
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/038C732E874611EB83B41D39C4F9AE02.roa
File: 038C732E874611EB83B41D39C4F9AE02.roa (raw, json)
Hash identifier: j8BYrRTXBbaeTTqgpqoP0f1iBbPMGpxA0WeG0MfgZmQ=
Subject key identifier: 49:B2:BC:2B:86:95:2D:F2:61:77:40:74:F8:86:17:84:64:A5:ED:A3
Certificate issuer: /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B
Certificate serial: 0803
Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/038C732E874611EB83B41D39C4F9AE02.roa
Signing time: Thu 04 Jun 2026 21:27:28 +0000
ROA not before: Thu 04 Jun 2026 21:27:28 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 135351
IP address blocks: 103.214.208.0/22 maxlen: 24
144.48.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl
rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2051 (0x803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113B73, serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B
Validity
Not Before: Jun 4 21:27:28 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a21edbf-12ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:1a:32:40:47:bc:d6:39:a1:4a:23:4a:c1:
74:11:e4:c4:e0:e6:c5:d7:f0:14:74:dd:15:d0:4d:
c3:81:e4:03:2e:a1:bc:8d:05:29:cd:ce:75:52:6c:
34:3a:46:26:c8:ec:6f:bb:4f:f2:cf:a6:11:04:f9:
fb:07:27:70:a8:a9:71:80:78:9b:a4:ce:d6:8d:15:
d0:d8:76:32:62:a6:8d:36:a4:31:27:e1:02:a0:57:
3a:49:9b:a1:5e:cb:32:39:67:9f:d1:4a:bd:d0:dc:
e2:a0:c8:a9:b5:37:a0:3e:71:fe:f7:c8:2a:1c:0b:
77:47:08:4d:4c:56:5c:21:07:94:0d:d7:bb:3f:02:
39:6a:f9:2f:47:64:ed:0a:87:47:de:4c:f4:43:79:
a9:1a:45:f4:cf:4c:56:58:06:d5:6d:b7:ab:c8:5f:
b0:50:b9:b1:ec:0f:e1:c6:bd:ea:6f:a5:5b:b7:6b:
22:92:ee:8e:4f:26:48:ab:92:41:7c:34:e2:1a:02:
f4:56:1b:05:cf:62:89:ec:bf:48:ad:af:5f:b7:9d:
11:6e:21:aa:49:1c:6d:e1:7d:1e:0d:26:06:38:76:
11:98:89:3f:78:ca:71:37:7b:0a:45:1c:5b:73:f1:
03:37:13:45:bd:a4:93:db:74:42:01:85:c5:d7:15:
5e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B2:BC:2B:86:95:2D:F2:61:77:40:74:F8:86:17:84:64:A5:ED:A3
X509v3 Authority Key Identifier:
keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/038C732E874611EB83B41D39C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.214.208.0/22
144.48.152.0/22
Signature Algorithm: sha256WithRSAEncryption
21:32:eb:da:0b:45:ec:96:12:b6:b2:0a:0b:31:d7:4a:91:d3:
00:61:63:ae:fa:d2:3b:e5:07:ac:3b:f8:0b:01:da:e6:a6:51:
e5:58:80:08:79:cd:95:b6:e3:b4:76:bf:1b:78:40:b0:d0:2e:
c0:19:36:c8:2d:9e:fc:cd:b7:4e:76:d5:de:ba:75:dc:02:5d:
34:6c:51:ef:96:2c:c1:2d:20:cf:9d:18:e7:e3:33:5c:29:7a:
d0:d4:86:11:c2:c8:a8:c8:0e:1f:94:9a:1a:7d:8a:0d:18:4b:
ef:b1:fa:d1:76:73:17:b8:12:da:3c:77:1b:f0:4d:b0:ca:e4:
d1:a6:45:d5:e6:25:d1:55:da:cb:ab:6e:6a:ad:80:77:a0:cc:
b4:68:98:9e:c8:2c:6b:c3:fd:cb:de:13:f3:96:1e:0f:55:02:
9e:d9:55:46:ce:6f:ed:e3:22:c6:bc:e4:bf:3d:bd:be:2c:ce:
04:55:a7:bc:d6:fd:b1:88:a8:4e:ea:b0:a5:32:35:3f:3e:98:
25:2f:36:30:7b:b6:5e:d6:6c:16:69:df:7c:d0:54:e1:c1:fd:
5f:1f:54:23:8f:4a:7d:86:d1:b3:6e:87:43:8c:34:34:44:22:
fb:d9:b8:c0:45:38:f9:e3:91:ff:18:98:0f:d8:67:69:69:41:
ef:8a:f6:78
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNCNzMxMTAvBgNVBAUTKDQyQ0I0Q0YwMjFGNkYzRkMwQzgxQzRGREYxQzk3RDc0
MjEwMDMxN0IwHhcNMjYwNjA0MjEyNzI4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIxZWRiZi0xMmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApS4aMkBHvNY5oUojSsF0EeTE4ObF1/AUdN0V0E3DgeQDLqG8jQUpzc51Umw0
OkYmyOxvu0/yz6YRBPn7BydwqKlxgHibpM7WjRXQ2HYyYqaNNqQxJ+ECoFc6SZuh
XssyOWef0Uq90NzioMiptTegPnH+98gqHAt3RwhNTFZcIQeUDde7PwI5avkvR2Tt
CodH3kz0Q3mpGkX0z0xWWAbVbberyF+wULmx7A/hxr3qb6Vbt2siku6OTyZIq5JB
fDTiGgL0VhsFz2KJ7L9Ira9ft50RbiGqSRxt4X0eDSYGOHYRmIk/eMpxN3sKRRxb
c/EDNxNFvaST23RCAYXF1xVevQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEmyvCuG
lS3yYXdAdPiGF4Rkpe2jMB8GA1UdIwQYMBaAFELLTPAh9vP8DIHE/fHJfXQhADF7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0I3My9CQTYzNTk4MjJG
RTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhfd01nY1Q5OGNsOWRDRUFN
WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FzdE04Q0gyOF93TWdjVDk4Y2w5ZENFQU1Ycy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTNCNzMvQkE2MzU5ODIyRkU0MTFFQjhEQjQxQjI1QzRGOUFFMDIvMDM4QzczMkU4
NzQ2MTFFQjgzQjQxRDM5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ9bQAwQCkDCYMA0GCSqGSIb3DQEBCwUAA4IBAQAhMuvaC0XslhK2
sgoLMddKkdMAYWOu+tI75QesO/gLAdrmplHlWIAIec2VtuO0dr8beECw0C7AGTbI
LZ78zbdOdtXeunXcAl00bFHvlizBLSDPnRjn4zNcKXrQ1IYRwsioyA4flJoafYoN
GEvvsfrRdnMXuBLaPHcb8E2wyuTRpkXV5iXRVdrLq25qrYB3oMy0aJieyCxrw/3L
3hPzlh4PVQKe2VVGzm/t4yLGvOS/Pb2+LM4EVae81v2xiKhO6rClMjU/PpglLzYw
e7Ze1mwWad980FThwf1fH1Qjj0p9htGzbodDjDQ0RCL72bjARTj545H/GJgP2Gdp
aUHvivZ4
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:36 2026 by rpki-client