
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D42E171A97E011ED9EFB180DC4F9AE02.roa
File: D42E171A97E011ED9EFB180DC4F9AE02.roa (raw, json)
Hash identifier: ld4bwSTH7DNmQDUsJ/AFf4fZeBG84QqW9207f4dTJjE=
Subject key identifier: 13:88:4A:67:74:72:3B:3C:4E:E8:09:6B:C6:15:58:09:01:DE:63:2B
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 26E0
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D42E171A97E011ED9EFB180DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:40:17 +0000
ROA not before: Wed 31 Dec 2025 18:14:43 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 4294955555
IP address blocks: 103.138.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9952 (0x26e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Dec 31 18:14:43 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a48811-f198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:59:20:90:6d:4f:c0:1a:a9:78:a0:0f:54:
35:5e:d9:76:d5:13:62:33:21:a5:c7:62:e4:f4:19:
71:77:1e:b6:8e:9a:90:87:a9:53:49:33:62:38:7c:
f5:f0:c9:ee:e3:a1:5f:a5:ac:c4:f3:a5:97:2e:13:
53:98:f6:ce:5d:01:15:82:7b:62:13:41:f4:1b:55:
bb:c3:ef:ac:7c:71:67:2b:56:a1:68:e4:83:55:bf:
cb:f2:63:7d:aa:d3:64:c8:e6:e2:ad:37:d3:db:f3:
10:c1:53:2f:19:ec:c0:e9:5c:2e:bb:90:99:e3:a9:
e5:24:be:33:f9:7a:ea:3c:1e:2f:c2:92:c4:89:0a:
53:71:75:41:e9:93:45:89:05:de:21:6f:ff:7b:35:
c0:7f:54:86:d5:12:c3:5f:03:79:0e:07:aa:01:50:
52:3c:bb:60:79:fa:7c:60:c7:d5:2f:c4:a5:39:86:
67:bb:4e:a5:cd:dc:73:2d:1f:30:05:17:e1:9a:e5:
9f:2a:5c:44:9a:86:e3:1c:6b:07:f5:05:69:4b:39:
ea:1d:a9:f5:13:31:9d:23:5b:57:56:1d:9c:0f:ea:
61:41:66:d4:ca:e3:ba:f8:ad:32:f1:01:c5:92:71:
1d:33:bf:60:02:38:9e:92:dc:3d:87:cd:83:78:33:
76:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:88:4A:67:74:72:3B:3C:4E:E8:09:6B:C6:15:58:09:01:DE:63:2B
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D42E171A97E011ED9EFB180DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
93:67:8e:32:cd:7c:ae:85:55:68:eb:91:24:09:fd:67:5f:5b:
13:9a:40:57:c5:fb:c7:40:a3:b7:fd:71:b7:7f:d6:11:9a:2d:
2d:4b:28:26:3e:44:a8:a7:24:77:78:65:46:a9:6c:ee:cc:d5:
d2:b7:b9:d1:36:28:9f:69:67:20:c3:5b:2f:67:5b:e2:f7:12:
ce:4b:f5:09:41:e8:85:98:0e:f1:f9:b9:2c:8f:74:00:8e:4e:
cc:ab:6d:e2:6e:24:58:d8:11:ef:54:3e:8f:c5:0e:de:13:43:
3f:e4:48:89:63:8a:06:8a:d4:c0:0d:59:2e:dd:f0:a3:c8:6c:
1a:71:9c:4d:74:a3:c3:da:a2:62:40:56:02:f1:f9:8f:ae:43:
49:f1:35:f0:36:44:a9:45:19:7b:18:d1:0a:59:65:c9:14:29:
7f:e3:f6:9f:dc:5e:27:b6:5a:c5:97:e1:f6:4a:01:2f:d1:00:
94:68:3c:37:f8:cd:bb:48:0a:5e:6d:86:4a:7c:7c:e9:ef:5b:
6b:9d:0b:ce:36:68:c0:35:4f:74:59:10:de:77:00:44:4f:c3:
3b:44:8f:03:99:7f:91:91:47:5d:32:1c:71:eb:4c:92:2b:af:
07:da:9a:a1:28:cd:c7:96:87:a8:79:cc:3d:40:6b:b8:8f:02:
f1:5b:ae:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:38 2026 by rpki-client