
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/0FDE82648A4911F1987018B83411F970.roa
File: 0FDE82648A4911F1987018B83411F970.roa (raw, json)
Hash identifier: 0v1JbUOlN/L+TuKNqfztnPPZue2CrvOvQ2tkWu7kpAg=
Subject key identifier: F4:3D:C8:EB:2A:0B:B6:61:4D:1F:72:55:5C:F3:E5:25:2B:C3:CD:79
Certificate issuer: /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741
Certificate serial: 029D
Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/0FDE82648A4911F1987018B83411F970.roa
Signing time: Tue 22 Sep 2026 04:04:33 +0000
ROA not before: Tue 22 Sep 2026 04:04:33 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 136181
IP address blocks: 103.138.36.0/22 maxlen: 24
2404:bf40:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl
rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 04:04:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741
Validity
Not Before: Sep 22 04:04:33 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6ab1fe51-4704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f5:9f:d2:f8:ef:a1:0e:47:ff:c8:e3:02:d8:
88:32:7f:7b:d3:fc:89:c5:b7:23:a1:02:0b:10:3c:
d7:1b:41:79:17:80:a7:fe:56:50:85:0a:58:95:51:
f6:fe:15:56:8f:11:72:97:7d:ef:20:08:a5:af:d6:
d5:f8:69:d6:e4:ed:35:bf:5f:32:4e:80:7e:27:49:
29:b8:15:16:8f:6b:cc:2f:99:2e:21:4d:f4:40:b5:
02:05:f4:35:a5:b3:10:86:6a:c5:ed:f3:84:dd:d0:
b0:73:7d:41:80:05:c9:a8:4c:a0:c1:57:2b:4a:11:
0b:c3:00:7b:67:b3:a5:0a:88:4f:e9:25:ec:e0:47:
dc:9b:8e:64:fa:1c:2e:14:c5:2b:e8:e9:a7:52:1d:
cd:cf:27:61:34:b8:1f:ad:43:20:92:4d:93:4c:0a:
87:e6:f1:69:bb:f9:05:19:d1:60:96:b1:08:5d:3b:
8b:bd:34:b1:9f:71:69:36:ae:9c:50:dd:7f:17:da:
e7:11:7b:8d:51:f2:3e:ed:db:fc:40:f7:27:6e:5f:
2f:ec:78:a9:46:e3:e7:be:e4:28:fe:c4:0e:88:dc:
65:6a:49:ee:8b:be:b3:64:c9:b1:a3:34:57:9a:93:
14:04:ee:f6:88:60:87:37:94:02:45:db:9e:40:be:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3D:C8:EB:2A:0B:B6:61:4D:1F:72:55:5C:F3:E5:25:2B:C3:CD:79
X509v3 Authority Key Identifier:
keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/0FDE82648A4911F1987018B83411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.36.0/22
IPv6:
2404:bf40:8000::/33
Signature Algorithm: sha256WithRSAEncryption
a4:80:e5:37:5d:6d:a6:39:f1:64:52:28:2a:99:0e:8f:34:e4:
96:43:5a:32:c6:fc:78:89:29:ec:96:29:74:5d:4a:ed:02:25:
fd:28:9d:6c:fa:b3:03:45:77:82:61:cb:07:2c:d6:6b:96:f7:
91:77:bf:30:57:16:5f:14:7b:e8:57:bb:c2:c6:7e:19:09:98:
52:3a:9c:1f:6b:a7:a2:d4:51:36:87:fc:3d:2a:f9:6c:20:f7:
74:63:32:ac:d7:5b:62:75:0b:2e:5d:cf:87:12:6b:19:3f:02:
3a:f1:62:6b:a5:11:f3:65:3c:3e:bf:bd:1c:af:dd:16:f4:52:
6c:40:f5:13:b6:2a:83:30:56:ac:f0:45:80:e2:97:a1:fd:d4:
ab:cb:e3:6e:ef:7e:72:2d:59:87:22:2f:d6:6a:2a:36:cd:41:
70:16:8a:7f:b6:15:a6:7d:40:0c:38:1f:88:93:74:96:b2:eb:
ee:07:9d:f5:95:99:cd:b6:89:c1:f7:7a:6b:3a:b5:f5:65:54:
2f:79:d3:9f:95:bd:c2:fa:a5:13:fc:eb:09:ee:88:d4:45:30:
66:d5:d8:e9:e1:67:6f:09:3e:f8:2e:62:1f:1e:e7:bc:e6:74:
f7:ec:90:a5:7a:c1:13:a5:a2:12:7c:73:1c:34:58:e0:c6:c4:
ad:6e:6f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:27:16 2026 by rpki-client