
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/5DE0E22C86D611EFBC773E7AC4F9AE02.roa
File: 5DE0E22C86D611EFBC773E7AC4F9AE02.roa (raw, json)
Hash identifier: 2P80biFk3pHmANBM7Nv46ymfE/TabrLQb0tBiEhe7bY=
Subject key identifier: B2:01:9A:1E:51:68:90:E8:29:B3:5E:17:BB:7B:37:26:75:BE:AF:4A
Certificate issuer: /CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF
Certificate serial: 14CC
Authority key identifier: 0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/5DE0E22C86D611EFBC773E7AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:17:56 +0000
ROA not before: Tue 22 Apr 2025 17:15:53 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 137561
IP address blocks: 103.113.100.0/24 maxlen: 24
103.113.101.0/24 maxlen: 24
103.113.102.0/24 maxlen: 24
103.113.103.0/24 maxlen: 24
103.137.68.0/24 maxlen: 24
103.137.69.0/24 maxlen: 24
103.137.70.0/24 maxlen: 24
103.137.71.0/24 maxlen: 24
2402:ba40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl
rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5324 (0x14cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F547, serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF
Validity
Not Before: Apr 22 17:15:53 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a40444-8e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:08:4c:f4:16:71:f9:f8:1f:1a:cf:77:08:23:
8c:2e:a9:55:f7:d6:48:5a:c9:73:70:84:40:e1:2c:
bd:d3:b7:ff:c3:d6:21:5d:b3:fb:77:8a:fd:bb:aa:
36:47:34:fa:6a:7c:60:ac:0d:3f:7f:bd:b5:38:bd:
1c:38:90:a0:1d:4f:82:8b:39:d6:ff:a8:60:ca:d4:
ee:59:88:d1:81:f2:09:65:21:33:77:2e:9d:ac:f7:
c3:8b:94:43:fc:3f:b0:72:bf:9d:4d:a7:b5:76:b7:
8d:0d:05:5c:4c:c0:2b:50:9e:2c:8b:a4:e8:99:7a:
d7:f9:43:44:7b:6d:c5:e3:05:d5:f3:b8:86:35:e4:
97:80:55:a5:7b:6d:c3:57:61:58:86:4c:23:87:d0:
43:4e:a2:e6:00:4f:a5:3b:6a:77:7c:52:61:a7:08:
d6:ec:7b:ee:00:49:a7:49:af:b2:06:68:08:c3:37:
97:3e:81:b3:e8:1e:32:db:d6:60:ab:98:96:64:d3:
d6:65:8f:03:60:7f:67:ce:d0:57:ee:a0:d7:57:fb:
26:92:0a:f9:a8:9f:de:d0:d8:61:ac:36:7b:0e:78:
d9:98:12:53:14:41:3f:dd:ea:5f:99:50:3f:61:e8:
ae:ff:d2:f0:47:a4:24:3a:31:ad:dd:e6:97:81:f8:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:01:9A:1E:51:68:90:E8:29:B3:5E:17:BB:7B:37:26:75:BE:AF:4A
X509v3 Authority Key Identifier:
keyid:0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/5DE0E22C86D611EFBC773E7AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.100.0/22
103.137.68.0/22
IPv6:
2402:ba40::/32
Signature Algorithm: sha256WithRSAEncryption
0f:d1:cc:c4:bc:9a:10:a2:a6:2c:9c:7e:4f:c4:a0:84:2c:7e:
cd:ee:9e:53:05:4c:11:21:26:30:9b:16:54:f8:ef:90:6f:7d:
72:c8:b5:3a:77:f3:69:b8:0a:df:ac:82:22:8f:7a:54:a6:5f:
27:01:38:2b:24:d8:8c:13:67:43:2a:93:07:81:68:e2:5d:db:
ef:a5:9f:66:c5:ae:ec:63:15:38:18:5b:08:b5:99:9e:93:0e:
08:cd:08:f4:45:56:30:d1:10:7f:d4:c3:0b:5f:f9:bb:ae:f6:
21:6b:ff:ea:4a:c1:37:e1:cb:17:44:80:e6:62:02:d4:a1:bf:
da:0a:76:33:c9:55:98:9d:63:f3:76:56:13:9c:62:76:d7:62:
d9:a2:1a:fb:d2:cb:d8:2c:ce:d4:b5:ec:2d:dd:e2:3e:88:65:
4e:00:27:eb:e1:19:a3:ff:82:32:28:41:28:42:27:28:0e:16:
34:94:ba:67:e1:18:c6:dd:3f:64:4c:4c:84:1f:06:36:73:33:
38:8e:b7:3a:fb:25:19:11:1a:1a:5c:e1:0c:cd:56:8d:38:94:
5b:94:e9:a6:8c:73:46:23:c9:8e:b8:7e:24:16:60:33:f9:c6:
0f:9d:9d:d8:f1:5b:68:cf:3e:55:5e:42:fc:4b:fb:ef:c4:ff:
fb:77:6e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:40:01 2026 by rpki-client