
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/1523921276EF11EDB8F27034C4F9AE02.roa
File: 1523921276EF11EDB8F27034C4F9AE02.roa (raw, json)
Hash identifier: 8qJZlbai0qCF6BnpaN3fDjskYcVGNM1xXEuO4Wf6FW4=
Subject key identifier: 49:A6:C2:F3:54:8A:C4:6F:A7:2C:86:1D:C6:3B:76:B7:A6:4D:50:2B
Certificate issuer: /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Certificate serial: 03FA
Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/1523921276EF11EDB8F27034C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:03:20 +0000
ROA not before: Tue 03 Jun 2025 01:54:54 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 59239
IP address blocks: 103.186.56.0/24 maxlen: 24
103.186.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1018 (0x3fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129F42, serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Validity
Not Before: Jun 3 01:54:54 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a40ee8-e99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:c3:3c:b1:1a:fa:6e:37:32:ac:61:35:40:
01:9d:57:72:50:8a:19:8e:ce:ed:85:98:23:c1:bb:
26:85:e4:fd:5c:68:35:6d:a1:c2:4e:1b:d7:b3:67:
d6:98:87:fd:8a:f3:5b:6a:95:68:5c:99:f9:d0:cc:
71:cf:43:1f:66:3e:71:21:58:22:ab:6a:aa:4f:41:
a5:c0:d6:cc:78:a6:cd:bd:34:7d:11:75:4c:a0:8a:
97:d4:e0:81:43:b4:fd:76:e9:fd:26:9f:cd:b0:1c:
fc:be:d2:79:6c:fe:df:2c:67:2a:b4:b5:a4:53:ae:
7e:23:7c:4f:e8:83:a6:c0:cf:92:04:b7:06:3b:f0:
7b:57:e2:07:e9:09:3f:95:a1:3b:0a:cf:e8:6b:d1:
8a:98:7e:92:36:da:53:c0:e6:91:b7:98:ca:fc:8e:
94:c1:3a:54:14:a6:5a:a9:e6:fe:71:04:83:17:8b:
36:55:11:db:9d:e2:92:24:7d:44:20:df:65:f4:d9:
63:3c:0c:a5:f6:0b:5c:80:23:35:53:ef:0b:cf:62:
35:c2:1d:43:7c:8a:2b:73:0f:30:f5:5d:1a:88:c2:
c8:d6:f5:fa:c4:e2:8b:7a:cf:84:e5:d4:74:c8:e6:
0d:33:40:16:b7:6d:5e:89:7d:1a:11:39:28:19:4b:
21:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A6:C2:F3:54:8A:C4:6F:A7:2C:86:1D:C6:3B:76:B7:A6:4D:50:2B
X509v3 Authority Key Identifier:
keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/1523921276EF11EDB8F27034C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.56.0/23
Signature Algorithm: sha256WithRSAEncryption
58:c3:ea:d2:c9:cf:56:5b:03:e5:9f:b0:39:fa:7d:fe:54:50:
4c:77:b6:18:36:a1:d7:8b:3c:4f:72:01:a4:ea:1e:ff:7e:dc:
7c:71:f7:e3:2c:da:80:2b:0e:33:90:b7:e2:68:54:78:c0:bb:
ca:41:93:9c:d9:9a:c2:52:dc:55:d9:d6:34:8a:b4:24:b7:0c:
5c:5d:e8:b4:58:1d:c9:44:28:19:fe:ff:9f:34:b3:97:73:42:
29:af:28:ce:2f:27:bd:d9:84:87:9e:87:37:43:f5:a6:cf:e0:
9c:63:d8:52:94:c7:3b:3f:70:c4:47:e8:1e:34:72:2b:b2:48:
e7:72:12:2e:91:30:a7:b0:b8:53:ea:f4:11:ac:52:3b:83:d6:
9d:04:f1:f2:2b:97:87:29:80:54:e6:21:0d:28:eb:c0:f4:b8:
c8:af:e6:a1:3b:30:f3:0b:aa:ff:07:14:e4:d2:47:02:1f:27:
41:0f:5e:68:95:d5:04:02:d0:6b:40:3b:fc:ae:73:9a:46:67:
6b:de:fc:97:23:bc:a6:bf:85:26:f9:ed:c1:ea:ea:47:02:49:
fd:b0:3e:89:0c:dd:2c:85:b3:af:22:bb:09:61:ff:df:69:f9:
89:3c:b9:3a:4d:51:93:06:1b:27:0e:a0:93:53:a3:e7:32:aa:
de:17:39:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:55 2026 by rpki-client