
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/13B4125A4A5311F08B06EF0FC4F9AE02.roa
File: 13B4125A4A5311F08B06EF0FC4F9AE02.roa (raw, json)
Hash identifier: KFUjr9QWRsxI527gU0QRbojtiksV6rD5duzhhoB/lus=
Subject key identifier: 0B:35:33:F1:29:60:E9:4D:FB:1A:1A:69:91:5E:6D:2B:A0:42:41:02
Certificate issuer: /CN=A91608B2/serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B
Certificate serial: E5
Authority key identifier: 29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/13B4125A4A5311F08B06EF0FC4F9AE02.roa
Signing time: Fri 21 Aug 2026 07:59:08 +0000
ROA not before: Fri 21 Aug 2026 07:59:08 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 139037
IP address blocks: 103.138.200.0/24 maxlen: 24
103.138.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl
rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:47:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91608B2, serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B
Validity
Not Before: Aug 21 07:59:08 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a88054b-a1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:f0:06:11:9c:e9:7e:a7:17:d9:b1:e1:fb:
8f:0b:19:33:45:64:7a:d4:8f:8d:b0:fd:88:41:36:
9c:a7:17:49:bc:c1:d2:23:36:e6:15:00:e8:a8:48:
63:47:5c:2d:aa:6e:45:7a:36:39:eb:26:f9:ed:69:
81:55:30:57:b6:f0:7f:ff:76:e1:cd:9d:3a:a3:99:
33:f1:05:6f:00:c9:a0:d9:96:ba:31:03:8b:3f:f7:
f8:2b:07:53:dc:ea:95:04:4a:80:e8:23:12:9f:9e:
2a:27:2a:05:cf:f7:cc:76:18:5d:d6:c8:07:c6:dc:
0f:e1:1c:b5:a7:75:51:6c:74:f2:65:a4:90:c8:f1:
8e:85:63:4c:23:f6:31:d8:24:12:68:90:e0:9c:45:
9e:b6:bc:d0:c3:ad:c2:d7:b5:bf:fa:85:56:03:20:
fa:8b:4b:56:fc:fe:66:2b:f2:50:87:a3:d6:9a:0a:
4c:36:8d:53:31:84:40:f9:25:c0:22:39:b9:9d:37:
f5:df:b1:39:52:e2:97:50:ce:3e:8a:ee:ca:e1:29:
a0:a4:f2:b1:e8:48:7c:25:01:c2:b3:71:d8:b4:62:
19:62:4a:f4:90:30:a8:56:ef:22:2c:ca:ec:10:7a:
6a:19:c4:8a:13:77:ae:8f:96:8a:63:36:c6:90:48:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:35:33:F1:29:60:E9:4D:FB:1A:1A:69:91:5E:6D:2B:A0:42:41:02
X509v3 Authority Key Identifier:
keyid:29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/13B4125A4A5311F08B06EF0FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.200.0/23
Signature Algorithm: sha256WithRSAEncryption
18:39:f9:52:63:24:22:93:88:74:43:20:71:48:af:af:8f:dc:
c3:9c:a9:5e:59:e6:da:c8:2a:46:45:a0:37:c6:47:1c:0d:cd:
38:f4:7d:68:bc:e9:3b:c0:56:cb:45:d2:a0:62:69:d4:2d:5b:
8b:a1:45:58:57:0c:7e:0a:a3:64:15:85:a0:87:ff:27:04:51:
03:44:89:b3:37:d4:f1:7c:48:4b:7e:50:57:d1:6a:fd:81:32:
cb:64:6c:e6:47:81:55:1f:36:8e:bb:da:41:5e:60:ae:57:b4:
10:9c:06:ba:24:7c:68:ae:6e:b8:a9:3a:7e:62:20:d7:55:92:
ce:8f:ff:f9:18:0e:07:4e:bf:c3:cc:32:bc:f0:47:2b:ab:a9:
2e:b6:47:eb:bf:f5:c2:3d:91:15:69:17:87:7f:73:72:61:9e:
4a:76:95:63:b7:14:cf:10:83:32:d4:d5:58:fd:1d:81:69:17:
d8:af:16:a9:86:ea:ed:96:4c:cc:c0:02:59:6a:70:f4:9f:72:
73:53:ab:b7:f7:48:b3:c8:b3:64:f9:1f:cc:1b:26:25:2c:72:
c3:79:c4:05:0b:23:ed:9b:e8:97:78:f2:bd:81:c5:29:2a:6e:
b8:6d:bf:cb:fe:13:72:1f:e9:87:e4:46:fe:03:5b:44:4c:5b:
88:fd:84:95
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA4QjIxMTAvBgNVBAUTKDI5QzlCMzM3RDY3QjBGMTQ0NDgxNzk4QjRENUIwRDcz
RDc4OEFGMkIwHhcNMjYwODIxMDc1OTA4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg4MDU0Yi1hMWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxn3wBhGc6X6nF9mx4fuPCxkzRWR61I+NsP2IQTacpxdJvMHSIzbmFQDoqEhj
R1wtqm5FejY56yb57WmBVTBXtvB//3bhzZ06o5kz8QVvAMmg2Za6MQOLP/f4KwdT
3OqVBEqA6CMSn54qJyoFz/fMdhhd1sgHxtwP4Ry1p3VRbHTyZaSQyPGOhWNMI/Yx
2CQSaJDgnEWetrzQw63C17W/+oVWAyD6i0tW/P5mK/JQh6PWmgpMNo1TMYRA+SXA
Ijm5nTf137E5UuKXUM4+iu7K4SmgpPKx6Eh8JQHCs3HYtGIZYkr0kDCoVu8iLMrs
EHpqGcSKE3euj5aKYzbGkEhU9wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAs1M/Ep
YOlN+xoaaZFebSugQkECMB8GA1UdIwQYMBaAFCnJszfWew8URIF5i01bDXPXiK8r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDhCMi9DOTVBNDlBRTRB
NTIxMUYwOTg5RDcwMEZDNEY5QUUwMi9LY216TjlaN0R4UkVnWG1MVFZzTmM5ZUly
eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tjbXpOOVo3RHhSRWdYbUxUVnNOYzllSXJ5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjA4QjIvQzk1QTQ5QUU0QTUyMTFGMDk4OUQ3MDBGQzRGOUFFMDIvMTNCNDEyNUE0
QTUzMTFGMDhCMDZFRjBGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ4rIMA0GCSqGSIb3DQEBCwUAA4IBAQAYOflSYyQik4h0QyBxSK+v
j9zDnKleWebayCpGRaA3xkccDc049H1ovOk7wFbLRdKgYmnULVuLoUVYVwx+CqNk
FYWgh/8nBFEDRImzN9TxfEhLflBX0Wr9gTLLZGzmR4FVHzaOu9pBXmCuV7QQnAa6
JHxorm64qTp+YiDXVZLOj//5GA4HTr/DzDK88Ecrq6kutkfrv/XCPZEVaReHf3Ny
YZ5KdpVjtxTPEIMy1NVY/R2BaRfYrxaphurtlkzMwAJZanD0n3JzU6u390izyLNk
+R/MGyYlLHLDecQFCyPtm+iXePK9gcUpKm64bb/L/hNyH+mH5Eb+A1tETFuI/YSV
-----END CERTIFICATE-----
Generated at Wed Oct 7 14:32:31 2026 by rpki-client