
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/670793E8F0EC11EFB7FBC612C4F9AE02.roa
File: 670793E8F0EC11EFB7FBC612C4F9AE02.roa (raw, json)
Hash identifier: dqWOzU0Hk4FU69te54sGPE+inxaGG4JuV2n7is/nqYI=
Subject key identifier: 51:B4:0A:14:BA:03:A2:7D:9B:4F:35:3D:AA:C5:53:3B:3A:E5:C2:ED
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 26F3
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/670793E8F0EC11EFB7FBC612C4F9AE02.roa
Signing time: Tue 10 Mar 2026 17:22:30 +0000
ROA not before: Tue 10 Mar 2026 17:22:30 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 1221
IP address blocks: 103.138.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Mar 2026 17:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9971 (0x26f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Mar 10 17:22:30 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69b05355-060c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:27:00:4d:b9:c1:62:8e:64:1e:5c:37:0b:
27:ae:1f:3c:a4:76:15:85:66:ca:9e:e6:e1:1e:99:
7e:f2:b8:f8:a7:57:18:60:88:55:98:eb:ce:b3:e5:
79:d7:cd:55:7e:61:93:6b:f3:45:37:33:21:e3:b2:
15:96:1d:9a:2f:c3:90:81:07:a2:27:eb:1f:74:e0:
ec:65:22:ec:23:a9:93:e3:b2:a0:e1:ee:d5:31:6b:
a7:2e:ef:ac:21:65:dc:0f:fe:e6:18:34:f6:07:98:
87:e0:eb:0c:d1:3d:8b:ab:b6:19:76:e5:6d:4d:f5:
6b:c0:1d:0a:21:31:d2:d6:a0:8f:28:5c:84:8f:e8:
d9:05:25:24:ce:d1:a4:38:3a:55:e5:df:e0:0a:d8:
87:97:fe:6f:ea:e5:74:64:33:f7:dd:28:73:e8:7c:
44:03:20:99:1a:78:0c:32:c4:2f:52:57:c2:f0:00:
b4:10:0b:bf:7f:05:58:58:44:dd:6a:48:42:76:d5:
9d:bf:df:35:99:07:41:78:64:d0:f3:43:33:69:da:
49:eb:62:28:b7:7f:c9:55:1e:37:d7:18:da:f4:83:
0d:16:09:49:e6:87:32:6d:90:ff:73:b8:ea:e2:aa:
ce:58:43:eb:ed:d7:52:e2:dd:ed:00:84:82:21:49:
e1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B4:0A:14:BA:03:A2:7D:9B:4F:35:3D:AA:C5:53:3B:3A:E5:C2:ED
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/670793E8F0EC11EFB7FBC612C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
46:3f:f8:f2:6d:6f:88:17:86:22:d0:34:43:4e:3e:61:13:eb:
c6:6e:f1:2e:bf:1b:2c:33:27:aa:48:e0:dc:6d:84:e0:0c:89:
7b:27:bc:ea:41:31:6f:ac:ce:93:6c:4c:64:24:59:e7:95:ee:
98:c1:4a:8e:0a:f7:17:7a:3f:3c:02:3e:79:f7:90:33:9f:63:
a1:78:65:e3:f0:71:ff:aa:d7:55:c0:f1:f3:45:86:e7:be:57:
8b:6b:9d:24:f0:91:23:06:6a:85:4e:10:14:14:a6:cb:8d:61:
72:ef:fd:fa:d7:2b:94:e7:13:47:25:56:9a:23:d8:fd:5c:8b:
c3:37:b5:d4:61:7f:3e:85:3e:77:13:64:06:29:e9:3e:f6:59:
06:82:97:4e:5e:ee:d4:ea:a8:19:58:91:9e:61:a9:17:ca:76:
d4:4f:d2:9d:54:1d:18:b5:10:ab:46:cf:1a:22:2a:70:9f:0f:
3e:1b:5f:db:5e:7c:17:39:17:28:fe:a8:0d:a9:0c:2e:88:c4:
40:83:b0:09:0d:59:75:a0:7a:af:c3:df:33:46:20:4d:26:58:
2c:b6:45:d9:f3:32:b3:25:cd:07:45:19:ec:e8:64:31:5f:e3:
c7:48:b3:42:90:eb:df:00:7f:1a:bd:65:bc:86:fc:70:67:bb:
b6:00:41:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 11:40:53 2026 by rpki-client