
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/13B5A626CEB811F09E67F582C4F9AE02.roa
File: 13B5A626CEB811F09E67F582C4F9AE02.roa (raw, json)
Hash identifier: mO8S1AIuP5D0jmzeJHd4aSV8W/Nhasm8k/Q5HQJUWxk=
Subject key identifier: 10:FB:40:AF:7F:BC:81:10:BC:00:DC:69:D5:C6:73:47:D4:17:CA:D6
Certificate issuer: /CN=A913EE77/serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
Certificate serial: 07A3
Authority key identifier: B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/13B5A626CEB811F09E67F582C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:47:01 +0000
ROA not before: Mon 01 Dec 2025 13:19:58 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 140222
IP address blocks: 103.144.104.0/24 maxlen: 24
2001:df1:bc80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl
rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:56:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1955 (0x7a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EE77, serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
Validity
Not Before: Dec 1 13:19:58 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a47b95-da08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:97:af:13:3a:87:7f:8a:f3:f4:21:9b:ad:
23:3d:1e:44:5f:c9:04:c5:e5:62:91:9c:72:fb:75:
26:b1:01:fb:0c:be:14:65:eb:82:f2:8c:93:02:ec:
bf:6d:20:37:4a:ac:58:43:cc:9d:80:11:8e:36:2e:
20:fe:ad:a1:5c:c2:19:e4:2c:de:3c:90:71:99:e9:
4b:93:65:df:8a:58:8f:be:29:4f:fc:89:b0:6c:c8:
97:d9:2e:49:13:4c:a6:37:ab:7f:34:bf:80:7c:08:
2a:1b:90:f6:d6:dc:c8:39:07:59:fe:47:36:e2:37:
52:38:e6:4a:b0:e2:b0:c7:1b:da:1c:2f:26:cc:8a:
1f:aa:2e:6e:b0:86:10:b1:d7:e5:2a:74:8c:0c:8f:
9e:69:70:e5:fc:f2:36:af:e2:c9:38:52:0e:9a:de:
9c:61:68:d0:cc:b9:8b:03:c4:88:4e:3f:74:59:28:
94:ad:8e:df:7f:06:66:0d:3c:cb:65:09:9a:b0:cc:
b9:53:b6:45:f9:c7:93:c3:62:97:2e:a7:9d:84:78:
79:bc:4f:0b:32:3c:72:89:a2:6f:ce:04:32:83:f3:
ab:83:93:18:f5:b6:01:99:35:a7:20:c8:12:d1:45:
3a:5f:bb:fb:a9:f7:47:dc:d4:53:34:03:0a:f9:b0:
e3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FB:40:AF:7F:BC:81:10:BC:00:DC:69:D5:C6:73:47:D4:17:CA:D6
X509v3 Authority Key Identifier:
keyid:B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/13B5A626CEB811F09E67F582C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.144.104.0/24
IPv6:
2001:df1:bc80::/48
Signature Algorithm: sha256WithRSAEncryption
aa:4d:66:f3:88:6d:de:16:87:11:d7:2d:a5:da:ea:6f:5b:42:
cc:92:82:e6:41:a4:42:04:4f:19:9c:11:83:4d:ae:2a:d5:96:
55:ba:7d:6d:55:02:ea:65:f4:65:4c:7d:9b:c5:ad:a7:ea:30:
ad:2f:2d:8c:fc:46:6a:d5:b6:11:5d:7b:8e:cc:09:76:96:22:
ab:79:c1:52:71:d5:e0:69:62:25:45:fa:93:6e:31:57:54:81:
18:3f:49:07:19:32:4c:99:2c:41:d0:c2:f5:50:f0:41:9a:2f:
cf:5b:d6:3d:bb:79:a0:3d:6e:bd:04:74:a2:c6:66:52:97:3f:
0a:dd:50:dd:e3:44:67:c9:53:4c:cf:57:6c:bf:e2:56:29:f6:
70:47:87:05:6f:ed:df:1b:96:86:d2:80:1f:fa:8c:2c:9a:c4:
8e:d7:a4:6a:23:57:22:4a:f3:13:5d:1a:0a:97:65:ff:00:99:
ba:42:ff:ac:a2:7f:17:8d:09:14:ef:16:1e:18:66:5e:47:03:
85:eb:03:24:1f:82:bd:07:42:fd:e7:c9:bb:5d:e9:ba:17:9d:
0d:65:39:1d:81:02:4e:7d:39:c3:b6:f7:3e:9c:7c:99:7f:5d:
56:13:8c:e1:00:38:0c:d9:f8:8e:f3:e2:1a:30:4a:19:8a:81:
69:30:73:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:09:51 2026 by rpki-client