
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/6B4669CE7B7D11E99F99E776C4F9AE02.roa
File: 6B4669CE7B7D11E99F99E776C4F9AE02.roa (raw, json)
Hash identifier: wWiBrsPclt2HSsmAyI8LNqC2U3qAaeghLY8UH+OtrWo=
Subject key identifier: 8E:31:80:2C:B1:77:60:A1:5B:31:4F:4C:E6:6C:81:E7:C0:C2:43:AD
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 26F2
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/6B4669CE7B7D11E99F99E776C4F9AE02.roa
Signing time: Tue 10 Mar 2026 17:22:28 +0000
ROA not before: Tue 10 Mar 2026 17:22:28 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 103.138.210.0/24 maxlen: 24
2001:df0:5580::/48 maxlen: 48
2001:df0:5580:400::/54 maxlen: 54
2001:df0:5580:c00::/54 maxlen: 54
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Mar 2026 17:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9970 (0x26f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Mar 10 17:22:28 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69b05353-b6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:98:97:08:d2:b3:2e:cd:a3:fb:e0:ac:5c:52:
64:da:2f:2d:2a:82:72:eb:48:f7:22:78:cd:b3:2f:
b9:30:ff:32:08:86:93:49:b5:fd:e2:b7:78:8d:f5:
e3:b3:69:0e:bc:df:8c:30:b4:2a:23:ef:2d:f4:65:
4c:73:68:03:ee:29:22:41:83:b8:90:8f:fc:c2:cb:
ce:d2:ac:12:8b:bf:13:e0:94:ef:77:d6:1e:1d:bf:
28:3c:ee:7f:a2:c6:e3:53:4f:49:3e:c5:80:fe:61:
49:bf:7b:56:a3:81:04:b7:e3:a6:8c:b3:56:8c:79:
a9:e1:e5:24:83:ca:7c:99:a9:52:be:58:a7:ea:0c:
c7:0d:e7:9a:9e:cc:90:13:18:87:bf:e0:52:95:24:
d7:30:b5:0a:a3:5a:fe:ac:43:0f:a5:ed:bb:30:6d:
f9:79:1a:7a:51:c9:73:44:62:52:66:49:06:a9:d7:
7b:e8:01:b4:2d:ef:f4:97:36:46:cf:5a:62:05:14:
06:98:e7:32:a3:2c:56:9b:2e:ed:8b:40:9a:70:6c:
f6:0f:70:65:b2:44:de:b6:cc:66:2e:14:75:2c:09:
78:bc:a6:78:05:45:e1:08:f5:b7:fc:b7:98:44:4b:
01:78:59:a1:b2:e3:e4:a0:7a:84:0f:48:2e:10:8d:
1e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:31:80:2C:B1:77:60:A1:5B:31:4F:4C:E6:6C:81:E7:C0:C2:43:AD
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/6B4669CE7B7D11E99F99E776C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
IPv6:
2001:df0:5580::/48
Signature Algorithm: sha256WithRSAEncryption
64:95:08:fc:74:92:3f:c5:b8:b7:e8:ea:2c:cc:27:9a:bb:84:
52:91:20:70:ae:be:30:86:14:c9:b4:30:2b:f9:57:cd:35:4a:
8c:c7:77:b3:6b:c8:f4:64:77:36:ba:a5:6d:6a:05:34:6b:49:
c6:83:1d:2b:ea:7e:4e:f0:b0:09:e5:80:e6:c3:99:1f:3b:98:
64:2f:06:d5:4f:a8:6d:a4:84:90:7b:ae:a6:9f:8b:62:a7:e4:
8c:12:6d:db:d0:81:b2:21:59:8b:74:53:28:1c:11:1c:47:3b:
0a:b4:43:31:75:8b:55:2a:db:de:24:42:29:27:b3:6d:a4:55:
38:62:6f:a3:43:89:a6:f4:dc:80:4b:ca:db:09:ca:da:89:19:
e6:cf:dc:0a:8f:47:ce:73:a1:3e:3b:8f:38:81:da:52:f5:3c:
43:19:7a:b7:5f:01:cc:50:05:30:7f:d9:5b:9b:81:a2:b0:a6:
e6:c0:29:e5:31:72:d9:e6:c1:ee:6e:c0:24:f1:fa:db:1f:e7:
26:85:58:12:76:bc:3c:bd:b3:20:05:22:a3:46:72:dc:85:f6:
7b:d1:88:ef:bb:3e:30:39:59:6f:7c:2d:e6:d5:c9:02:4a:4e:
9e:12:3c:58:5e:73:3a:4d:cc:65:d0:e4:31:c7:dd:4d:53:20:
d8:86:fe:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 11:43:02 2026 by rpki-client