
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/670793E8F0EC11EFB7FBC612C4F9AE02.roa
File: 670793E8F0EC11EFB7FBC612C4F9AE02.roa (raw, json)
Hash identifier: MONz+D1jPuLDNJscqNyBUOG3Qvu80t/BAaL4NpmTzOo=
Subject key identifier: 5E:3D:78:43:33:0F:9C:97:10:8E:A2:60:4B:DF:A9:B9:B2:9F:4C:EE
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 277E
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/670793E8F0EC11EFB7FBC612C4F9AE02.roa
Signing time: Fri 02 Oct 2026 18:34:29 +0000
ROA not before: Fri 02 Oct 2026 18:34:29 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 1221
IP address blocks: 103.138.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 17:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10110 (0x277e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Oct 2 18:34:29 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6abff935-89db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:75:e8:6f:ae:9e:08:82:6b:4d:a3:cc:34:d8:
31:32:0d:48:56:dc:82:ab:6e:a7:88:b8:d1:de:b6:
1c:36:80:4f:e9:a3:8d:d0:92:e2:0e:c5:cb:c2:ee:
db:f7:ac:65:28:dc:49:1a:22:cf:5a:c0:f6:a6:6e:
55:2c:c9:bf:4f:5b:42:d8:33:0a:60:54:7a:7b:e7:
92:d3:68:15:5a:0f:0c:99:22:2f:d6:7b:ed:f8:de:
62:dd:c9:62:7d:d5:52:ef:bf:12:f6:b6:7b:78:6b:
f6:35:32:8b:d2:46:fb:91:17:7a:8c:45:5a:12:2d:
01:d7:cf:2e:de:11:87:fe:9e:fb:4c:71:d5:10:1f:
21:85:78:88:f6:10:f8:8d:ae:b1:01:0e:5f:b6:16:
f5:74:f9:a9:44:76:7c:a8:a3:38:33:41:c1:78:f5:
3c:3d:8e:43:11:cd:80:fa:17:c4:91:f5:00:0d:d9:
f1:e5:03:f6:60:d6:f0:fc:46:18:98:51:ad:24:6a:
80:68:92:df:b2:56:c7:d8:62:fd:6e:f6:58:97:c2:
82:05:14:6a:91:7b:f8:db:44:a8:6a:9d:69:42:fe:
9c:b0:4a:11:29:d4:45:2a:8d:bc:f2:dc:d0:91:4d:
be:c3:7b:79:70:d7:6a:60:54:aa:29:27:00:04:28:
8a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3D:78:43:33:0F:9C:97:10:8E:A2:60:4B:DF:A9:B9:B2:9F:4C:EE
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/670793E8F0EC11EFB7FBC612C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
58:96:2d:62:0d:3c:1b:c1:46:bc:24:b4:64:32:74:42:d4:42:
ab:04:df:94:1c:0e:93:71:ef:9f:4f:0d:ca:41:0f:aa:d6:8c:
77:df:a1:55:b9:ad:c6:d2:6a:08:f9:a1:be:0c:49:5d:11:33:
4b:eb:81:f2:8b:51:93:14:fa:1b:d7:3c:8e:6c:39:6f:9d:f2:
58:31:7a:6a:c2:ce:68:c7:fc:91:dd:6c:91:e4:eb:61:c0:cc:
d1:03:a2:d4:42:f9:ad:6e:4f:ff:40:ae:12:4b:23:d2:53:2a:
7f:59:2c:db:e0:97:67:53:63:e0:c3:63:bf:87:3c:15:5f:1a:
ea:c9:15:2d:6a:7d:43:10:2c:5a:9f:48:7f:cd:51:91:67:4f:
a7:ae:bd:aa:45:1a:74:be:ef:34:8b:27:76:a0:b7:d1:9b:1e:
9f:36:4b:39:e0:ff:bb:f9:05:3d:5c:20:94:08:41:39:24:34:
57:72:98:67:a9:4c:ce:f5:d7:32:b4:91:95:f2:30:ec:ba:b6:
8e:47:29:e9:25:7c:8d:07:09:d6:c5:c8:68:0e:cf:72:5d:99:
2a:39:02:9c:82:e1:3b:31:d7:37:31:4f:1c:bd:4d:7b:13:3a:
ec:4f:fb:d9:5d:22:86:96:db:af:58:de:60:ce:e2:ab:f4:21:
f3:2c:dc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:12:11 2026 by rpki-client