
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa
File: 8EF0A700973911EDB1E3C460C4F9AE02.roa (raw, json)
Hash identifier: mTQtcWBHrk7TIhY8CS21ppzMxX7dQQuOEVfMQCgdVhQ=
Subject key identifier: C0:39:50:DA:64:2F:7D:39:08:D6:47:3E:A4:B4:B9:15:91:03:EA:DA
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 26E3
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:40:20 +0000
ROA not before: Wed 31 Dec 2025 18:14:46 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 4294967200
IP address blocks: 103.138.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9955 (0x26e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Dec 31 18:14:46 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a48814-72c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8a:37:56:ed:c0:2b:4d:02:91:cd:6d:fb:09:
95:71:de:f8:1c:54:50:df:51:4f:c0:7c:91:ec:1d:
42:7d:00:2e:07:94:c1:50:a9:65:c3:7b:ae:7e:11:
f3:02:91:54:45:16:c5:04:0e:a4:10:7c:f5:75:a9:
af:7c:9f:51:a7:d7:3b:2c:5f:03:80:a8:f2:e4:6b:
90:06:20:cc:ef:a7:0f:b5:e3:75:2f:e0:43:42:df:
8e:57:e5:88:4a:aa:e7:4a:36:c7:6d:33:2a:15:5d:
f7:46:c9:10:74:93:c7:5e:9c:d3:df:96:5c:39:9c:
78:9e:ef:c3:43:56:de:22:18:07:3f:09:ac:0a:e2:
ba:fd:b3:6c:16:d4:64:b6:95:a8:8c:85:22:55:8a:
45:31:18:c9:94:49:21:a6:fc:2b:25:47:8a:cd:85:
f7:f9:04:f4:cf:d8:fe:f2:9d:47:61:b3:48:8e:57:
0f:01:b7:34:4a:3d:6c:14:e3:e1:0d:7c:5c:7f:2d:
91:a1:c1:24:41:5c:9d:f9:7e:f2:c3:80:e1:44:42:
44:4f:5e:3f:03:15:0a:bd:90:ce:82:1e:97:29:71:
77:ad:a1:c6:cb:9b:77:37:33:3d:03:d8:9d:ee:a1:
0c:7b:3b:1a:7d:cb:26:32:6e:06:e5:4a:95:4a:25:
1c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:39:50:DA:64:2F:7D:39:08:D6:47:3E:A4:B4:B9:15:91:03:EA:DA
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
67:8f:69:97:91:d3:b9:44:5d:e1:a1:9b:45:bc:9a:83:a5:fc:
4f:64:a8:b4:d0:82:92:45:52:67:55:8a:10:60:39:b3:25:d5:
22:9d:2b:f0:62:18:a6:e4:6d:f5:1b:fa:05:7d:6a:44:74:d4:
2e:f5:8d:ee:43:aa:ed:25:48:6a:60:2c:7e:31:ff:12:bb:d2:
1f:cc:1a:d5:ee:04:79:44:e9:b4:e6:e6:95:05:8e:0a:eb:12:
da:d0:b0:21:e9:cf:c6:29:36:91:29:74:ea:20:e2:07:df:5e:
76:ff:a5:4e:60:29:12:5c:9d:23:86:60:42:d0:58:c5:bb:e6:
cf:09:56:71:dc:d2:9e:b9:0b:e2:08:2e:fe:0b:a8:4c:1b:b1:
2e:ba:00:7b:38:c1:04:1e:d2:b5:20:3d:3e:f6:64:d4:51:6b:
60:14:2c:05:6a:6f:82:ac:2e:fd:a9:7c:2f:0e:a0:e0:99:1d:
19:b0:98:7c:0b:26:a5:7c:af:44:a3:22:5f:80:fe:4b:d5:6f:
a9:98:3a:bd:bc:1a:4c:8c:65:b2:eb:1a:73:30:3c:f4:91:9f:
7a:dd:1f:a3:f3:78:72:75:3a:c5:6a:64:32:dd:04:53:95:5a:
f6:b7:40:f4:35:7b:13:44:fb:fb:49:c7:cc:30:01:be:72:a7:
6c:1e:2c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:34 2026 by rpki-client