
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/D758E96CF8FF11ED98C6D45FC4F9AE02.roa
File: D758E96CF8FF11ED98C6D45FC4F9AE02.roa (raw, json)
Hash identifier: mUW7mZkRK0183V8DRL68AAx4KDMDpyr2zgUqvRvduaY=
Subject key identifier: E5:D8:AD:FC:F3:DD:15:6E:77:21:D9:DA:BB:0D:8F:07:66:2E:76:34
Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Certificate serial: 059B
Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/D758E96CF8FF11ED98C6D45FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:05:53 +0000
ROA not before: Wed 10 Dec 2025 22:17:23 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 134711
IP address blocks: 103.12.188.0/22 maxlen: 22
103.197.144.0/22 maxlen: 22
220.158.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl
rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1435 (0x59b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE13, serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Validity
Not Before: Dec 10 22:17:23 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a471f1-8ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:92:4e:c9:a7:ea:84:49:01:ad:ae:29:66:
ae:1a:b6:af:e2:ce:ef:bc:bf:73:95:0d:ad:fb:bb:
57:db:34:9c:74:66:c4:0c:10:c8:54:ea:0c:67:43:
da:40:35:c8:ef:c3:25:f8:f0:5d:54:a6:f8:de:b3:
4b:5c:8f:c0:78:01:8d:33:01:f4:ba:3a:77:78:f4:
a7:6d:dd:ff:66:d4:3d:ae:57:8f:7b:4e:3a:3b:66:
57:64:06:90:89:1b:66:e0:5c:a9:3e:c2:04:a7:b0:
e6:08:25:72:9d:53:ec:ea:44:a9:3e:4d:7c:a4:27:
2a:e5:d3:78:bb:cb:e8:a6:06:0d:8a:21:17:71:e4:
12:09:75:e1:6f:40:d9:65:9e:33:a6:19:36:a1:76:
f7:ab:1e:f5:d5:ed:46:07:37:fc:74:18:f8:6b:88:
e0:19:2f:f4:10:9a:6b:d4:4d:63:34:55:87:ad:49:
98:2e:ad:6e:96:f1:4d:8e:f2:6c:8b:b3:29:e0:34:
b2:f7:cc:7b:4a:11:e2:cb:e6:8d:66:e1:57:18:e3:
09:c4:40:97:bf:cd:d1:d8:47:88:d3:4b:59:7e:7b:
92:b8:60:5a:7c:60:68:7e:9d:6b:aa:75:8b:06:ae:
fc:7f:9d:36:5c:aa:00:67:73:f2:e2:5a:16:3d:f9:
4e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D8:AD:FC:F3:DD:15:6E:77:21:D9:DA:BB:0D:8F:07:66:2E:76:34
X509v3 Authority Key Identifier:
keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/D758E96CF8FF11ED98C6D45FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.188.0/22
103.197.144.0/22
220.158.188.0/22
Signature Algorithm: sha256WithRSAEncryption
57:d3:e4:a8:6c:c8:3f:69:20:ef:71:80:81:41:16:75:31:6c:
66:6d:ef:db:2e:28:18:b5:27:08:4b:0b:2b:62:f8:5e:cb:76:
a3:72:13:85:71:d5:a4:26:84:20:bc:e3:41:64:cd:27:7a:19:
3f:86:a6:9d:b7:31:b8:44:ba:c7:42:4e:6c:0c:54:a2:8e:61:
ad:a3:a1:37:ca:12:5b:5c:d4:95:46:eb:1f:d7:d6:cf:9a:75:
6e:87:e7:f5:6d:92:cd:1e:ea:0b:2d:b3:e5:ea:8a:0d:74:86:
84:58:66:ed:bd:a3:a7:bf:45:1c:cb:56:17:6b:b6:53:94:06:
43:e5:ec:c1:14:cd:7f:34:da:84:f0:46:1f:59:5d:e5:91:3d:
c8:6a:44:70:0d:c7:34:11:3c:7a:78:60:b9:57:7f:49:b0:00:
91:e1:c1:56:b6:fb:1c:5a:c0:f3:36:b3:ca:4e:80:9b:71:79:
69:1d:9b:b2:f2:be:2d:a8:23:31:e1:41:2b:b4:5e:2d:79:b2:
a6:9f:c7:80:33:99:50:e6:d0:36:1a:6d:4a:00:66:b7:9d:96:
fb:5e:f5:2c:1e:48:eb:25:04:d9:19:8d:99:d7:bb:86:53:64:
6b:ba:ba:07:84:32:15:d2:b7:ee:9c:fe:11:4e:ea:da:0e:e7:
46:49:75:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:56 2026 by rpki-client