
$ rpki-client -vvf rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/13B4125A4A5311F08B06EF0FC4F9AE02.roa
File: 13B4125A4A5311F08B06EF0FC4F9AE02.roa (raw, json)
Hash identifier: 9D74+8aEhg9Q1k4z+DDR3yMEpwq+MFOz5dIvRGDeuRg=
Subject key identifier: 42:81:04:16:4D:57:7B:B7:BD:48:47:63:A9:AE:5A:D6:B6:60:A7:95
Certificate issuer: /CN=A91608B2/serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B
Certificate serial: E1
Authority key identifier: 29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/13B4125A4A5311F08B06EF0FC4F9AE02.roa
Signing time: Mon 17 Aug 2026 07:55:47 +0000
ROA not before: Mon 17 Aug 2026 07:55:47 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 139037
IP address blocks: 103.138.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl
rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91608B2, serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B
Validity
Not Before: Aug 17 07:55:47 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a82be83-77db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:95:f6:fd:a4:25:d5:78:f4:2c:3a:76:9e:
e9:6b:36:08:07:6b:c4:e4:2a:3c:27:10:dc:90:20:
a3:8f:b4:8f:f6:7d:bb:8d:4d:0d:b7:d0:ff:61:5d:
ee:4d:36:63:83:fe:0b:8d:7e:ea:4b:a8:eb:b2:d6:
3d:f2:b2:91:d4:8c:9f:e2:37:8d:a7:a4:9b:33:5e:
b9:12:c8:76:b4:d5:01:56:ef:38:4c:2f:f3:c7:5a:
c2:45:99:14:6d:74:cb:e0:e5:31:9a:92:6a:81:97:
96:19:fd:7f:bd:64:dd:9d:c3:e5:95:df:6e:2b:bc:
15:84:0c:72:79:af:73:fe:54:7a:fa:26:f1:4b:7c:
f6:a8:ca:24:8f:5a:c4:d5:69:a3:80:e3:bf:81:8c:
cd:fc:44:99:2c:e2:0a:c0:9a:2f:53:62:cb:c4:ac:
3f:c0:6b:47:7f:51:4f:ef:9e:b6:ce:fe:e2:d0:c8:
57:d1:ca:6e:4e:92:b9:d9:75:80:ec:55:5c:00:56:
09:6e:4e:05:b7:27:44:42:8f:c2:eb:60:88:3a:1b:
df:37:ff:92:1d:13:16:28:f5:a3:58:1e:ec:e9:34:
28:3a:84:ef:fd:6c:93:f7:60:1b:6d:f8:4d:3a:24:
fd:d0:87:0d:b6:eb:cb:8f:95:a8:41:47:8b:e4:dd:
57:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:81:04:16:4D:57:7B:B7:BD:48:47:63:A9:AE:5A:D6:B6:60:A7:95
X509v3 Authority Key Identifier:
keyid:29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/13B4125A4A5311F08B06EF0FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.201.0/24
Signature Algorithm: sha256WithRSAEncryption
87:52:7a:e2:f1:8d:83:ac:95:93:f0:94:e4:0a:ed:20:b9:4a:
6c:4b:22:a6:9e:65:ea:8a:eb:c2:95:c8:e7:2c:0a:d2:c0:26:
b0:b9:d6:75:bd:17:39:bd:12:24:92:24:19:a8:9e:c5:57:84:
a4:05:0d:2f:b6:b7:cf:fb:ef:c0:e6:9a:fe:60:4f:41:b7:d4:
8c:ed:0a:66:a0:83:4d:2d:4b:0e:06:6d:5e:ed:68:e9:30:44:
23:39:5a:56:1c:9b:88:11:ff:8b:d5:82:e7:82:a0:a2:d0:7a:
e7:a8:bc:33:32:0e:96:2a:c1:d9:26:e5:40:b5:72:72:f1:0c:
ac:7d:c0:6a:48:cc:f0:ba:99:b1:1b:24:f4:a8:c7:65:1c:51:
48:9a:83:72:37:52:9c:fa:79:14:7e:8e:40:a6:de:d9:e1:b6:
c8:6f:60:26:b7:f4:ef:c8:d8:d8:a5:72:48:eb:6d:15:5a:0e:
22:fe:19:23:ad:36:ea:fa:c3:be:f2:65:a4:84:23:7b:c4:b9:
60:c4:2c:2d:b0:f0:ed:7b:2b:64:75:a6:4f:8d:e6:56:26:f7:
3f:4a:3c:7e:50:48:c1:22:8a:96:89:47:b0:64:83:a0:2d:6f:
b4:83:fa:10:0f:2d:15:89:d7:1d:a0:2d:2a:74:47:51:0f:56:
2b:40:85:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:46:33 2026 by rpki-client