
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/1042D952157F11F0BA309342C4F9AE02.roa
File: 1042D952157F11F0BA309342C4F9AE02.roa (raw, json)
Hash identifier: V3mSD2PmxvztBCh6XpV5mCgqBcH3iqbAbCPx3PCcyPo=
Subject key identifier: D5:DD:37:5E:15:BB:0E:91:9E:5C:D8:09:AC:99:00:3C:0C:2C:45:07
Certificate issuer: /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial: 0250
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/1042D952157F11F0BA309342C4F9AE02.roa
Signing time: Wed 09 Sep 2026 02:53:32 +0000
ROA not before: Wed 09 Sep 2026 02:53:32 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 134222
IP address blocks: 103.255.66.0/24 maxlen: 24
103.255.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:17:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Validity
Not Before: Sep 9 02:53:32 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa0ca2c-f40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:35:dd:40:34:36:ac:a3:c7:92:73:7f:57:23:
e3:cf:2e:fd:3b:8f:94:bc:28:bd:19:31:b1:fb:9e:
e1:43:bb:49:5f:7f:9b:10:da:20:eb:9d:17:0c:5a:
ab:1d:bf:80:90:bb:71:2e:e2:5f:22:d5:40:63:fd:
fa:3c:21:a5:f4:dd:15:d6:97:0a:34:18:13:36:05:
e8:cf:7c:d7:3c:f0:ae:30:89:72:9a:95:7f:d4:3f:
19:d2:a5:49:78:bc:b8:85:bf:13:c9:f5:2c:3a:ea:
81:7f:10:fa:ef:3b:98:34:87:30:fe:c5:d7:fb:4f:
21:6f:32:6d:1a:15:35:eb:6f:77:3d:3a:e9:0f:de:
91:0d:02:07:ce:aa:f1:e8:88:de:37:4f:77:9e:5e:
dd:62:40:1f:d8:2d:22:81:df:fc:0b:bf:69:7b:cc:
c4:f5:96:e3:df:e0:af:d2:99:e3:d8:19:89:5c:74:
59:d9:e6:47:3d:83:f1:43:be:67:0f:61:a1:30:ae:
51:e4:d6:6e:f6:da:59:8a:6f:3f:00:3f:66:3b:e0:
da:eb:d6:07:02:10:7c:e8:b1:0b:31:3a:81:4b:39:
73:ae:7a:fe:6c:8f:ca:eb:a8:0b:11:01:82:ce:26:
5e:82:98:e8:6a:62:8c:fe:72:a3:7d:4a:f0:e0:5f:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DD:37:5E:15:BB:0E:91:9E:5C:D8:09:AC:99:00:3C:0C:2C:45:07
X509v3 Authority Key Identifier:
keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/1042D952157F11F0BA309342C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.255.66.0/23
Signature Algorithm: sha256WithRSAEncryption
09:30:90:fd:6a:0b:06:50:2b:ba:e6:d3:af:fe:54:51:5d:de:
5c:68:33:c6:22:8d:40:9d:1c:56:9e:20:ac:10:63:ad:bf:78:
7f:8c:3d:ba:fd:2d:fe:a3:8d:4e:be:da:27:36:88:05:a7:07:
31:2e:7d:2d:f5:ab:06:51:c7:99:ae:97:03:9f:f4:e4:75:04:
04:52:74:f8:9c:65:d3:bc:7d:c9:24:70:f0:1d:0b:ec:f7:a8:
5f:b3:15:2a:b1:78:c7:43:3d:8d:56:14:04:08:68:ff:c1:03:
3c:f3:0d:f8:48:86:ca:36:fc:cb:e3:c1:49:f4:d0:75:00:fa:
cc:0a:a5:83:66:e8:d6:77:46:b8:ff:4e:e4:c2:61:4a:10:2d:
ca:ac:38:f6:92:70:69:09:a7:64:e9:1e:bc:98:fe:7e:21:c0:
98:45:0e:7e:ad:a5:cd:1b:ea:21:a5:1d:ee:79:74:66:9c:fb:
58:e8:77:c8:03:79:32:17:4f:f8:81:bb:5f:01:54:7a:90:b1:
d5:df:b0:e6:f7:cb:69:f2:c7:64:62:20:d9:4a:80:81:05:ce:
8a:6d:a2:06:3c:c3:7e:64:ec:6c:eb:39:85:e2:b9:f5:92:fb:
58:32:3d:4b:e3:53:67:f5:01:21:c5:e4:71:20:58:cf:a3:a7:
85:7b:f0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:34:02 2026 by rpki-client