
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/4C4AC452D67911ECBFC6CB7BC4F9AE02.roa
File: 4C4AC452D67911ECBFC6CB7BC4F9AE02.roa (raw, json)
Hash identifier: r+KX8BXPnqN4PM5h6BUZcCkuaOFh4txYx8mT4xel0+o=
Subject key identifier: 79:DA:C1:4E:C9:2D:3F:0E:43:D8:DD:98:D8:A7:54:14:A2:48:60:76
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 26F8
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/4C4AC452D67911ECBFC6CB7BC4F9AE02.roa
Signing time: Tue 10 Mar 2026 17:22:39 +0000
ROA not before: Tue 10 Mar 2026 17:22:39 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 4294960000
IP address blocks: 103.138.210.0/24 maxlen: 26
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 17:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9976 (0x26f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Mar 10 17:22:39 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69b0535f-9de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:ec:9e:42:1b:27:e8:86:d3:f5:8b:eb:bd:
0f:45:24:ac:3e:86:c9:2f:87:40:e9:c2:6b:22:bc:
10:71:a0:85:89:22:76:b0:a5:3f:2d:72:9e:63:4d:
73:51:f9:52:d4:30:4d:4a:0b:c5:f5:f8:75:59:77:
53:c5:24:b1:63:84:4a:5e:ed:e9:4c:67:1a:7b:00:
97:e2:24:38:41:28:cc:63:a2:58:cc:69:0c:a3:98:
21:13:51:6d:ab:b0:25:d5:1c:a9:0d:ce:94:e6:bc:
91:e9:c0:5c:4f:66:a4:1d:8c:23:8b:10:ef:59:6e:
0e:21:83:c8:78:f6:72:b7:cd:01:9a:3a:cb:bd:1d:
72:b3:19:08:1a:6b:90:96:31:6e:9f:c5:a5:a8:bc:
d1:e6:f4:36:e9:71:63:7a:f9:40:bd:3f:ab:5d:7c:
03:06:4f:b1:49:5b:e2:61:0f:87:d3:33:70:a5:c5:
40:60:2c:75:04:69:9e:c5:a9:0c:28:ab:b7:bf:14:
97:4f:39:c1:45:e3:a6:6e:71:5c:20:ad:48:d3:53:
d9:4d:77:05:07:fd:c0:9d:9f:fe:50:e0:eb:f7:25:
51:a1:f2:58:77:2b:4d:9f:d9:d9:e9:60:f2:18:71:
76:2a:3b:52:26:4f:37:8d:07:77:db:63:e5:19:83:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DA:C1:4E:C9:2D:3F:0E:43:D8:DD:98:D8:A7:54:14:A2:48:60:76
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/4C4AC452D67911ECBFC6CB7BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
78:99:22:7b:4a:7c:5f:4d:71:42:74:f6:8c:2f:b6:d9:9a:a4:
0b:53:3c:85:d6:46:e7:c0:ef:5e:7d:d7:9e:a6:d4:5d:4c:3b:
69:4d:b6:0d:4a:f7:29:43:b2:26:e2:98:63:92:f6:b8:c2:91:
7c:13:d7:b2:e5:67:45:32:a0:d5:f0:d4:73:60:eb:45:dd:b5:
c5:ed:ab:cc:0f:2f:10:33:8d:0d:11:43:f8:26:02:dd:d6:4a:
fb:83:0f:a3:b9:0d:b5:00:c9:b4:35:fa:d9:9f:7f:ea:18:48:
ce:73:e2:bc:42:38:2d:34:1f:dc:0e:19:b4:13:47:ea:11:69:
e0:8a:15:9a:0c:20:1d:ca:ce:d3:cc:b0:b4:08:b4:ca:86:7d:
dc:52:69:bc:cc:10:b6:26:5d:14:85:90:a8:3e:4d:07:19:48:
a9:c7:22:e2:fe:ac:30:62:97:44:ac:53:17:e6:b8:4c:e3:1b:
01:0a:df:65:f0:1e:29:1a:9b:ad:f3:2e:43:86:85:f9:f1:af:
25:39:93:87:25:72:bf:59:f4:29:5c:88:14:28:10:b9:db:82:
ba:8e:ea:ab:c9:e5:bc:10:f5:25:42:6b:9f:b5:2b:96:18:9b:
30:a1:60:d5:e7:1a:d6:3c:5c:3b:e8:d8:eb:d9:3f:39:ae:c9:
14:98:18:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 09:17:36 2026 by rpki-client