
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/39C6EF3688BF11EABC04973FC4F9AE02.roa
File: 39C6EF3688BF11EABC04973FC4F9AE02.roa (raw, json)
Hash identifier: enoM2NWBNUYRH2n/AI/aofT3pe3LorndYDV+y4Uj6nI=
Subject key identifier: 5F:A3:0A:16:53:FE:CA:01:96:E1:56:65:3D:DD:27:A6:73:6A:88:B6
Certificate issuer: /CN=A913C91D/serialNumber=72D65BB3CAD4A098F36F4137594CC7FEC2FA28A3
Certificate serial: 111C
Authority key identifier: 72:D6:5B:B3:CA:D4:A0:98:F3:6F:41:37:59:4C:C7:FE:C2:FA:28:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/39C6EF3688BF11EABC04973FC4F9AE02.roa
Signing time: Thu 16 Apr 2026 06:39:29 +0000
ROA not before: Thu 16 Apr 2026 06:39:29 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 137945
IP address blocks: 203.9.40.0/24 maxlen: 24
203.9.41.0/24 maxlen: 24
203.9.42.0/24 maxlen: 24
203.9.43.0/24 maxlen: 24
203.9.44.0/24 maxlen: 24
203.9.45.0/24 maxlen: 24
203.9.46.0/24 maxlen: 24
203.9.47.0/24 maxlen: 24
203.22.203.0/24 maxlen: 24
203.62.177.0/24 maxlen: 24
2403:20c0:2::/48 maxlen: 48
2403:20c0:3::/48 maxlen: 48
2403:20c0:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.crl
rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4380 (0x111c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C91D, serialNumber=72D65BB3CAD4A098F36F4137594CC7FEC2FA28A3
Validity
Not Before: Apr 16 06:39:29 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69e08420-b63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:35:ef:15:d9:02:98:61:db:f1:36:40:10:
70:69:08:8a:db:33:95:d3:9a:09:c4:16:94:d7:04:
e5:69:73:16:d4:63:e8:30:b0:6a:82:96:26:7e:6f:
90:c3:e1:07:f2:11:b6:18:10:62:02:2e:c6:0f:36:
ee:ff:a3:a9:c9:b0:8b:11:80:c6:58:3f:17:0b:01:
f8:8e:59:79:fb:b4:f6:59:9b:42:f9:12:7b:1c:c9:
88:4d:09:cd:9b:49:c5:42:34:a2:f9:de:39:dd:2e:
c8:8a:10:97:dc:5f:06:92:7b:43:1f:32:7a:52:63:
8d:d0:3b:ad:c0:6d:2a:f3:65:8c:b1:d8:47:a6:2c:
92:6c:7c:09:89:03:c3:36:ff:62:db:b3:d0:46:6c:
9d:c1:dc:53:71:b6:a1:26:d6:9d:3a:ad:11:f9:ff:
55:29:8c:a6:85:25:7a:c6:27:9f:92:20:3a:59:b7:
68:3c:a7:4b:6d:05:60:ec:fc:a6:55:d9:82:2f:59:
06:b9:5c:6a:7c:c8:42:a7:97:99:45:75:09:35:95:
40:21:31:da:6a:1a:3e:5b:f8:c2:ce:1b:b5:9e:01:
c9:41:f7:e9:43:41:b7:8c:1b:fe:3f:20:f9:1d:73:
57:b9:2a:3e:b7:f6:d1:d5:08:1f:a5:3c:65:4b:75:
76:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A3:0A:16:53:FE:CA:01:96:E1:56:65:3D:DD:27:A6:73:6A:88:B6
X509v3 Authority Key Identifier:
keyid:72:D6:5B:B3:CA:D4:A0:98:F3:6F:41:37:59:4C:C7:FE:C2:FA:28:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/39C6EF3688BF11EABC04973FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.9.40.0/21
203.22.203.0/24
203.62.177.0/24
IPv6:
2403:20c0:2::-2403:20c0:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3c:9d:93:20:bb:74:28:0e:be:44:65:04:0d:36:eb:b3:3d:a0:
32:65:f7:52:01:32:ef:8a:5f:e2:55:9e:72:6f:f4:ab:bb:c1:
3b:aa:fc:36:72:66:32:4d:a2:1f:9f:7b:b1:a2:c2:38:09:3f:
a3:97:76:de:ba:90:3b:40:ff:79:35:3a:de:d6:c7:cc:ac:f8:
a7:77:75:d2:fd:2b:41:84:48:35:5e:1a:b1:f5:4d:43:16:37:
de:c8:24:1a:3e:8d:9c:84:92:13:65:2c:6b:05:49:0d:d7:26:
51:ee:a3:c6:11:4e:81:48:f9:24:85:26:ae:86:b7:e7:22:0f:
8c:f8:4e:9c:47:80:31:dc:7a:28:3d:9c:39:b2:bc:df:56:55:
6b:a9:38:1e:8f:60:17:ad:5f:dc:3e:05:45:e8:25:ec:21:5c:
01:fb:bd:9b:45:b3:92:84:6f:9f:be:1c:d3:96:6d:9b:e2:a9:
ad:88:21:e7:a0:2f:3e:f8:ff:ee:0d:6b:27:8a:97:eb:45:89:
39:b4:95:f6:c3:a8:c2:fd:02:44:92:43:b0:fa:5d:1d:44:b7:
c6:66:03:45:8f:5c:47:49:12:16:a4:ed:4a:2c:37:57:25:f4:
5b:01:d6:04:69:f0:46:1a:93:2a:25:7d:d6:5f:d7:77:77:2a:
32:5f:90:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:54:09 2026 by rpki-client