
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa
File: 42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa (raw, json)
Hash identifier: abf25FbH719hRhMiSj4RTqIJD+/I5r3H2hRBfJwMFgQ=
Subject key identifier: 32:29:6C:5A:E5:0B:44:B7:01:8D:75:BF:2A:23:5A:14:BF:8F:D1:48
Certificate issuer: /CN=A9194A58/serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B
Certificate serial: 18D0
Authority key identifier: 40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:43:21 +0000
ROA not before: Fri 10 Oct 2025 17:15:33 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 137023
IP address blocks: 103.102.27.0/24 maxlen: 24
103.130.11.0/24 maxlen: 24
103.131.180.0/24 maxlen: 24
103.131.181.0/24 maxlen: 24
2401:dec0::/32 maxlen: 32
2401:dec0::/33 maxlen: 33
2401:dec0:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl
rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6352 (0x18d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194A58, serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B
Validity
Not Before: Oct 10 17:15:33 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a44278-942d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:af:25:b8:b0:f4:32:1c:f7:a7:20:af:93:89:
5e:14:fb:78:b6:7a:88:99:1c:25:cb:80:fc:fc:60:
6b:de:99:a3:88:06:03:67:31:4b:d4:ae:06:12:e0:
cb:8c:39:c2:cc:ca:62:a5:99:93:cc:2b:fb:aa:eb:
41:f1:41:c9:d6:3c:3d:e1:aa:f6:a4:73:c4:a9:93:
54:b5:f3:06:b3:c8:fa:d7:76:1b:7f:f6:d1:12:1c:
25:5c:19:d3:b8:37:5e:f6:ce:4d:1b:1c:9a:68:d0:
3e:41:8d:0d:b7:68:6d:4d:4b:7e:07:ff:25:00:19:
29:66:83:2c:87:24:57:81:bf:6f:3d:17:67:8b:61:
48:b5:86:70:81:aa:8e:68:d6:1f:70:cd:ed:eb:86:
3a:e0:c7:f1:78:f7:68:ff:5c:8e:4a:20:f9:1c:50:
62:b8:cb:85:47:54:f0:98:c7:81:77:bb:0c:39:f2:
b9:e0:2e:9b:59:1f:0b:c3:d0:04:e3:c4:d6:6b:97:
4e:16:3c:a1:9d:b2:a3:7f:d4:b4:33:0d:6e:74:67:
45:aa:1f:f6:b6:ec:29:27:50:3b:cd:28:70:bd:5e:
44:66:7d:40:71:6f:fe:7b:4a:94:6e:1a:ab:7a:58:
3e:6c:4a:0a:24:b8:bc:b1:cb:d5:2f:c5:6b:d5:2a:
d4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:29:6C:5A:E5:0B:44:B7:01:8D:75:BF:2A:23:5A:14:BF:8F:D1:48
X509v3 Authority Key Identifier:
keyid:40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.102.27.0/24
103.130.11.0/24
103.131.180.0/23
IPv6:
2401:dec0::/32
Signature Algorithm: sha256WithRSAEncryption
8c:28:e8:77:b3:74:a7:ec:ae:c9:15:22:43:2e:30:1a:71:42:
86:28:01:16:80:c6:90:24:fd:cf:6d:17:8c:ed:1e:98:d4:83:
27:c7:66:39:c5:03:2d:30:d9:43:73:9f:8f:31:22:6f:cc:ab:
cb:86:c1:db:94:c3:8d:8f:c1:27:56:74:ba:85:bb:84:16:a6:
88:e9:67:e8:3e:37:b4:86:6b:d5:34:4d:77:98:40:22:c4:1b:
4b:0a:cb:86:56:25:72:8e:3a:f8:59:2b:05:7e:89:81:6e:67:
45:84:f2:e2:ca:62:a8:9c:47:1e:15:91:69:38:9a:57:bc:22:
81:48:a6:04:35:df:65:fd:44:ca:70:08:c0:02:b2:92:40:58:
81:c0:b3:55:b4:6d:c4:c8:44:c9:4b:69:0d:ea:95:f3:dc:da:
2b:37:56:0a:bc:52:d8:ff:cf:82:d7:c1:22:8d:53:01:aa:b2:
51:ae:74:f7:de:a5:3a:ab:79:66:7f:49:2f:bc:0c:ac:f6:c0:
16:a9:eb:90:d2:8a:79:73:82:5e:13:fc:ad:e5:ee:95:4b:fa:
74:93:e2:fb:0c:6b:b5:94:45:c6:b7:24:14:e8:25:48:d7:68:
f9:d8:27:4a:6b:8e:56:87:1d:58:09:4a:2f:e6:7e:48:dc:7a:
e5:8a:70:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:47 2026 by rpki-client