
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/40C4FB74AB3A11EEA3CBE616C4F9AE02.roa
File: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (raw, json)
Hash identifier: 8g6DGym5X06XbbSD/tbM94k9PEbw+g3fC0hmurAHwv0=
Subject key identifier: F7:B6:DD:3C:66:11:8F:B0:10:32:AB:F5:11:7B:B9:FE:E9:C3:0A:8F
Certificate issuer: /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB
Certificate serial: 0198
Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/40C4FB74AB3A11EEA3CBE616C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:30:01 +0000
ROA not before: Mon 03 Nov 2025 04:18:33 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 393262
IP address blocks: 103.142.222.0/24 maxlen: 24
103.142.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl
rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DCD2, serialNumber=26C3E7136207639A06DC708308E011747BA271CB
Validity
Not Before: Nov 3 04:18:33 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a41529-143c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:6c:65:e2:8e:c3:5a:97:8e:94:d8:63:9b:12:
83:4d:98:3d:fe:42:37:52:34:cb:31:1b:d4:34:85:
07:c6:e3:b2:4b:26:a8:c5:e9:b7:6c:41:f8:30:34:
96:a5:8f:80:57:a7:17:4c:78:99:8a:1c:b8:47:c8:
4d:fe:43:b7:ad:ce:b9:29:b1:5b:85:39:6b:f8:99:
e3:5b:81:97:d2:22:82:f8:89:35:61:db:ea:2e:1e:
50:87:81:12:7a:14:28:e8:36:5c:ba:92:f3:44:c0:
6d:3f:45:3f:28:51:05:84:61:b1:af:87:c2:43:e7:
51:55:76:36:69:33:5a:3c:9e:95:b2:f5:57:0f:c9:
40:d6:ff:48:97:fc:94:78:e9:a9:bb:1e:19:1f:3a:
0e:c4:14:46:cf:60:2f:01:c2:60:74:a8:e8:68:56:
1a:fa:76:f2:56:72:72:1c:a8:1b:58:fa:5a:bc:16:
e5:16:03:b7:9d:09:a6:77:b1:c2:3e:12:eb:6a:e3:
92:b3:72:3e:5c:c6:88:e9:56:6f:c7:39:cc:3d:87:
57:66:6b:59:7e:41:12:18:b7:33:9e:57:2e:7e:20:
3c:1b:4c:52:6d:3d:bc:02:aa:ae:dd:74:79:0f:7a:
ce:99:77:f0:51:e8:9c:94:a2:a8:8a:9c:75:7d:46:
e9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B6:DD:3C:66:11:8F:B0:10:32:AB:F5:11:7B:B9:FE:E9:C3:0A:8F
X509v3 Authority Key Identifier:
keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/40C4FB74AB3A11EEA3CBE616C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.142.222.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:14:af:2b:e4:81:bc:ef:93:b4:a0:25:cf:be:16:99:fa:18:
e9:43:55:35:0f:f1:db:a4:37:f5:0c:09:26:b6:e6:3f:77:92:
bc:f8:08:90:c7:82:13:ab:86:61:cd:fc:d0:2f:0b:a9:91:ac:
b2:32:d1:72:d2:76:b6:9f:6e:fa:71:6f:b2:1f:3a:6e:52:6b:
26:08:41:b0:5d:ad:47:75:2e:a4:a5:be:19:be:c4:66:74:1c:
47:60:bc:d2:92:13:b1:4a:a1:a9:4f:c1:96:d2:8e:30:86:a8:
80:d6:94:22:6e:b4:fe:bb:a9:3a:d2:b4:19:b3:24:9f:bf:d8:
93:57:bf:9b:44:6a:03:b4:0d:78:62:af:89:9b:38:ea:16:2d:
72:fb:50:2b:a9:ce:e3:a4:82:17:ac:00:bc:61:65:c1:19:bd:
c3:67:ef:66:3a:49:f2:bb:8f:5b:49:55:23:7a:34:78:d5:df:
08:34:3a:45:df:2d:3d:58:6a:8e:dc:21:c1:d3:3d:74:c5:cb:
92:c2:86:e1:bf:bf:fd:b4:14:f4:6f:78:1c:46:72:57:e7:d5:
8a:b4:df:3c:52:97:b7:99:7c:d7:30:51:dc:d8:af:8e:a0:f0:
e4:89:52:8d:30:6d:d4:6b:f2:b8:d0:71:b3:c8:17:26:f9:e2:
83:7a:39:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:12 2026 by rpki-client