
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/A2C289B63B0E11F1ABA6C37BA3833773.roa
File: A2C289B63B0E11F1ABA6C37BA3833773.roa (raw, json)
Hash identifier: jmWcCNtWVugfcNe6D5Skhd/Vluv6OV5nBx2KESd91tA=
Subject key identifier: 92:A9:4C:2A:72:6D:70:64:6B:8A:08:4D:30:AC:B9:74:56:97:91:27
Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270
Certificate serial: 01C7
Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/A2C289B63B0E11F1ABA6C37BA3833773.roa
Signing time: Sat 18 Apr 2026 10:09:07 +0000
ROA not before: Sat 18 Apr 2026 10:09:07 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 55832
IP address blocks: 103.14.181.0/24 maxlen: 24
103.14.182.0/24 maxlen: 24
103.14.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl
rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 03:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270
Validity
Not Before: Apr 18 10:09:07 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69e35843-a0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5b:bd:42:b5:c5:09:56:2d:c4:44:a3:30:4f:
a7:83:7a:10:5f:2b:01:33:9f:3f:e2:48:55:31:c1:
4a:d2:e0:2b:b3:96:f6:6d:55:4a:f2:ca:77:a1:09:
dd:a5:8a:9e:21:02:97:1e:17:ac:d4:da:78:ff:5c:
bd:f5:b9:a5:46:d9:b3:de:0a:d2:07:30:c9:8a:8a:
12:b1:b1:ba:86:5a:ac:72:b3:45:75:8c:ae:51:f0:
92:ad:c7:83:50:97:89:c2:54:88:12:97:b6:fc:32:
21:5f:c7:ee:7b:90:a1:9e:91:47:e8:df:9a:94:cc:
ee:15:1c:0d:11:19:f3:17:f9:a4:27:59:2c:95:14:
b4:10:53:60:fd:f6:8f:23:1e:e3:dd:27:ca:ce:63:
bc:43:1b:64:37:18:45:d1:04:f6:b5:60:7a:ce:35:
bd:b5:93:de:09:61:24:39:32:b2:73:4e:98:e6:c3:
bd:fc:a4:1b:02:32:2a:7d:a9:88:40:61:27:69:c5:
74:a4:db:e2:97:39:af:16:46:17:f5:e6:00:f7:74:
27:c4:2f:5d:42:e1:e9:4a:5a:30:65:5d:4d:cb:5f:
c1:0b:1f:5c:eb:bf:ad:21:40:ca:ce:48:97:b8:1e:
2c:7e:fa:6a:73:ae:d9:19:5d:0f:e3:fb:45:8c:15:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A9:4C:2A:72:6D:70:64:6B:8A:08:4D:30:AC:B9:74:56:97:91:27
X509v3 Authority Key Identifier:
keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/A2C289B63B0E11F1ABA6C37BA3833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.14.181.0-103.14.183.255
Signature Algorithm: sha256WithRSAEncryption
88:df:06:d4:db:9d:0c:f8:7a:40:fd:66:fe:e5:da:51:0e:9d:
6b:23:3b:f2:2c:f9:34:1c:e9:b9:b8:79:a3:c0:b8:5c:18:2c:
a9:d1:65:1e:1e:e2:b2:24:d9:b5:f9:e1:f8:5f:a5:a4:a6:94:
9c:08:40:f3:26:27:4e:a4:50:b5:70:64:75:54:a0:94:94:64:
9a:c3:c1:27:4c:2e:32:06:8a:eb:9c:7e:75:7a:09:7c:1f:59:
88:3a:a9:de:48:df:d5:f5:d9:cd:ba:61:59:e7:76:7f:69:9b:
04:c1:07:15:24:48:ec:f8:7e:e8:8e:dc:2b:ea:d0:0a:4c:9a:
09:f5:b3:58:43:e4:67:6d:c1:e0:f8:8e:ac:d8:75:5c:32:fd:
cd:e2:f2:9f:95:9b:10:23:12:52:5d:2b:50:11:af:da:1f:2a:
90:3d:0c:f6:ca:d7:18:c3:35:fe:93:e9:28:19:21:9b:b7:65:
90:b3:60:71:67:5e:20:97:51:54:26:65:83:bc:a3:11:10:80:
57:e6:98:a4:cf:d7:dc:4b:44:10:5e:05:67:62:95:59:9c:5a:
9f:1c:08:6e:91:f9:87:af:83:c7:e4:ab:6d:64:34:eb:fc:cb:
5c:1d:dd:dc:c2:78:18:f7:b0:44:af:aa:14:28:62:14:9f:36:
0d:a9:9f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 07:13:04 2026 by rpki-client