
$ rpki-client -vvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/421FF25E18AD11EF99EAA661C4F9AE02.roa
File: 421FF25E18AD11EF99EAA661C4F9AE02.roa (raw, json)
Hash identifier: rTmYP4vftuu9LnK2M6aljj2neyfU2VajOjI+M4V6OzA=
Subject key identifier: 49:92:0C:B7:98:F5:EA:A0:3A:C7:79:5C:66:8E:99:E2:8B:1B:69:D8
Certificate issuer: /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Certificate serial: 0186
Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/421FF25E18AD11EF99EAA661C4F9AE02.roa
Signing time: Mon 25 May 2026 04:37:00 +0000
ROA not before: Mon 25 May 2026 04:37:00 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 131314
IP address blocks: 103.28.144.0/22 maxlen: 24
2401:a2a0::/32 maxlen: 32
2401:a2a0:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 06:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Validity
Not Before: May 25 04:37:00 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a13d1ec-1b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:28:5d:ab:f6:31:2e:99:e5:08:06:93:e6:fb:
08:59:b3:cb:9b:7c:d0:6f:13:82:9e:9c:70:a7:4e:
44:68:14:7a:02:e7:f2:b9:74:4b:d5:2c:c5:2b:1f:
f3:48:ce:32:a7:6f:14:5b:5a:28:19:42:d3:82:f3:
85:68:af:fc:f2:86:38:0a:82:e4:45:64:b0:fa:27:
59:f2:d1:d0:0a:36:47:b3:8d:80:cb:da:0b:83:74:
1d:e3:46:21:f4:9d:d8:46:de:21:95:47:d9:77:0b:
22:c4:c6:24:b9:b5:aa:2e:2f:32:2d:ed:eb:db:22:
61:73:61:3c:53:cf:86:d8:97:55:b1:dc:78:41:e8:
2c:b6:cc:16:3c:6f:3e:b8:bb:c8:70:73:07:33:56:
eb:52:a7:a6:bc:e1:e8:e9:9a:85:0c:05:e8:48:34:
16:53:1e:86:68:3d:54:0d:23:23:04:0f:d4:4d:c9:
a0:4b:75:95:8c:86:cb:d8:3a:67:58:1e:39:f0:bd:
30:62:59:4d:12:57:ef:f6:61:d1:b6:8c:25:63:53:
a4:75:ed:c1:03:8b:6e:a0:01:8d:07:7e:0c:57:38:
f9:fb:ab:b7:1e:1b:b7:d1:1e:5c:d9:66:98:82:a7:
c8:0a:bc:f2:a6:90:bd:19:10:64:3a:da:64:e0:5d:
32:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:92:0C:B7:98:F5:EA:A0:3A:C7:79:5C:66:8E:99:E2:8B:1B:69:D8
X509v3 Authority Key Identifier:
keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/421FF25E18AD11EF99EAA661C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.28.144.0/22
IPv6:
2401:a2a0::/32
Signature Algorithm: sha256WithRSAEncryption
64:b5:82:05:5f:9b:64:ac:94:ce:46:8d:3c:99:c9:39:ee:77:
65:06:8e:19:a4:c4:cf:84:76:8f:e3:8f:51:d5:c8:e5:1b:e2:
15:32:12:7c:80:1f:ea:ae:d6:6d:e9:9b:a3:71:01:a7:e4:55:
69:09:f4:d2:b1:8b:e4:f5:9c:c5:96:8d:a6:5e:0c:cc:5a:4c:
d4:df:41:a4:bd:41:50:9e:fa:db:df:1a:19:72:85:32:88:bd:
54:f6:74:8e:6e:ce:ca:30:43:f8:1d:62:37:57:1d:88:b0:8c:
ce:0f:e7:eb:ad:88:3a:ea:3b:8a:a1:97:7f:09:1b:d3:d1:96:
b8:4d:4f:f7:31:6d:85:4d:87:0e:ac:65:cd:6c:49:75:1c:32:
22:6d:0c:39:db:b8:ef:95:25:17:49:b9:f8:db:f9:2c:a0:be:
51:bb:bf:ea:89:9d:68:a4:1d:9e:6f:9c:19:56:01:e7:88:be:
c4:7a:44:e4:e9:fa:4a:f0:21:75:14:d0:3b:a8:0f:65:34:43:
43:62:4d:30:33:48:b5:53:c7:bd:c3:70:26:dc:c2:6e:a3:eb:
02:67:e2:2c:d1:1a:de:b8:b3:50:46:22:09:68:17:02:6a:17:
ec:60:9b:c6:e2:61:aa:d2:b9:32:bf:dc:1b:44:5b:ae:4f:a6:
64:b8:e5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:31:34 2026 by rpki-client