
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/42A92B3C3BAC11F0882B5B62C4F9AE02.roa
File: 42A92B3C3BAC11F0882B5B62C4F9AE02.roa (raw, json)
Hash identifier: Ldtk1QgKSc4JP0Q3siQTv93L/D7QNMS7/sCdcQDy9Co=
Subject key identifier: C8:23:5D:C4:32:2A:8A:66:E8:8F:A0:36:14:23:FC:E0:F8:15:2E:16
Certificate issuer: /CN=A9189A9F/serialNumber=CFB07AE5DD00A92714DB35A721045D9D2EB8E317
Certificate serial: A6
Authority key identifier: CF:B0:7A:E5:DD:00:A9:27:14:DB:35:A7:21:04:5D:9D:2E:B8:E3:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/42A92B3C3BAC11F0882B5B62C4F9AE02.roa
Signing time: Fri 03 Apr 2026 00:32:21 +0000
ROA not before: Fri 03 Apr 2026 00:32:21 +0000
ROA not after: Sat 01 Aug 2026 00:00:00 +0000
asID: 149487
IP address blocks: 103.181.26.0/23 maxlen: 24
2400:57a0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.crl
rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189A9F, serialNumber=CFB07AE5DD00A92714DB35A721045D9D2EB8E317
Validity
Not Before: Apr 3 00:32:21 2026 GMT
Not After : Aug 1 00:00:00 2026 GMT
Subject: CN=69cf0a95-c793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:41:c3:9e:e4:97:23:13:5e:ea:af:21:13:
fe:14:fd:0d:92:37:8c:75:34:95:5d:4b:e2:22:17:
eb:e0:1a:b3:49:fd:bc:b2:b9:d9:a0:ea:e5:7e:aa:
3b:fb:c7:ff:8c:07:19:74:46:78:65:86:69:52:b4:
ab:11:1a:f4:a1:a1:48:ea:07:8e:25:84:fe:88:c5:
2a:e9:6b:d6:f9:cd:96:2e:39:98:96:49:2d:c6:fa:
11:c6:99:9c:d2:73:3e:6d:a6:1d:9b:5c:12:30:17:
f3:0d:32:88:ac:18:23:5b:10:fa:b0:3e:45:e9:82:
d4:73:9e:fc:08:b3:bc:5a:00:13:db:27:c1:e0:18:
e1:a3:dc:4d:6b:d9:e1:6a:0e:14:82:0d:21:3e:05:
03:4d:ae:d9:de:94:ad:8e:c0:22:92:e4:67:eb:a4:
a1:89:10:01:12:45:60:f4:74:83:56:ba:e3:66:3f:
7d:df:2b:95:93:e9:16:ba:9d:93:84:b4:b2:23:7c:
90:b1:25:d5:8c:e5:9b:4b:6b:e5:1c:40:a4:69:a4:
a5:6b:2b:e8:18:78:5c:a1:9b:24:64:dd:eb:7a:4d:
2a:db:b1:88:7f:f8:5d:73:04:d5:20:cb:9b:c4:6c:
65:f0:55:3b:cd:e0:82:3e:87:50:8f:aa:63:56:47:
b5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:23:5D:C4:32:2A:8A:66:E8:8F:A0:36:14:23:FC:E0:F8:15:2E:16
X509v3 Authority Key Identifier:
keyid:CF:B0:7A:E5:DD:00:A9:27:14:DB:35:A7:21:04:5D:9D:2E:B8:E3:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/42A92B3C3BAC11F0882B5B62C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.181.26.0/23
IPv6:
2400:57a0::/32
Signature Algorithm: sha256WithRSAEncryption
63:0e:84:92:da:98:3d:19:32:fc:3f:a6:b4:f1:bc:35:9e:10:
5c:8e:5f:81:6c:28:e8:33:eb:53:82:84:5d:3b:68:71:55:c9:
e2:70:e3:a0:b8:7f:db:19:f2:10:e8:7e:e4:9a:78:3e:87:2b:
fb:bc:ff:8b:4b:2d:a1:46:ef:6b:b9:73:0a:e9:33:6d:bd:18:
77:54:88:20:2e:cd:d3:e0:73:24:74:6c:d8:ec:f8:39:19:f9:
58:6e:6b:e3:e4:f5:56:75:f4:2b:c0:9d:3d:30:fe:76:b8:65:
11:03:4f:a3:8b:e6:df:02:60:ab:e1:3f:3e:1f:cb:69:fe:bd:
f3:cb:7b:e7:3d:15:af:c0:58:d4:94:48:5d:74:06:17:20:99:
bd:86:c2:88:c8:88:d7:38:50:98:c3:51:dc:39:2f:d6:f7:96:
56:c9:c5:12:83:0f:30:22:1c:3d:d8:a2:37:da:b9:2b:9c:49:
23:00:82:17:69:29:85:eb:63:46:bd:f1:85:69:0b:ed:01:28:
a0:ce:70:e2:62:c7:87:3c:3b:ec:82:13:6a:cd:46:d0:46:97:
a0:79:26:29:8a:3e:69:8f:af:5d:ff:1a:17:06:d9:96:2c:9c:
2d:aa:68:5c:6a:5b:22:ac:da:1a:82:97:03:ca:df:a6:be:86:
f3:e3:30:b0
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlBOUYxMTAvBgNVBAUTKENGQjA3QUU1REQwMEE5MjcxNERCMzVBNzIxMDQ1RDlE
MkVCOEUzMTcwHhcNMjYwNDAzMDAzMjIxWhcNMjYwODAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNmMGE5NS1jNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuoJBw57klyMTXuqvIRP+FP0NkjeMdTSVXUviIhfr4BqzSf28srnZoOrlfqo7
+8f/jAcZdEZ4ZYZpUrSrERr0oaFI6geOJYT+iMUq6WvW+c2WLjmYlkktxvoRxpmc
0nM+baYdm1wSMBfzDTKIrBgjWxD6sD5F6YLUc578CLO8WgAT2yfB4Bjho9xNa9nh
ag4Ugg0hPgUDTa7Z3pStjsAikuRn66ShiRABEkVg9HSDVrrjZj993yuVk+kWup2T
hLSyI3yQsSXVjOWbS2vlHECkaaSlayvoGHhcoZskZN3rek0q27GIf/hdcwTVIMub
xGxl8FU7zeCCPodQj6pjVke1ZwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFMgjXcQy
Kopm6I+gNhQj/OD4FS4WMB8GA1UdIwQYMBaAFM+weuXdAKknFNs1pyEEXZ0uuOMX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUE5Ri84MDU2QkE1NjhB
OTAxMUVDOEMxQjBEMjJDNEY5QUUwMi96N0I2NWQwQXFTY1UyelduSVFSZG5TNjQ0
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3o3QjY1ZDBBcVNjVTJ6V25JUVJkblM2NDR4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODlBOUYvODA1NkJBNTY4QTkwMTFFQzhDMUIwRDIyQzRGOUFFMDIvNDJBOTJCM0Mz
QkFDMTFGMDg4MkI1QjYyQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ7UaMA0EAgACMAcDBQAkAFegMA0GCSqGSIb3DQEBCwUAA4IBAQBj
DoSS2pg9GTL8P6a08bw1nhBcjl+BbCjoM+tTgoRdO2hxVcnicOOguH/bGfIQ6H7k
mng+hyv7vP+LSy2hRu9ruXMK6TNtvRh3VIggLs3T4HMkdGzY7Pg5GflYbmvj5PVW
dfQrwJ09MP52uGURA0+ji+bfAmCr4T8+H8tp/r3zy3vnPRWvwFjUlEhddAYXIJm9
hsKIyIjXOFCYw1HcOS/W95ZWycUSgw8wIhw92KI32rkrnEkjAIIXaSmF62NGvfGF
aQvtASigznDiYseHPDvsghNqzUbQRpegeSYpij5pj69d/xoXBtmWLJwtqmhcalsi
rNoagpcDyt+mvobz4zCw
-----END CERTIFICATE-----
Generated at Mon Apr 6 11:22:53 2026 by rpki-client