
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/2EAD49328A4911F1B17FECC73411F970.roa
File: 2EAD49328A4911F1B17FECC73411F970.roa (raw, json)
Hash identifier: dkIzivnox3P2hPTPxMUOI3sSK/751vYlNDiy4Qq+N4s=
Subject key identifier: 92:94:32:D2:6D:F6:C4:31:74:7C:56:F3:CB:BC:0B:6B:8A:3A:F0:8C
Certificate issuer: /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741
Certificate serial: 027E
Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/2EAD49328A4911F1B17FECC73411F970.roa
Signing time: Tue 28 Jul 2026 05:57:15 +0000
ROA not before: Tue 28 Jul 2026 05:57:15 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 139084
IP address blocks: 103.138.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl
rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 01:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638 (0x27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741
Validity
Not Before: Jul 28 05:57:15 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a6844ba-1a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:f7:31:1f:bc:93:f3:65:53:10:6a:7a:c5:
51:44:62:72:8d:ce:12:dc:d3:5c:f4:de:a5:f8:66:
1e:4f:6e:5d:d2:48:f0:bf:5a:b4:66:db:b3:13:01:
b9:3d:4d:b1:1f:b8:36:79:ea:10:69:f9:7f:da:83:
f8:7a:46:3c:4b:e0:62:ec:2a:25:45:48:f2:50:44:
c9:0b:e7:ed:75:66:62:83:85:94:c7:99:ce:7b:13:
48:cd:96:8f:f8:0e:c8:8b:db:3e:05:80:bd:21:a8:
a8:77:44:97:cb:6c:46:35:de:f6:63:85:11:66:2f:
44:7d:00:25:89:76:52:54:8f:63:a0:a9:2d:e7:42:
96:22:7c:69:60:f2:fd:16:bd:dd:da:57:e7:1e:ab:
66:8d:6e:f9:ef:f4:06:20:d3:33:f5:b9:7e:ef:80:
f4:1d:ae:ed:8f:73:92:95:10:39:b1:fc:c4:db:49:
39:71:a0:55:13:02:e5:5f:bf:a2:95:39:11:59:78:
84:2a:f2:5b:b8:af:b0:6b:ef:3f:2d:ae:a6:88:ec:
46:be:9c:b8:5d:4d:43:c6:7c:9d:10:da:1c:43:31:
6a:ab:57:05:7c:e3:9a:32:57:d3:d7:0e:30:ba:fd:
fa:a2:08:76:ff:80:ea:3d:ac:95:bb:10:a6:e8:20:
33:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:94:32:D2:6D:F6:C4:31:74:7C:56:F3:CB:BC:0B:6B:8A:3A:F0:8C
X509v3 Authority Key Identifier:
keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/2EAD49328A4911F1B17FECC73411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.36.0/22
Signature Algorithm: sha256WithRSAEncryption
03:56:18:01:46:a5:98:4a:d0:eb:54:26:0d:4a:2f:0c:3a:63:
5d:87:73:ab:e3:7c:e4:b6:1f:d0:96:74:40:31:34:92:82:39:
1c:c2:75:d8:e5:59:1b:86:57:d5:4c:45:00:50:1b:c1:e7:d4:
0d:85:5a:15:7a:d8:77:c2:8a:37:96:8c:5f:08:be:22:7b:13:
8d:af:a5:e8:99:b1:7c:0a:c5:74:81:7b:15:54:7e:eb:24:09:
af:3b:49:f2:84:bc:d5:97:fc:cc:d5:9b:a2:3b:bb:83:ba:80:
bc:17:78:e2:3e:23:de:d3:25:2b:9e:33:80:75:5f:5a:c8:c0:
1f:22:0e:be:39:c7:6b:19:0e:28:db:36:a5:ac:13:9f:a0:fb:
2e:84:f6:dc:ca:cf:06:04:68:ef:fe:74:5e:be:8a:e6:74:3c:
55:82:17:0f:56:6d:90:d7:e6:6e:0b:01:c6:fd:b7:87:a6:d1:
48:8f:ae:82:be:56:c0:16:f0:f9:93:d6:d8:37:e7:31:0f:28:
7c:ef:ef:55:af:66:40:85:0e:12:93:67:14:82:56:b1:f6:2a:
f4:86:ce:a5:da:bd:9e:cf:c8:42:71:1f:6b:21:aa:30:8e:93:
ad:95:a1:0c:58:a9:26:55:37:e9:50:58:42:5b:40:a9:80:71:
dd:21:c2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:42:48 2026 by rpki-client