
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/422287F0D30511EE8753D541C4F9AE02.roa
File: 422287F0D30511EE8753D541C4F9AE02.roa (raw, json)
Hash identifier: xLUhGdv8VQ8dWZLRVLoGLuRNGoVySRUxi1n5EveBEKY=
Subject key identifier: 92:43:E5:0A:28:AF:3D:CE:81:2F:70:8F:13:80:05:5E:98:65:0F:02
Certificate issuer: /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Certificate serial: 03F8
Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/422287F0D30511EE8753D541C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:03:18 +0000
ROA not before: Tue 03 Jun 2025 01:54:52 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 150748
IP address blocks: 103.186.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1016 (0x3f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129F42, serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Validity
Not Before: Jun 3 01:54:52 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a40ee6-f0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:1e:b8:cc:4d:3f:1c:7e:ee:42:8a:f1:fe:
49:cd:c7:e4:83:ff:7c:15:d8:9e:2d:56:94:25:8c:
f9:f1:9c:71:02:d3:e1:5a:75:c4:35:72:62:96:77:
af:d0:8e:87:b5:2d:8d:7c:f9:72:09:55:75:22:27:
9b:a1:a3:0d:96:a4:43:82:31:16:43:36:3f:cd:ea:
ee:dc:0b:28:da:39:b0:08:34:ec:9b:22:ff:a2:17:
7a:47:26:b1:67:e3:c8:62:5a:cf:19:e3:03:1f:e1:
78:b6:fa:75:8a:ca:31:65:f9:ea:bc:2f:ea:3c:66:
24:08:2c:81:ef:b9:94:df:62:9c:dc:65:22:1c:e0:
be:08:86:38:60:a3:a1:c8:81:a5:3f:ca:c0:b8:8c:
17:a8:41:38:68:23:5d:82:6e:d2:4a:a6:fb:d6:98:
fd:4f:29:f2:d1:27:95:be:51:e1:48:24:79:27:bf:
c0:3e:77:8e:5c:21:61:c9:25:56:ac:89:ff:ca:47:
84:c1:a0:3c:68:eb:e5:7d:49:bd:22:cd:f8:59:43:
99:ce:d1:27:1f:e1:6a:82:b8:ff:91:83:92:38:95:
8d:46:5f:0e:78:28:26:4f:26:07:c7:1b:84:e8:f4:
ae:af:45:cf:62:cb:d0:67:b3:f9:c8:a4:d5:39:74:
ef:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:43:E5:0A:28:AF:3D:CE:81:2F:70:8F:13:80:05:5E:98:65:0F:02
X509v3 Authority Key Identifier:
keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/422287F0D30511EE8753D541C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.57.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:67:1c:09:39:1c:bf:a4:bf:e6:4a:84:43:31:79:e3:8e:4b:
a8:bd:be:f5:14:3a:10:a7:ef:84:38:24:5a:8f:f7:5e:84:e8:
6f:49:aa:dc:28:3f:a0:2b:ec:67:84:7e:b0:ae:f6:c8:4b:bd:
05:a2:8a:65:41:b6:c9:b4:2b:b7:98:0d:5b:8d:a7:3b:6e:ed:
51:c6:d3:da:07:c2:bf:1a:1c:b5:2d:88:6f:ba:f8:87:db:7c:
2b:b8:d4:c0:6f:21:a4:a4:26:04:02:77:f9:46:ec:06:84:ba:
17:62:41:a5:96:a8:5a:4b:73:11:70:58:b1:5b:08:4b:13:49:
88:3e:d7:25:99:bd:d3:05:a8:83:f4:c3:40:dd:2d:e9:67:aa:
5d:d1:ab:95:ea:80:bc:55:64:3b:e5:59:46:ce:03:8f:a1:25:
c5:53:50:31:1b:52:c6:02:50:b1:98:b8:36:ea:69:33:25:5e:
53:84:df:18:c9:6e:a3:20:3a:4d:6c:f5:d9:18:92:f1:72:35:
42:51:cd:80:b5:ba:bc:49:37:8e:88:b9:1c:5a:01:2d:2f:ec:
01:36:df:29:2f:4c:02:a6:e9:56:8e:f0:58:8e:a7:a5:c9:b3:
a2:87:7f:5f:f7:b5:e5:01:f5:92:fc:dc:91:4f:bd:c0:40:34:
55:c1:64:37
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICA/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjlGNDIxMTAvBgNVBAUTKERCQUZGQzBDMDAyRDQzREM0NzM0NkJDNEUxOUZFQjNF
QkYzQkI0RDUwHhcNMjUwNjAzMDE1NDUyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGVlNi1mMGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwZoeuMxNPxx+7kKK8f5Jzcfkg/98FdieLVaUJYz58ZxxAtPhWnXENXJilnev
0I6HtS2NfPlyCVV1IieboaMNlqRDgjEWQzY/zeru3Aso2jmwCDTsmyL/ohd6Ryax
Z+PIYlrPGeMDH+F4tvp1isoxZfnqvC/qPGYkCCyB77mU32Kc3GUiHOC+CIY4YKOh
yIGlP8rAuIwXqEE4aCNdgm7SSqb71pj9Tyny0SeVvlHhSCR5J7/APneOXCFhySVW
rIn/ykeEwaA8aOvlfUm9Is34WUOZztEnH+Fqgrj/kYOSOJWNRl8OeCgmTyYHxxuE
6PSur0XPYsvQZ7P5yKTVOXTvrQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJJD5Qoo
rz3OgS9wjxOABV6YZQ8CMB8GA1UdIwQYMBaAFNuv/AwALUPcRzRrxOGf6z6/O7TV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUY0Mi82MUY2MDFGQ0JB
MjQxMUVDOTc1MEI5NEFDNEY5QUUwMi8yNl84REFBdFE5eEhOR3ZFNFpfclByODd0
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzI2XzhEQUF0UTl4SE5HdkU0Wl9yUHI4N3ROVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjlGNDIvNjFGNjAxRkNCQTI0MTFFQzk3NTBCOTRBQzRGOUFFMDIvNDIyMjg3RjBE
MzA1MTFFRTg3NTNENTQxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7o5MA0GCSqGSIb3DQEBCwUAA4IBAQCkZxwJORy/pL/mSoRDMXnj
jkuovb71FDoQp++EOCRaj/dehOhvSarcKD+gK+xnhH6wrvbIS70FooplQbbJtCu3
mA1bjac7bu1RxtPaB8K/Ghy1LYhvuviH23wruNTAbyGkpCYEAnf5RuwGhLoXYkGl
lqhaS3MRcFixWwhLE0mIPtclmb3TBaiD9MNA3S3pZ6pd0auV6oC8VWQ75VlGzgOP
oSXFU1AxG1LGAlCxmLg26mkzJV5ThN8YyW6jIDpNbPXZGJLxcjVCUc2Atbq8STeO
iLkcWgEtL+wBNt8pL0wCpulWjvBYjqelybOih39f97XlAfWS/NyRT73AQDRVwWQ3
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:58 2026 by rpki-client