
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/13D68EB430AB11F0A15DC75AC4F9AE02.roa
File: 13D68EB430AB11F0A15DC75AC4F9AE02.roa (raw, json)
Hash identifier: Df8chXaHVx7SlzUpc1kpONRIDx/OSWJIy+4OsePAPPY=
Subject key identifier: FC:48:37:55:3B:18:47:9C:D0:C4:79:4A:98:72:4F:87:25:09:D1:5C
Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Certificate serial: 0246
Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/13D68EB430AB11F0A15DC75AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:59:42 +0000
ROA not before: Sun 01 Mar 2026 04:22:48 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 214143
IP address blocks: 103.83.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl
rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 02:11:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Validity
Not Before: Mar 1 04:22:48 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a41c1e-03dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:d4:51:54:55:a1:df:84:6b:1e:3f:55:cb:
fe:54:14:7d:36:fe:5a:36:90:0e:69:c8:5d:41:d5:
ea:3e:03:14:57:fa:67:6a:5e:66:cc:43:87:da:b7:
00:a4:97:3f:55:d6:51:8f:ae:23:79:61:3d:0f:2e:
fe:db:48:53:08:fd:f7:98:a2:52:bc:d4:c8:ff:20:
9b:9e:5e:ab:1f:75:5b:9d:a6:21:6b:21:22:3c:3d:
ea:4e:d0:b4:12:31:50:2a:b1:76:76:eb:8c:5f:87:
c0:72:6b:ca:08:e5:40:d6:3a:50:ea:40:67:40:c3:
6a:e7:8b:0e:be:85:c0:c9:7c:61:43:b1:1f:c9:a2:
78:13:59:1f:3f:12:6b:8b:da:80:44:81:6b:05:ad:
14:7d:a5:01:15:00:5f:65:92:fb:cf:da:df:90:b7:
da:7f:e4:ee:e6:e4:95:77:4a:0f:55:44:a5:6c:03:
71:c5:ea:80:a1:e5:48:2e:74:0f:b2:3e:4d:0c:fc:
4e:6e:39:13:08:d1:36:d7:e9:60:0c:11:fc:b9:a7:
1f:bf:86:04:0a:64:51:50:d4:aa:89:de:ec:51:de:
f7:19:90:ff:a4:31:ec:d7:62:97:c2:1d:6f:02:c5:
85:12:d4:fc:0d:0e:0d:07:9e:e6:78:52:f2:5f:81:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:48:37:55:3B:18:47:9C:D0:C4:79:4A:98:72:4F:87:25:09:D1:5C
X509v3 Authority Key Identifier:
keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/13D68EB430AB11F0A15DC75AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.42.0/24
Signature Algorithm: sha256WithRSAEncryption
16:1b:a7:a4:1a:4c:4b:fe:91:44:50:2a:14:5c:e4:04:6c:1a:
0e:da:29:88:ff:ef:7e:05:90:b2:2e:33:7e:c9:da:3a:b7:b4:
64:69:ae:52:0c:63:d7:ed:fd:cb:5b:04:d5:66:5e:84:d2:18:
94:d5:2b:5f:5e:5d:a3:f5:e9:8d:b9:27:e4:69:b4:d4:20:4b:
53:cb:ed:eb:cf:aa:26:e0:7d:03:25:f8:d4:f2:5d:10:dc:8e:
79:69:9a:02:41:33:d6:1a:a5:b6:ce:d2:86:c6:02:46:11:db:
9c:7c:ea:df:ee:95:36:7f:07:78:d1:82:eb:68:58:f4:01:58:
d2:13:8e:44:2b:02:ae:fa:a9:79:72:c8:b1:48:18:5c:39:6b:
68:6a:aa:f2:3b:97:85:7f:25:08:67:f8:a6:65:3f:e8:06:16:
c7:fa:6c:ed:ad:15:19:06:c2:91:68:be:ee:51:28:4c:55:38:
a7:fd:45:36:63:32:41:68:d5:80:49:18:66:a3:01:2b:6a:2c:
af:8f:1f:bc:e5:29:1f:92:4d:7e:9a:db:22:ce:e7:8b:bf:d1:
54:80:6c:86:7e:d9:46:11:3e:a5:8a:a6:a8:be:4c:9a:f5:83:
7f:b2:f4:e0:6a:ce:14:d1:72:c6:2a:d2:66:ee:4f:f9:88:cb:
01:f3:61:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 15:02:59 2026 by rpki-client