
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/A476C8C41EA011F187B67505113D8C67.roa
File: A476C8C41EA011F187B67505113D8C67.roa (raw, json)
Hash identifier: BiU56e9z/AuqAdUdiimC3Tw7BBkRLItDa2okx3XDsN0=
Subject key identifier: 57:D9:0C:24:61:ED:0A:95:CC:E3:21:4C:6F:99:18:56:F6:32:79:1C
Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial: 0A77
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/A476C8C41EA011F187B67505113D8C67.roa
Signing time: Fri 21 Aug 2026 05:54:35 +0000
ROA not before: Fri 13 Mar 2026 05:51:13 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 136788
IP address blocks: 103.96.24.0/23 maxlen: 23
123.253.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2679 (0xa77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Validity
Not Before: Mar 13 05:51:13 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a87e81b-092b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:7a:85:7c:aa:6a:bc:f0:d6:63:cd:54:18:
ae:4d:f6:7f:5b:b4:a5:27:3b:52:a8:11:8e:c9:24:
29:56:6e:d0:4d:d8:9e:9a:09:8c:e1:34:1f:85:fe:
10:b2:e2:ef:83:04:e7:de:8e:08:4e:11:a7:05:06:
83:e0:3e:51:c0:b8:57:a0:6a:52:03:f7:6b:f3:5b:
52:35:f6:0c:83:93:d2:f3:bf:74:7f:22:0e:3f:cf:
93:c1:e4:38:98:b7:1c:50:d5:4b:6b:86:22:f6:77:
53:e6:7f:03:12:d6:38:ba:86:db:89:67:de:d4:6c:
ae:df:d5:78:0b:21:f8:52:b6:87:0b:92:2f:a6:58:
60:e9:3b:c4:22:3a:12:79:c9:08:6d:f9:5f:c9:f9:
cd:31:82:68:b9:c6:bf:85:cc:36:8c:aa:be:63:f5:
43:45:d5:34:6e:39:a0:ad:c7:ba:d4:71:78:0f:ff:
26:17:91:52:44:1c:f7:ad:e5:92:e8:ec:4d:c5:d3:
dd:44:67:b9:aa:6d:cc:f6:6a:f7:e9:c3:35:06:92:
00:1f:ce:f0:c8:27:cb:7d:6c:28:69:06:d7:9d:e5:
a4:f6:c5:5e:6d:16:5a:87:e6:02:52:9b:5c:6d:96:
da:31:f0:db:b8:2f:c3:1d:cc:ed:98:20:93:d9:56:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D9:0C:24:61:ED:0A:95:CC:E3:21:4C:6F:99:18:56:F6:32:79:1C
X509v3 Authority Key Identifier:
keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/A476C8C41EA011F187B67505113D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.96.24.0/23
123.253.192.0/22
Signature Algorithm: sha256WithRSAEncryption
83:8d:5c:4e:38:95:61:34:68:00:16:35:29:b1:19:55:7c:89:
88:cf:f5:ec:45:04:91:c2:6a:7d:5f:20:86:fb:2d:50:d8:d5:
8f:62:25:b0:ab:f5:e9:55:19:81:f6:2c:e2:d5:8d:f6:f0:ae:
16:44:65:41:59:aa:02:c5:dc:7b:2b:18:67:09:0f:39:29:2f:
f9:94:dd:4c:14:41:b1:5d:14:a4:c1:02:36:5a:89:db:66:f0:
17:94:46:72:20:0a:af:d5:92:22:ec:d5:1c:ab:13:d1:b8:c9:
08:cd:3f:6e:b1:6c:39:c2:50:4b:de:94:0a:ad:8c:14:f7:e0:
f6:2e:db:e0:7c:25:4f:d7:d2:5d:c5:f5:22:db:b0:30:3a:10:
8e:86:81:ef:0f:ea:1a:45:07:01:bd:07:ab:e5:62:f7:fd:04:
4d:5b:2b:98:f6:44:d8:15:ad:8e:93:0d:e3:f8:0a:b8:76:a0:
31:81:fd:19:5e:93:43:61:44:21:7b:0c:82:93:18:8a:3d:b1:
4a:7e:4e:06:cf:14:5c:3a:b4:2e:db:d5:c9:5d:5d:95:31:c3:
67:47:11:65:87:74:73:41:6e:7b:2b:6d:e7:e2:9d:28:c9:13:
16:bb:d1:69:30:86:a5:88:28:c0:c3:2d:32:1c:3f:eb:13:4a:
46:90:67:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:16:58 2026 by rpki-client