
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/1245956E2DB611F1B8EF9758A8833773.roa
File: 1245956E2DB611F1B8EF9758A8833773.roa (raw, json)
Hash identifier: mMM2Ni5pcLVmUU40zu9mR7XX9fNyNXL41cXI4bsQQ2I=
Subject key identifier: 23:0A:09:92:C8:A6:AD:AD:85:CE:3F:DB:66:F3:82:27:F6:5D:6B:5A
Certificate issuer: /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Certificate serial: 093A
Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/1245956E2DB611F1B8EF9758A8833773.roa
Signing time: Wed 01 Apr 2026 10:32:24 +0000
ROA not before: Wed 01 Apr 2026 10:32:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138944
IP address blocks: 103.137.142.0/23 maxlen: 23
103.137.142.0/24 maxlen: 24
2405:6340::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2362 (0x93a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E411, serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Validity
Not Before: Apr 1 10:32:24 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69ccf438-83a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c2:70:c0:e1:fc:ff:74:89:81:7b:e3:13:c9:
11:f3:d7:76:35:d5:5c:1d:af:6d:60:f4:96:42:e3:
05:2f:c9:87:34:b7:c2:09:40:43:de:43:d0:f6:af:
11:6b:29:05:d6:b4:10:85:c5:b9:2a:1a:27:18:b8:
ee:0e:bd:c0:b2:e4:7f:0a:14:56:a2:15:4e:91:df:
6f:d6:b8:25:00:3e:78:e1:8d:e4:80:55:4c:38:6f:
71:f0:b2:bb:19:a9:88:53:4c:71:49:ad:bd:02:69:
f1:2b:57:30:7a:8e:e3:f3:45:a5:ef:53:e0:40:d7:
03:f1:8a:8d:7f:89:a5:3d:1a:ed:ba:5d:3f:e9:f4:
95:b9:66:86:50:c6:79:ff:fa:9e:a5:8f:0a:bd:48:
64:39:0c:ac:dd:b7:6c:81:0c:4d:8c:55:2f:97:d7:
57:da:09:8e:10:4a:23:56:ff:26:91:6d:df:17:e4:
39:6b:32:19:16:5b:82:40:fc:93:02:30:43:a7:1b:
f2:03:23:c1:0f:ef:6c:99:25:0a:a4:dd:0a:7c:c2:
d0:cc:9e:0a:07:99:de:0a:27:82:fd:3e:67:5d:e4:
ff:1a:42:84:1b:72:ba:57:41:0e:22:e4:91:e9:5c:
4f:64:8d:2c:0d:73:35:57:ac:ad:50:ac:eb:00:3b:
97:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0A:09:92:C8:A6:AD:AD:85:CE:3F:DB:66:F3:82:27:F6:5D:6B:5A
X509v3 Authority Key Identifier:
keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/1245956E2DB611F1B8EF9758A8833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.142.0/23
IPv6:
2405:6340::/32
Signature Algorithm: sha256WithRSAEncryption
09:86:d2:a9:cd:2e:4c:39:73:73:ee:8d:4c:c9:a1:75:5d:67:
c1:d1:5c:e0:f3:77:29:1a:e1:e1:71:70:6b:36:a2:b6:1d:c4:
2b:2e:8d:36:8f:11:04:4c:c5:ff:15:d1:67:02:07:ba:b5:26:
1c:24:db:05:9a:7f:a5:10:35:51:86:ab:db:80:98:e3:a9:8b:
26:64:3e:48:f3:ec:73:da:3d:23:23:f9:91:5a:83:6c:5d:4e:
c4:f5:e3:04:3c:f8:7f:33:8e:9c:dc:24:c2:c5:74:69:a5:d9:
b5:63:5f:c8:48:18:72:08:b5:4f:c4:f2:a4:03:52:cd:1b:e6:
44:79:d0:46:b1:23:8d:b0:16:d4:31:20:9c:09:59:19:e6:6b:
df:14:10:21:94:4a:46:7b:e3:cb:a8:43:35:7f:06:ff:ea:d1:
9f:0b:6d:7f:0d:c2:03:88:38:05:fd:d3:c4:c5:1b:ee:75:b0:
af:0b:98:56:13:5f:31:31:26:79:c6:3b:02:af:9e:fe:8c:bf:
4b:c6:00:a2:c7:46:45:a9:b9:0d:a4:88:75:56:4f:6b:8a:7c:
a2:ae:59:b3:c1:00:44:02:a1:0d:13:60:4f:59:8e:f5:9a:a0:
57:5f:d0:30:f6:cd:9b:68:60:36:3f:a1:69:9f:ed:7b:b1:51:
b5:b0:ce:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:12:26 2026 by rpki-client