:8c:
f8:e7:20:21:33:a3:a3:63:b0:32:54:17:5b:c7:0a:29:4b:c6:
f2:39:c3:91:4b:55:00:f6:6b:00:0c:1e:e0:4c:96:6d:d1:14:
48:b2:f8:5f:11:53:45:b2:95:3a:3d:29:38:af:d5:1f:68:8e:
1b:5d:8a:73:f3:13:d8:60:91:26:91:bc:87:1b:9f:9a:e2:e9:
7e:64:5d:87:91:56:f7:e0:9c:52:3e:7e:38:59:5f:ff:42:4a:
f6:9a:b3:49:cd:00:c3:f9:fe:d3:4c:c4:ce:f1:03:e6:26:9e:
83:c3:93:8d:b2:b1:c5:c7:8d:f6:52:72:44:6e:c5:69:28:54:
e0:dc:73:c9:f3:41:e9:2f:33:5a:88:d8:ac:c0:24:bd:f0:85:
1a:f9:02:b1:a4:a5:3c:2e:22:12:3d:78:e7:7a:00:51:6e:c5:
6c:53:10:9e:32:1a:95:2c:b0:69:b4:90:e9:fb:93:ca:33:56:
cb:d5:79:82:c4:60:e0:4f:9f:34:94:fc:0e:af:f6:27:e4:91:
80:68:9c:40:72:92:b8:74:99:27:83:39:79:ca:87:ae:e0:06:
b2:4a:dc:f3
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgICGTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRBNTgxMTAvBgNVBAUTKDQwQkQyNUEyRDYwMzE4NzNFNTVERkNEREFEM0E0OEY3
QkNGODhDOEIwHhcNMjYwOTE4MTYzMDEyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWFkNjcxNC0zMzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtHw+lIFGrq2z2tEKgcKMEl8UuTRZQsHdxSrDiWV/9aK++4+38O5THKMAlvNv
E+YMrAebKyjC3RTRpPGrdl7qcJQHXyxDeQrD9Xh04U2S5VWGpc7iOdGbAjFU4hhC
OwgO4eUcxDzAsNunAdmlA7tCgSH/EECfs+pkT3SzwD9FzKplWb6wgGXhyaKU46XG
EBXugjLAsJjQoNB7QW/gz4kY+N5DWtLlgPisdQDZHw87PCtQPCpm6PMUF9tUzyhv
bjM9MWtTxfhZEAg4b8iqrGdbjDzAHp8ct1R5UICFeRcrJZEBz3wCThemPRjtufcM
paJwcnGIvcXBpWazzKnG7p1E6wIDAQABo4ICezCCAncwHQYDVR0OBBYEFIz2VnHO
ez6FhIt1b7MjE+yYLc5IMB8GA1UdIwQYMBaAFEC9JaLWAxhz5V383a06SPe8+IyL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE1OC80RUFDRTQ5MEFF
NDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdIUGxYZnpkclRwSTk3ejRq
SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FMMGxvdFlER0hQbFhmemRyVHBJOTd6NGpJcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTRBNTgvNEVBQ0U0OTBBRTQzMTFFNzg4MUM2NDE2QzRGOUFFMDIvNDJEMEU5QTRB
RkQ5MTFFN0I4QTdFOTZDQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY
BAIAATASAwQAZ2YbAwQAZ4ILAwQBZ4O0MA0EAgACMAcDBQAkAd7AMA0GCSqGSIb3
DQEBCwUAA4IBAQBAV+sZq6LftKf1GwLFUQQuQBDAK89Hn0KgMMtrK1LQ46al0oz4
5yAhM6OjY7AyVBdbxwopS8byOcORS1UA9msADB7gTJZt0RRIsvhfEVNFspU6PSk4
r9UfaI4bXYpz8xPYYJEmkbyHG5+a4ul+ZF2HkVb34JxSPn44WV//Qkr2mrNJzQDD
+f7TTMTO8QPmJp6Dw5ONsrHFx432UnJEbsVpKFTg3HPJ80HpLzNaiNiswCS98IUa
+QKxpKU8LiISPXjnegBRbsVsUxCeMhqVLLBptJDp+5PKM1bL1XmCxGDgT580lPwO
r/Yn5JGAaJxAcpK4dJkngzl5yoeu4AayStzz
-----END CERTIFICATE-----
Generated at Sat Oct 3 15:15:03 2026 by rpki-client