
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/DA0AD156799211EFADCD2257C4F9AE02.roa
File: DA0AD156799211EFADCD2257C4F9AE02.roa (raw, json)
Hash identifier: xIAIlJ7v8ECTIXnt1C8XuSoM0aGHLELefgFDc8efrDo=
Subject key identifier: 58:D6:D7:22:82:96:EE:52:E2:5A:11:4D:B9:4C:66:8A:A3:E6:52:EA
Certificate issuer: /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Certificate serial: 05C2
Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/DA0AD156799211EFADCD2257C4F9AE02.roa
Signing time: Mon 02 Mar 2026 04:57:46 +0000
ROA not before: Mon 15 Sep 2025 00:05:25 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 132372
IP address blocks: 103.168.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1474 (0x5c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Validity
Not Before: Sep 15 00:05:25 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a518ca-d3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:ef:e4:be:b8:62:7f:04:bd:ce:99:bc:de:
9c:91:52:a6:6b:cb:d4:38:02:20:b6:1e:34:f2:e2:
42:e7:d3:bc:8a:fc:60:60:a1:fd:da:4f:a0:1b:b3:
17:53:71:fb:10:54:94:73:45:58:96:b0:a1:36:f7:
d7:79:9b:f2:3a:8f:3b:bd:34:ed:eb:36:64:c2:2b:
9c:00:7c:43:e7:56:ca:b9:ef:f2:66:8b:7c:2b:c1:
d9:8e:11:fa:a2:89:c7:ae:db:6f:b6:b5:e8:c3:9e:
ae:c5:6f:e3:1d:62:e6:98:cc:7d:a4:0d:4c:2c:91:
25:dc:4a:83:2e:c6:0a:56:ee:3f:44:23:84:1c:8e:
36:6e:1b:d1:2f:76:26:aa:16:f9:51:7b:d2:d8:4b:
a6:9b:fc:3d:fa:81:51:6c:01:a2:27:30:35:59:59:
73:de:e9:c0:a4:3c:fe:57:8d:e1:f6:75:15:fe:0f:
36:8d:7e:7c:4f:51:1c:6f:6d:15:74:9e:98:a1:27:
e4:b9:f5:01:df:51:b9:ec:3d:7f:2c:f4:16:22:eb:
f6:84:1a:eb:11:b2:1e:65:4d:b4:94:a5:ae:e3:32:
9f:ee:ba:3e:5c:da:85:88:a7:16:2b:37:fc:1e:84:
d3:1d:ee:a2:23:e7:42:94:ce:b0:bf:af:da:dc:a9:
7c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D6:D7:22:82:96:EE:52:E2:5A:11:4D:B9:4C:66:8A:A3:E6:52:EA
X509v3 Authority Key Identifier:
keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/DA0AD156799211EFADCD2257C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.105.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:db:8b:1b:2f:1e:16:c5:29:26:cf:dd:6b:b0:c1:a3:d4:e3:
50:6c:0b:67:cc:3b:f2:d1:bd:ca:ae:61:d5:01:52:5c:e7:25:
e9:5e:5e:ce:c7:33:d1:6b:2b:48:4b:26:b9:fb:60:07:dc:8a:
c3:ef:4d:23:d6:ae:06:68:57:ff:83:ea:06:78:bb:9b:56:48:
18:9a:20:86:8d:03:0b:b3:08:e2:4f:30:5a:bb:26:66:39:0a:
3a:20:fc:d8:93:90:c2:28:48:01:83:76:99:b9:e1:25:10:26:
c7:fe:ef:00:58:ef:de:7a:eb:4a:28:94:7d:1e:07:a7:ac:c4:
20:59:4b:9d:21:bf:66:42:fc:f4:4d:bc:e0:1a:e6:bb:8b:40:
60:59:b1:4b:5d:5c:73:a1:cd:19:0a:b0:db:84:1b:8b:4c:a4:
d9:95:53:5c:2a:3e:a8:f9:a2:83:06:9e:ff:ca:72:69:d7:0e:
dc:db:74:f1:eb:16:61:2e:15:28:42:d6:49:69:30:f8:c3:62:
51:45:c6:e5:a5:39:a6:30:a1:03:fc:6a:cf:fb:ca:3e:5c:1b:
a2:ea:d8:de:c2:41:17:02:1c:e2:8c:c6:6f:fa:a3:5c:29:3b:
1a:13:13:b9:fa:f3:35:bf:1f:77:b8:53:d0:d9:9d:b7:ac:eb:
17:14:6a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:44 2026 by rpki-client