
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/D7BC0C82CC1D11F18CEEA98FF965CEF9.roa
File: D7BC0C82CC1D11F18CEEA98FF965CEF9.roa (raw, json)
Hash identifier: 1sjqnD93yakhij9HdyUkpPBspcxwyoPwWxnt+Dazg98=
Subject key identifier: DE:EA:6D:DA:0A:2F:EC:49:87:88:E8:3B:B7:C6:12:05:84:B8:1D:02
Certificate issuer: /CN=A913860A/serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
Certificate serial: 01AD
Authority key identifier: 65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/D7BC0C82CC1D11F18CEEA98FF965CEF9.roa
Signing time: Tue 20 Oct 2026 00:33:17 +0000
ROA not before: Tue 20 Oct 2026 00:33:17 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 24046
IP address blocks: 203.10.24.0/24 maxlen: 24
203.10.25.0/24 maxlen: 24
203.10.26.0/24 maxlen: 24
203.10.27.0/24 maxlen: 24
203.10.28.0/24 maxlen: 24
203.10.30.0/24 maxlen: 24
203.10.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl
rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 05:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913860A, serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
Validity
Not Before: Oct 20 00:33:17 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6ad6b6cd-7f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:2e:34:95:b7:61:ee:95:3b:42:d1:b1:75:
fd:f5:bf:cc:73:e5:88:8a:e3:d6:df:cd:30:15:8f:
29:a7:eb:4a:7e:91:67:86:ec:f7:53:0b:8c:0c:82:
76:e8:b6:30:6e:ea:3c:ef:11:3b:f8:25:d3:d8:e3:
c8:85:46:58:3e:04:f8:bd:f1:6d:ab:a3:b6:67:10:
c2:61:40:04:24:5f:ad:76:62:8e:2f:cd:f8:c1:be:
54:16:64:1b:d8:9c:07:48:b6:aa:2a:df:fe:f9:56:
31:17:91:0e:e2:1e:32:bb:01:a6:d0:82:36:3e:ae:
1f:08:b2:07:90:8b:3f:d5:cc:90:9f:ae:b5:5f:aa:
e5:e5:25:51:97:d2:25:f0:18:33:aa:22:22:a4:63:
d2:d5:e1:cd:f8:37:a6:31:58:5e:70:1c:21:46:8a:
24:d7:90:bf:1b:59:93:95:49:8b:c9:14:14:6e:bd:
4c:c4:4d:af:9d:22:e9:09:e1:0c:92:85:47:dd:d0:
b3:a4:b2:2b:d5:9b:46:72:d5:88:2a:18:d6:c5:17:
d0:72:2e:52:ad:79:4c:60:d2:fd:d9:6a:07:d8:e1:
8e:80:6d:8c:fd:be:42:70:bb:42:88:4d:9a:66:ef:
d2:68:24:bb:2c:aa:5c:0e:dc:8d:cd:16:ce:a9:a8:
98:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EA:6D:DA:0A:2F:EC:49:87:88:E8:3B:B7:C6:12:05:84:B8:1D:02
X509v3 Authority Key Identifier:
keyid:65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/D7BC0C82CC1D11F18CEEA98FF965CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
203.10.24.0-203.10.28.255
203.10.30.0/23
Signature Algorithm: sha256WithRSAEncryption
43:3e:70:64:70:13:d6:cd:db:7a:91:79:60:8d:0c:f2:85:13:
17:72:fa:23:2e:a2:e0:de:d4:78:00:4b:49:cf:40:ce:fd:e4:
98:40:7d:4e:48:66:a1:40:4a:57:59:a5:76:48:da:ea:28:ca:
e9:96:f1:47:a8:36:98:0c:f6:64:b8:51:a5:cc:a4:37:6a:65:
31:93:1b:3b:73:37:a4:64:dd:03:c6:da:e5:29:2c:61:6b:f5:
ff:72:35:ea:33:ad:02:2b:5e:c5:57:18:dd:50:17:0c:c7:d6:
3a:1e:02:b4:b5:7e:e9:ee:c2:78:60:34:1b:58:f6:f5:43:b9:
be:cc:7e:12:a3:c3:8d:85:09:37:34:21:51:0d:30:14:18:d7:
2a:61:9a:9d:7b:0a:d1:2d:69:21:67:16:ab:3c:3b:61:64:21:
ea:86:bd:6f:4a:24:82:ea:6c:d6:78:3f:dd:bc:59:90:88:ca:
64:42:2e:5a:cf:fa:a3:3d:16:a8:3d:d6:a1:11:65:1c:84:37:
06:02:05:80:81:ee:0c:87:1b:2f:cf:0c:19:61:7e:98:b7:79:
3f:2b:07:a4:1d:27:1c:3a:f9:9f:72:e6:03:7a:c0:2c:1f:5e:
2f:d0:3c:73:41:a5:c3:18:fe:fa:50:6a:b1:84:e0:c4:7d:a6:
c4:0d:dc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 10:41:55 2026 by rpki-client