
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/1245956E2DB611F1B8EF9758A8833773.roa
File: 1245956E2DB611F1B8EF9758A8833773.roa (raw, json)
Hash identifier: RDdwLCbOHRei4mq+xzV0XVNXkj7eeYuisNBVo4Pbaec=
Subject key identifier: 26:8B:A8:6E:C2:93:B9:29:F2:31:97:06:1E:31:E8:12:29:35:6C:60
Certificate issuer: /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Certificate serial: 0952
Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/1245956E2DB611F1B8EF9758A8833773.roa
Signing time: Wed 06 May 2026 19:22:28 +0000
ROA not before: Wed 06 May 2026 19:22:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138944
IP address blocks: 103.137.142.0/23 maxlen: 23
103.137.142.0/24 maxlen: 24
2405:6340::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2386 (0x952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E411, serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Validity
Not Before: May 6 19:22:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69fb94f4-74f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:c3:fa:af:d0:e7:37:0b:c2:c9:09:bf:5e:
02:61:0b:78:c4:cb:fb:4f:9f:56:7b:78:e6:33:2e:
0f:c7:78:f3:0d:c9:d5:44:8d:5f:ae:09:9f:e4:27:
60:dd:62:c3:b7:61:45:ab:4c:50:87:bc:ca:31:72:
ac:7c:b5:3b:d0:fe:d8:6f:cf:ef:19:5f:c0:f9:f4:
10:78:eb:46:5f:69:bd:47:2f:a8:b8:aa:8e:e8:98:
02:03:26:8d:48:54:e8:c1:84:07:ca:0b:f0:72:3b:
dc:98:35:25:d2:4a:2d:b4:a4:07:5e:d1:e5:eb:2e:
7d:61:41:56:7b:62:66:08:32:f4:70:73:95:14:9a:
cb:38:b0:d1:e2:04:ee:f3:15:50:d9:c6:80:8d:d0:
6c:16:03:1c:69:b5:77:b7:9e:b7:c7:26:76:cc:ac:
a1:49:62:34:4d:2b:1a:d0:5f:8b:de:a5:9c:df:09:
9d:10:a7:76:39:5b:ab:fa:09:98:ba:9e:b5:b7:05:
6d:f6:3f:2f:0b:93:5e:52:d7:42:28:cc:bf:1e:c6:
be:8b:42:e8:4b:71:cf:85:58:83:02:fc:9a:cb:4c:
b4:48:54:b6:46:4a:6c:88:85:06:56:02:92:eb:3e:
f8:29:7c:fe:b0:48:f6:4f:df:eb:7a:7e:eb:58:37:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8B:A8:6E:C2:93:B9:29:F2:31:97:06:1E:31:E8:12:29:35:6C:60
X509v3 Authority Key Identifier:
keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/1245956E2DB611F1B8EF9758A8833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.142.0/23
IPv6:
2405:6340::/32
Signature Algorithm: sha256WithRSAEncryption
7f:18:b3:0c:b8:b7:01:81:90:71:82:8b:df:f7:40:7f:5d:3e:
59:3c:62:9f:a4:ac:c8:2b:7d:7c:92:5a:8b:73:b5:7a:8c:15:
d2:a6:b2:05:c1:41:07:1e:0e:29:42:a1:b5:01:a3:0a:ab:b7:
e4:e2:25:a4:87:dd:de:75:17:da:60:cc:ac:00:50:37:99:99:
6c:0c:80:7b:04:d0:ce:37:2c:1f:eb:d8:c9:7d:2d:fd:84:98:
ad:08:43:93:fa:ba:c6:61:4e:d5:c5:4e:e3:bd:16:8c:66:34:
6d:8e:ab:8f:f3:a3:87:34:47:8b:0f:f5:3f:3e:9d:cf:49:c8:
d5:4f:68:08:0a:61:18:79:c8:81:c9:86:9c:39:04:34:5c:da:
0d:62:b7:99:27:a4:cc:ef:c7:ae:20:af:91:7c:0d:a1:19:c5:
fe:58:1f:09:94:2f:89:ee:01:d6:d8:47:29:8a:f5:ac:91:c0:
2f:60:1a:ae:ba:68:e7:21:8b:4d:98:30:e9:3c:a9:82:c3:e1:
f2:ce:d2:73:1a:5f:50:ef:e9:af:25:f0:ea:c8:d1:4b:4a:41:
89:bf:b8:ae:06:9f:c0:84:96:a7:76:e1:95:97:44:a5:1f:aa:
ad:a6:6c:d6:a7:d4:a1:85:9a:dc:a1:5c:9a:6d:21:6e:28:6f:
8e:ab:7c:5e
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICCVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkU0MTExMTAvBgNVBAUTKDM4ODgwREI5MzZBQ0NDOUJENzREM0RCOERGODg4N0Iz
MjhFNTc4OEQwHhcNMjYwNTA2MTkyMjI4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZiOTRmNC03NGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxFbD+q/Q5zcLwskJv14CYQt4xMv7T59We3jmMy4Px3jzDcnVRI1frgmf5Cdg
3WLDt2FFq0xQh7zKMXKsfLU70P7Yb8/vGV/A+fQQeOtGX2m9Ry+ouKqO6JgCAyaN
SFTowYQHygvwcjvcmDUl0kottKQHXtHl6y59YUFWe2JmCDL0cHOVFJrLOLDR4gTu
8xVQ2caAjdBsFgMcabV3t563xyZ2zKyhSWI0TSsa0F+L3qWc3wmdEKd2OVur+gmY
up61twVt9j8vC5NeUtdCKMy/Hsa+i0LoS3HPhViDAvyay0y0SFS2RkpsiIUGVgKS
6z74KXz+sEj2T9/ren7rWDeBpQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCaLqG7C
k7kp8jGXBh4x6BIpNWxgMB8GA1UdIwQYMBaAFDiIDbk2rMyb1009uN+Ih7Mo5XiN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTQxMS9GMEIwMEVCNDE5
MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9PSWdOdVRhc3pKdlhUVDI0MzRpSHN5amxl
STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09JZ051VGFzekp2WFRUMjQzNGlIc3lqbGVJMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkU0MTEvRjBCMDBFQjQxOTE0MTFFQTg2RjI0ODFFQzRGOUFFMDIvMTI0NTk1NkUy
REI2MTFGMUI4RUY5NzU4QTg4MzM3NzMucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ4mOMA0EAgACMAcDBQAkBWNAMA0GCSqGSIb3DQEBCwUAA4IBAQB/
GLMMuLcBgZBxgovf90B/XT5ZPGKfpKzIK318klqLc7V6jBXSprIFwUEHHg4pQqG1
AaMKq7fk4iWkh93edRfaYMysAFA3mZlsDIB7BNDONywf69jJfS39hJitCEOT+rrG
YU7VxU7jvRaMZjRtjquP86OHNEeLD/U/Pp3PScjVT2gICmEYeciByYacOQQ0XNoN
YreZJ6TM78euIK+RfA2hGcX+WB8JlC+J7gHW2EcpivWskcAvYBquumjnIYtNmDDp
PKmCw+HyztJzGl9Q7+mvJfDqyNFLSkGJv7iuBp/AhJanduGVl0SlH6qtpmzWp9Sh
hZrcoVyabSFuKG+Oq3xe
-----END CERTIFICATE-----
Generated at Wed May 13 17:09:29 2026 by rpki-client