
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/1CDAEE58C2D411F1B862FDBA4A11F970.roa
File: 1CDAEE58C2D411F1B862FDBA4A11F970.roa (raw, json)
Hash identifier: zWvb3FUzqcQ5zz4kfUO+NP0dP9ottUhQQkyM3DYrH/M=
Subject key identifier: F5:1D:9D:6F:12:00:DB:7D:00:E0:CE:B8:56:76:54:9E:01:62:96:E8
Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial: 0C5F
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/1CDAEE58C2D411F1B862FDBA4A11F970.roa
Signing time: Thu 08 Oct 2026 04:56:57 +0000
ROA not before: Thu 08 Oct 2026 04:56:57 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 216138
IP address blocks: 103.6.21.0/24 maxlen: 24
103.6.22.0/24 maxlen: 24
103.11.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Nov 2026 18:57:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3167 (0xc5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Validity
Not Before: Oct 8 04:56:57 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6ac72299-cd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:c1:75:e8:d8:30:fe:54:4c:06:32:cf:b6:
79:cf:ea:ff:a5:df:6e:c2:59:3c:88:77:05:85:90:
07:c6:ef:6d:ba:5a:d0:d1:1f:ad:d6:82:10:cf:e9:
8b:b9:5b:73:7c:22:ff:ac:33:e8:07:a8:21:f7:fb:
6f:04:62:26:b7:49:de:53:ff:6d:5a:2a:d9:bf:53:
0f:9d:78:9b:9c:5d:f2:4d:49:a3:cd:ef:5c:1e:9c:
0e:46:11:72:68:6e:9c:ae:a2:41:8a:8e:59:6b:79:
1d:17:a5:4f:a6:96:35:54:dd:d1:ed:3a:2b:0f:d6:
e4:3b:8b:f4:00:74:ae:e8:ed:28:0c:6d:03:c1:f5:
14:96:30:e3:61:a0:10:7e:01:ac:c3:1e:46:67:64:
ba:39:8d:34:a7:49:75:54:a1:44:46:2a:13:56:8c:
66:8c:b6:75:a8:74:cc:f0:40:2c:e9:6f:51:a3:3f:
f3:ba:12:49:93:ce:62:08:9d:50:34:d2:aa:2f:cb:
b0:09:93:2c:51:e8:28:62:5f:fb:72:94:2c:14:c9:
33:b3:21:81:f2:51:98:ba:91:86:66:0f:e5:2a:d2:
26:1b:f0:98:62:f1:6a:87:62:99:2e:70:98:7f:ff:
66:ea:af:52:33:19:47:bf:9f:ed:49:45:f5:b7:39:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1D:9D:6F:12:00:DB:7D:00:E0:CE:B8:56:76:54:9E:01:62:96:E8
X509v3 Authority Key Identifier:
keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/1CDAEE58C2D411F1B862FDBA4A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.21.0-103.6.22.255
103.11.239.0/24
Signature Algorithm: sha256WithRSAEncryption
17:39:3a:0a:d2:9c:e7:5c:da:b1:16:04:b0:b1:e4:f6:85:a0:
8d:56:c9:99:c6:f6:df:d7:e5:9d:e7:7d:89:69:9f:01:6d:92:
13:1b:ad:c9:99:bc:9d:2f:be:f7:2b:29:2a:14:e5:41:0e:73:
56:9c:d2:4b:1e:e6:c2:e5:0f:09:66:b1:af:19:a2:f2:b2:0e:
a9:7a:be:52:0e:6b:65:90:2b:b0:bf:10:8e:97:81:e8:70:26:
45:61:9d:ef:4f:a4:17:93:2e:86:91:ed:a0:53:63:48:f6:58:
75:b7:a6:56:ab:75:77:ef:8b:31:e4:4b:1c:6b:7f:73:91:14:
c0:8e:02:a5:9e:f9:f9:67:17:5d:4e:20:54:e0:b3:90:44:48:
30:f2:03:9f:52:2c:88:0d:6b:b7:a8:3b:d8:2e:1d:44:94:08:
5b:79:13:13:c7:43:b0:5b:1e:8b:1a:28:3e:b0:f2:95:36:96:
a3:ec:df:9c:03:16:7c:8a:f1:cb:0b:15:e1:66:c8:57:e0:e0:
35:51:9d:03:27:9a:58:19:ec:38:ef:27:af:5f:a7:66:2f:d0:
bd:e3:6f:9a:1d:e6:e9:77:d7:90:28:8b:60:5a:55:7e:22:5b:
60:81:d5:c2:ad:5a:e0:82:12:f5:61:59:4d:8c:fd:37:e4:4d:
6f:d6:3e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:39 2026 by rpki-client