
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/833D8D9AC72711EA8890F311C4F9AE02.roa
File: 833D8D9AC72711EA8890F311C4F9AE02.roa (raw, json)
Hash identifier: 2+qbZiryee/w2sIlZ9zRWy4A2NYBRXm5chsE8+52bvE=
Subject key identifier: 39:F8:CC:83:7C:22:14:28:B0:78:A3:A8:FF:07:CE:7A:BB:57:28:9D
Certificate issuer: /CN=A913A74D/serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
Certificate serial: 094E
Authority key identifier: D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/833D8D9AC72711EA8890F311C4F9AE02.roa
Signing time: Wed 12 Aug 2026 20:40:08 +0000
ROA not before: Wed 12 Aug 2026 20:40:08 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 131240
IP address blocks: 103.68.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl
rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2382 (0x94e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A74D, serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
Validity
Not Before: Aug 12 20:40:08 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a7cda28-041a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:60:9b:f9:b4:e3:c7:55:ab:2b:3e:74:eb:
bb:f6:c2:45:f7:32:0a:43:c6:bc:2f:9d:79:76:38:
ac:7f:05:2c:e6:1c:bd:f0:27:ee:00:08:fc:ec:98:
47:c5:bd:ea:d5:7f:9d:8d:57:a5:db:9b:5d:f3:e2:
4c:dd:5b:d3:ed:ad:c0:f7:d8:c2:fb:6e:06:ab:ca:
7d:6a:ed:9b:22:84:ed:8c:d7:dd:e0:83:a6:32:32:
73:22:f4:12:98:98:0f:24:9f:39:c2:3c:0d:bd:5d:
df:1c:34:51:2d:6c:ea:db:2b:ea:c4:da:c6:8c:8b:
37:ca:17:fc:9c:06:1a:20:d3:46:a4:0d:ec:04:bd:
a2:9d:33:6a:9a:70:69:ee:77:a5:fb:4d:21:d5:27:
f3:91:1f:1c:de:c9:59:bd:3b:79:0c:4f:a0:96:4e:
0c:93:5c:7b:19:1f:14:f9:56:ab:24:f6:52:aa:3a:
ae:48:2f:6a:f6:35:7b:1f:6a:0c:5c:50:dc:20:37:
5f:88:06:d2:12:8e:17:e1:ba:d9:10:a5:42:ac:ba:
cc:f7:a4:8b:de:c9:47:9f:6f:ad:4e:d5:dd:86:7a:
72:ef:17:ce:42:9e:78:da:6c:45:ba:14:9a:7b:3b:
47:c6:43:ac:19:1c:79:e8:a6:af:a1:a7:c8:e1:11:
ec:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F8:CC:83:7C:22:14:28:B0:78:A3:A8:FF:07:CE:7A:BB:57:28:9D
X509v3 Authority Key Identifier:
keyid:D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/833D8D9AC72711EA8890F311C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.68.107.0/24
Signature Algorithm: sha256WithRSAEncryption
70:4f:f1:19:8a:b9:29:58:60:bc:26:bd:f4:bc:1d:a6:02:2e:
f5:9a:94:d9:84:55:3f:c6:a7:a9:3e:ae:6d:f4:b4:0e:72:43:
13:85:31:e0:28:34:06:7b:fb:49:07:a9:57:8a:a2:72:24:b8:
50:33:a6:17:4c:1e:50:f2:a0:31:aa:92:15:81:54:d2:de:ee:
47:d1:e2:e9:1d:96:1a:9b:03:6f:9d:ef:ee:33:ba:e9:83:ab:
36:0b:47:a5:ef:95:83:45:32:d6:67:4c:90:f7:54:c7:c9:86:
9f:dc:05:44:56:27:30:23:6c:4b:1b:8a:a6:04:a5:04:70:1e:
db:d9:35:e5:a6:6d:db:0d:d1:92:d6:dd:f6:65:dd:96:c4:77:
a0:bb:2b:c5:b7:f1:d0:2d:9b:75:35:5f:13:79:60:8a:e0:75:
47:9e:e1:7a:25:b4:e0:db:35:a8:7e:42:04:8f:bf:c8:1f:8c:
15:94:ed:ab:80:83:b0:7f:81:9e:42:f7:89:9d:62:80:0b:0c:
37:2e:ec:fe:f2:c5:0a:6c:2e:7c:e4:bf:63:e1:6f:11:62:83:
4c:f5:3a:6a:46:c2:6e:7c:c5:d4:39:fb:6a:4f:28:b7:a5:96:
90:73:53:ce:4a:18:ed:0f:a5:92:4a:64:67:08:3a:34:f3:ae:
66:82:92:b1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E3NEQxMTAvBgNVBAUTKEQ1MDREODE5MDJCMTgzOEIyODJBRTlGNDVDNERDM0Y4
MTc4RTI0RUUwHhcNMjYwODEyMjA0MDA4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTdjZGEyOC0wNDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtE5gm/m048dVqys+dOu79sJF9zIKQ8a8L515djisfwUs5hy98CfuAAj87JhH
xb3q1X+djVel25td8+JM3VvT7a3A99jC+24Gq8p9au2bIoTtjNfd4IOmMjJzIvQS
mJgPJJ85wjwNvV3fHDRRLWzq2yvqxNrGjIs3yhf8nAYaINNGpA3sBL2inTNqmnBp
7nel+00h1SfzkR8c3slZvTt5DE+glk4Mk1x7GR8U+VarJPZSqjquSC9q9jV7H2oM
XFDcIDdfiAbSEo4X4brZEKVCrLrM96SL3slHn2+tTtXdhnpy7xfOQp542mxFuhSa
eztHxkOsGRx56KavoafI4RHsBwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDn4zIN8
IhQosHijqP8Hznq7VyidMB8GA1UdIwQYMBaAFNUE2BkCsYOLKCrp9FxNw/gXjiTu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTc0RC82OEExRDU1QUM3
MjYxMUVBOTk1NUU0MTBDNEY5QUUwMi8xUVRZR1FLeGc0c29LdW4wWEUzRC1CZU9K
TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFRVFlHUUt4ZzRzb0t1bjBYRTNELUJlT0pPNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0E3NEQvNjhBMUQ1NUFDNzI2MTFFQTk5NTVFNDEwQzRGOUFFMDIvODMzRDhEOUFD
NzI3MTFFQTg4OTBGMzExQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ0RrMA0GCSqGSIb3DQEBCwUAA4IBAQBwT/EZirkpWGC8Jr30vB2m
Ai71mpTZhFU/xqepPq5t9LQOckMThTHgKDQGe/tJB6lXiqJyJLhQM6YXTB5Q8qAx
qpIVgVTS3u5H0eLpHZYamwNvne/uM7rpg6s2C0el75WDRTLWZ0yQ91THyYaf3AVE
VicwI2xLG4qmBKUEcB7b2TXlpm3bDdGS1t32Zd2WxHeguyvFt/HQLZt1NV8TeWCK
4HVHnuF6JbTg2zWofkIEj7/IH4wVlO2rgIOwf4GeQveJnWKACww3Luz+8sUKbC58
5L9j4W8RYoNM9TpqRsJufMXUOftqTyi3pZaQc1POShjtD6WSSmRnCDo0865mgpKx
-----END CERTIFICATE-----
Generated at Tue Oct 6 23:27:30 2026 by rpki-client