
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/DAB789C65B6D11EEA95BF025C4F9AE02.roa
File: DAB789C65B6D11EEA95BF025C4F9AE02.roa (raw, json)
Hash identifier: ad6aaRvQBIRwUadg53cIGK3wdCZz0dymJ6fgvrLDsYU=
Subject key identifier: 47:35:65:3F:6C:3B:3B:2B:B0:27:6A:27:46:B4:13:D3:46:15:66:F5
Certificate issuer: /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Certificate serial: 01EE
Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/DAB789C65B6D11EEA95BF025C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:26:20 +0000
ROA not before: Fri 21 Nov 2025 01:49:15 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 955
IP address blocks: 103.203.242.0/23 maxlen: 24
2401:4020::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Validity
Not Before: Nov 21 01:49:15 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a59e0c-cdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:5c:f6:51:a8:fb:49:28:ef:9a:5d:23:b3:
d1:f5:11:c9:c7:1e:2c:0d:4e:7d:ca:11:83:ee:92:
30:ad:f8:77:27:9b:02:ed:83:3d:65:ba:9f:a4:91:
4b:9c:f3:9c:a8:58:0e:2f:e0:44:90:38:46:56:c2:
f4:1b:d2:09:00:63:7f:f8:19:c1:14:b8:40:37:4c:
8c:29:b6:1e:1b:d0:42:88:2f:11:d3:a9:33:7b:b8:
e0:b6:4e:68:29:25:68:c8:9b:ad:ac:67:e8:ef:0c:
f1:5b:51:fc:c5:4e:05:b6:79:da:02:c3:fc:ac:a3:
2e:47:c5:fe:9b:5e:eb:15:68:7b:ac:39:ac:1d:21:
1a:96:67:59:04:c6:99:ff:d4:68:13:70:a2:26:19:
81:30:b6:71:79:f5:64:cc:fa:13:3e:e4:b4:63:03:
41:4c:0d:3d:f8:98:13:e1:03:e1:86:94:4e:f3:ab:
14:d0:30:07:73:7c:22:3c:32:cb:0b:17:86:c8:60:
be:38:2a:52:70:1d:fc:5c:f9:57:da:8b:85:8c:16:
95:96:78:aa:c8:a4:f1:f8:8c:a1:9c:4d:49:df:47:
ad:f4:5b:3a:f8:5a:06:b6:07:e8:1c:f6:75:7c:24:
9a:32:a9:3e:24:5a:d1:6d:c2:af:ed:65:54:d7:7b:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:35:65:3F:6C:3B:3B:2B:B0:27:6A:27:46:B4:13:D3:46:15:66:F5
X509v3 Authority Key Identifier:
keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/DAB789C65B6D11EEA95BF025C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.203.242.0/23
IPv6:
2401:4020::/32
Signature Algorithm: sha256WithRSAEncryption
87:73:d2:f5:8d:8b:14:29:0c:ca:ec:8c:8c:a5:bb:34:46:35:
79:11:91:81:16:61:26:84:9e:59:15:30:0e:9b:ff:a3:00:9e:
9d:6d:1a:bf:ad:a6:f5:3e:6e:b2:80:84:e5:27:34:14:33:7b:
a3:f1:fa:e5:6a:70:1c:49:85:c5:65:34:45:d9:a7:1d:61:ee:
31:10:ca:b6:f1:9d:f8:eb:be:2f:d3:43:58:9a:8b:89:f5:72:
70:52:35:3b:22:e8:85:ef:67:73:74:eb:5a:a0:ad:5c:d2:db:
4f:56:c1:c6:e2:19:51:d8:ee:bc:a0:39:2e:a0:c0:81:1a:bf:
2f:f1:84:81:34:d4:ba:10:78:ca:2a:d5:4e:3f:15:37:cf:2d:
1a:4b:9b:4c:20:ef:28:fb:ee:89:a7:30:62:51:0c:c3:27:69:
ae:8f:30:c4:62:48:ef:85:7b:e6:1a:16:9c:a9:31:54:59:e7:
fa:49:91:d5:fb:40:e8:53:8b:41:23:05:67:cc:37:5a:f6:96:
c1:40:31:80:a9:7e:e3:d2:73:92:90:ec:53:a8:a3:ed:01:0b:
1d:f5:f9:df:06:55:6b:f8:15:45:ed:06:7f:69:31:69:97:3c:
14:cf:94:47:f3:06:76:1b:63:ad:22:07:ef:f6:04:a5:61:50:
18:c9:0c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 07:24:11 2026 by rpki-client