
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/E4B59AA2FF8311E9B1B99628C4F9AE02.roa
File: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (raw, json)
Hash identifier: WwQllEPd3L0aFcjP1HtZK5XSjnGBXQIhZ1ECICXezJo=
Subject key identifier: 00:B7:13:A6:6A:27:43:FF:24:F9:E4:1E:80:38:90:DA:04:45:83:30
Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
Certificate serial: 0CE3
Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/E4B59AA2FF8311E9B1B99628C4F9AE02.roa
Signing time: Mon 12 Jan 2026 18:15:02 +0000
ROA not before: Mon 12 Jan 2026 18:15:02 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 132130
IP address blocks: 103.126.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl
rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3299 (0xce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
Validity
Not Before: Jan 12 18:15:02 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69653a25-d059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:12:eb:b7:8f:68:ff:6f:45:52:e8:90:2d:a5:
a0:7e:de:d1:0f:94:eb:60:a9:8a:59:5c:d8:cb:eb:
40:72:c1:c4:eb:ba:8a:55:84:a3:35:7d:39:c4:23:
da:52:c1:4c:88:a5:9f:97:d8:1b:d7:77:05:6a:10:
36:f3:b2:df:05:b8:44:6e:c9:5f:e2:01:e4:e9:f6:
de:38:55:d5:60:03:13:57:5e:cc:fe:49:ed:41:a0:
ad:df:3d:1d:8a:70:8d:4a:f7:a9:9d:f3:8b:4a:23:
72:2c:f6:9e:e8:33:95:39:01:2f:41:35:72:bb:4e:
02:ec:cb:3b:cb:91:b7:b0:bc:0c:6b:86:dd:ec:0a:
d1:37:0c:af:46:9c:ff:76:d3:47:81:84:cc:64:e5:
1a:b4:95:f5:80:af:e8:d0:d0:5e:03:0f:0a:66:b0:
fb:19:c2:8a:61:3a:12:f6:94:a5:6b:25:a8:c8:fe:
19:ac:5f:d2:e7:25:61:3e:46:ec:94:ec:f7:b7:13:
6e:5d:90:3e:ad:a7:07:b9:b0:a2:a4:83:d9:fc:1b:
00:d2:53:32:40:e4:07:96:3c:00:24:72:4c:19:90:
d2:c2:3b:90:dc:99:51:31:cc:fd:9a:ca:e8:87:02:
49:71:93:20:e4:5a:0f:df:0e:fc:92:be:23:5f:55:
a5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B7:13:A6:6A:27:43:FF:24:F9:E4:1E:80:38:90:DA:04:45:83:30
X509v3 Authority Key Identifier:
keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/E4B59AA2FF8311E9B1B99628C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.220.0/22
Signature Algorithm: sha256WithRSAEncryption
88:ac:81:e9:cf:36:dd:dd:91:86:60:f6:36:93:32:cf:34:7f:
dd:13:8c:18:ff:db:6a:f1:00:cf:e7:86:34:08:01:33:0a:b4:
21:23:31:42:fe:f0:43:cd:a2:15:74:bf:8c:ac:63:a8:a6:8f:
f8:82:8b:5f:11:54:24:6e:ac:8f:56:13:80:1f:f0:32:ad:51:
bb:6e:da:1e:da:db:f5:10:ba:0c:0d:d7:2e:e3:11:a0:ba:ef:
13:b7:2c:14:37:eb:39:25:fa:c1:1e:3f:90:25:a2:9f:e9:e4:
1d:2c:b4:66:fe:61:94:af:a3:c1:91:0a:63:c1:10:8e:30:1e:
33:28:d4:d0:83:be:8f:08:63:f6:3f:e7:3b:5a:22:d5:3c:3e:
4a:ff:77:a5:bf:83:0b:39:d7:87:24:e2:5a:cb:f8:84:e4:c9:
49:c7:51:68:4c:82:86:54:c9:6f:e6:5f:3d:5c:61:54:b9:82:
59:16:48:f3:45:1e:cd:b6:de:16:ed:e6:ee:38:76:58:b2:50:
83:c1:55:1a:58:bb:b0:18:cc:10:65:49:b9:67:98:9c:0d:72:
6b:cc:c2:e4:18:2a:8b:be:4b:a2:82:ad:a1:0d:93:d6:9c:a8:
70:2d:93:06:62:c7:e7:14:11:74:91:e9:7e:a4:50:3a:02:e3:
c4:d4:d0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:46:08 2026 by rpki-client