
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/85B13C3299CE11F087D1450FC4F9AE02.roa
File: 85B13C3299CE11F087D1450FC4F9AE02.roa (raw, json)
Hash identifier: x1M/zagdNVIvwZQzDJ/coWbKF0sT48jPU3tB0Z3LiO8=
Subject key identifier: D2:94:F1:7B:DB:27:BB:7F:42:85:4D:53:FF:DE:9B:44:53:65:23:0D
Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Certificate serial: 0625
Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/85B13C3299CE11F087D1450FC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:08:10 +0000
ROA not before: Thu 25 Sep 2025 05:14:34 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 45102
IP address blocks: 103.135.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 23:16:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1573 (0x625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Validity
Not Before: Sep 25 05:14:34 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a58bba-4afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:82:3e:06:66:c4:07:d9:38:7c:f7:5f:84:d2:
ae:95:cc:82:4e:51:e2:cd:7b:02:b2:08:39:9d:d3:
c9:9d:fc:5b:b4:3e:2a:83:39:e8:b4:2f:28:0d:72:
ea:1f:4d:3d:9d:80:fe:e2:d4:b5:4c:a4:d9:d0:0c:
bd:0a:58:10:e2:da:de:3d:33:55:4a:56:dc:ac:ec:
70:08:2e:45:83:3a:86:f5:f3:c5:46:a8:77:0c:7e:
62:94:be:f1:ff:a0:29:65:d2:0f:3c:a1:35:5b:49:
04:eb:5a:e6:c8:e4:2f:7d:a3:1f:9b:c0:d8:ac:f8:
f7:1c:a0:af:b0:ea:15:6c:f9:67:c4:95:22:b7:37:
f7:b4:55:69:44:d5:d8:62:7f:3a:70:e6:c7:85:94:
0a:94:41:00:f7:2d:fd:8b:d6:21:7c:43:55:aa:de:
90:26:85:fb:b0:9f:f3:00:3b:f5:c5:a4:32:50:e9:
8b:1f:37:18:e1:d0:5b:28:a0:8a:27:fe:a7:66:b9:
f3:ac:b8:26:df:1e:dc:61:b5:c6:62:c4:72:f2:0a:
d0:3b:4c:1e:98:6b:c1:5d:4f:1c:f8:88:ae:47:df:
b8:48:5f:82:c7:c1:66:bb:60:16:78:1a:ac:86:a1:
c2:d1:7d:45:be:ae:03:16:35:59:6b:f2:57:3a:f4:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:94:F1:7B:DB:27:BB:7F:42:85:4D:53:FF:DE:9B:44:53:65:23:0D
X509v3 Authority Key Identifier:
keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/85B13C3299CE11F087D1450FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.210.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:10:3b:ba:d6:3e:84:56:e4:30:3a:a7:98:96:8a:c9:c2:4f:
f8:27:1b:30:2a:d9:17:e7:88:ba:db:ff:bc:81:92:2a:41:30:
b9:c1:00:c2:f6:f9:b2:77:5f:8e:bd:ae:45:ee:29:d4:07:58:
88:06:41:30:89:7c:b4:c3:20:f8:88:33:75:b7:68:26:dc:da:
d3:14:93:71:08:47:f2:b3:8d:e2:27:34:b4:b0:ec:f5:76:d4:
7c:f3:a7:68:ce:9d:c0:62:ef:b3:1e:78:65:ae:b0:0f:81:8e:
ac:4e:dc:a9:38:2e:67:02:0d:8d:f5:e6:99:05:e3:78:c2:e2:
4d:5b:ff:5c:38:d4:45:37:6f:23:2f:c4:5f:1b:3b:f2:e9:ca:
87:32:45:08:6b:6e:8c:65:57:44:63:46:44:81:01:4e:7d:c9:
3b:a8:f9:cc:48:d2:97:79:71:4a:29:59:a8:85:43:db:54:28:
4d:7e:78:08:3b:7b:8d:fb:ed:b9:e6:2f:b9:39:57:46:22:ba:
35:ab:c9:f6:79:45:b7:eb:d3:f7:d5:60:b8:75:d3:3b:ee:98:
c8:80:56:94:93:9c:6e:d5:60:c7:c9:c2:d7:7a:c3:e3:96:86:
f4:36:89:5d:db:d5:38:38:20:de:e3:fd:e8:07:34:73:3e:6d:
59:8e:ed:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 17:48:25 2026 by rpki-client