
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D4B094F697E011ED9EFB180DC4F9AE02.roa
File: D4B094F697E011ED9EFB180DC4F9AE02.roa (raw, json)
Hash identifier: ckGk6YnhoYmIlN6MXCa0OzYZwJ4c+LTg67ZDBKKjmnw=
Subject key identifier: 18:20:9F:1D:6D:59:96:E7:EF:56:E8:95:1E:D9:8B:9C:D4:26:CD:38
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 26F9
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D4B094F697E011ED9EFB180DC4F9AE02.roa
Signing time: Tue 10 Mar 2026 17:22:40 +0000
ROA not before: Tue 10 Mar 2026 17:22:40 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 4294966666
IP address blocks: 103.138.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Mar 2026 17:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9977 (0x26f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Mar 10 17:22:40 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69b05360-ccb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3a:43:fd:40:8c:17:7a:7a:b6:0a:b1:03:91:
54:31:1a:e5:90:2b:2c:d2:0d:18:b4:e1:4a:78:c0:
53:66:04:79:ae:db:87:47:6e:55:71:56:9c:e9:5f:
b3:ac:8e:62:31:fd:ed:d2:e4:3f:d2:85:e9:6b:c5:
d5:85:1c:14:65:63:21:c3:b9:d9:dc:7e:7d:13:e2:
96:6f:62:7c:f5:c8:dc:75:01:2b:df:6c:55:43:89:
93:e3:34:b2:38:5c:40:90:51:6c:52:1b:e6:79:a8:
b0:72:3a:44:d9:10:60:3e:67:c3:27:ca:6a:8c:c3:
4b:dd:cf:5e:4a:16:16:e0:09:b5:c1:3d:8b:b2:d4:
75:80:18:d2:26:53:9b:b3:ed:30:fa:ff:91:f4:e1:
99:c8:c9:fa:e8:be:ca:5a:21:ef:d2:ff:45:81:19:
73:82:0c:92:7c:c7:b8:b8:d8:2d:9a:8d:85:b8:93:
b6:54:3e:03:5c:b3:9e:0d:a9:6d:32:40:e6:fb:e9:
36:d6:c4:ca:e2:90:fa:9b:7c:36:02:7d:35:80:f2:
67:49:9e:33:ec:ae:23:51:ee:36:a6:da:d7:54:da:
ba:bb:9b:c4:76:8b:71:93:d4:83:e4:a2:01:ed:e8:
a3:88:00:e9:2f:b5:fa:cd:52:08:e5:59:f2:48:2e:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:20:9F:1D:6D:59:96:E7:EF:56:E8:95:1E:D9:8B:9C:D4:26:CD:38
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D4B094F697E011ED9EFB180DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:53:04:fb:2e:25:85:80:26:2e:59:be:9d:c0:f1:dd:14:46:
90:bb:de:14:10:a3:57:1c:86:04:68:55:07:ca:71:6e:3e:57:
9f:c9:03:7b:5f:d1:f9:71:72:47:d5:63:1b:e5:fb:9e:8a:95:
1b:73:e3:25:4e:c9:8b:57:88:a8:18:1c:8f:c1:51:f5:85:91:
a1:d3:ea:eb:b1:fa:3b:39:b1:85:76:96:fd:1d:27:6a:97:2d:
43:1f:4b:ca:23:4c:49:fb:5e:3b:15:17:e3:e6:70:8c:62:46:
38:dc:bd:e1:d6:56:83:46:0a:bd:82:50:e1:fa:b5:f0:43:0a:
85:06:34:61:77:dd:1a:b9:7e:b8:38:67:9e:b1:1c:1c:c6:70:
b0:cf:10:cd:05:9c:9e:5d:bc:22:c3:e8:31:ab:cf:1b:96:1a:
7c:8a:3c:88:f3:57:c5:74:b5:a3:3d:79:52:5c:b0:39:df:d5:
68:b0:31:1f:69:ee:60:44:8d:5d:2c:80:23:05:e7:97:7a:12:
5c:5b:3d:bc:46:98:c7:97:d2:25:4c:e7:01:74:d0:8b:9f:77:
1e:fa:f0:c1:6b:e5:56:e6:69:11:5e:c9:b9:5b:bf:e9:5a:1a:
e4:78:b0:71:2a:d2:14:52:6f:d7:03:22:c5:b7:06:ac:28:9c:
29:be:df:af
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICJvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw
RDNEOEE2RDAwHhcNMjYwMzEwMTcyMjQwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWIwNTM2MC1jY2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjzpD/UCMF3p6tgqxA5FUMRrlkCss0g0YtOFKeMBTZgR5rtuHR25VcVac6V+z
rI5iMf3t0uQ/0oXpa8XVhRwUZWMhw7nZ3H59E+KWb2J89cjcdQEr32xVQ4mT4zSy
OFxAkFFsUhvmeaiwcjpE2RBgPmfDJ8pqjMNL3c9eShYW4Am1wT2LstR1gBjSJlOb
s+0w+v+R9OGZyMn66L7KWiHv0v9FgRlzggySfMe4uNgtmo2FuJO2VD4DXLOeDalt
MkDm++k21sTK4pD6m3w2An01gPJnSZ4z7K4jUe42ptrXVNq6u5vEdotxk9SD5KIB
7eijiADpL7X6zVII5VnySC52wwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBggnx1t
WZbn71bolR7Zi5zUJs04MB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC
N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0I4MDUvRjgwNzZCOEE3QjdCMTFFOThCNkVDMDc0QzRGOUFFMDIvRDRCMDk0RjY5
N0UwMTFFRDlFRkIxODBEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4rSMA0GCSqGSIb3DQEBCwUAA4IBAQClUwT7LiWFgCYuWb6dwPHd
FEaQu94UEKNXHIYEaFUHynFuPlefyQN7X9H5cXJH1WMb5fueipUbc+MlTsmLV4io
GByPwVH1hZGh0+rrsfo7ObGFdpb9HSdqly1DH0vKI0xJ+147FRfj5nCMYkY43L3h
1laDRgq9glDh+rXwQwqFBjRhd90auX64OGeesRwcxnCwzxDNBZyeXbwiw+gxq88b
lhp8ijyI81fFdLWjPXlSXLA539VosDEfae5gRI1dLIAjBeeXehJcWz28RpjHl9Il
TOcBdNCLn3ce+vDBa+VW5mkRXsm5W7/pWhrkeLBxKtIUUm/XAyLFtwasKJwpvt+v
-----END CERTIFICATE-----
Generated at Thu Mar 19 11:39:55 2026 by rpki-client