
$ rpki-client -vvf rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/813A255423A611F09025FC11C4F9AE02.roa
File: 813A255423A611F09025FC11C4F9AE02.roa (raw, json)
Hash identifier: RaOIdSyJbLBmHHTBAcqvM2xNuH84JM4tWrC9RYmAhrM=
Subject key identifier: 9D:31:C8:01:22:2C:C0:20:01:A9:10:CA:48:FC:DF:17:83:3D:45:A2
Certificate issuer: /CN=A914AF32/serialNumber=8470731B899A8DEEB29FEA51B90DC158DBDA2AF0
Certificate serial: 141D
Authority key identifier: 84:70:73:1B:89:9A:8D:EE:B2:9F:EA:51:B9:0D:C1:58:DB:DA:2A:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/813A255423A611F09025FC11C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:35:41 +0000
ROA not before: Thu 16 Oct 2025 17:55:18 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 138042
IP address blocks: 103.120.144.0/22 maxlen: 24
2403:5940::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.crl
rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5149 (0x141d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914AF32, serialNumber=8470731B899A8DEEB29FEA51B90DC158DBDA2AF0
Validity
Not Before: Oct 16 17:55:18 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a44ebd-8436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:7f:45:16:a5:62:b5:cf:ce:43:1e:8f:12:
e8:af:69:f1:27:92:d2:b9:13:ac:b8:b4:40:98:2b:
e4:16:3d:0d:58:52:a6:fd:97:bf:58:d3:9a:10:8e:
c3:f6:c0:79:eb:ea:0f:91:95:d1:5a:83:d1:36:03:
8d:3f:a8:fe:4c:9b:33:30:b9:fe:4e:83:46:4f:dc:
ff:83:ab:86:5c:a1:9b:40:b7:dc:0e:ad:d1:a3:a4:
52:6d:6c:d2:ac:41:af:77:4c:c6:7b:76:c3:a3:fc:
4c:97:06:51:d1:c0:2b:ff:cf:cf:9f:33:ab:0f:76:
d3:f3:c1:c2:54:51:a1:83:33:cf:6c:eb:84:b7:ca:
b6:56:0e:0c:26:a9:2c:bd:29:52:d0:6c:1e:60:b8:
86:1c:b3:8b:4d:86:95:ea:bb:b9:cf:7f:02:e4:84:
5b:e4:c8:f6:4e:a2:cc:63:b7:5f:36:39:60:a7:c0:
ac:7b:71:ea:39:4d:e9:25:04:e8:62:96:57:fd:b1:
6c:b9:82:a4:0d:ea:b3:12:62:79:5b:74:b8:21:83:
ae:56:47:61:76:2a:bd:a5:1f:8a:c3:35:e2:5c:f0:
53:6c:26:8d:23:68:f5:36:77:4a:43:63:a7:98:17:
01:7c:bd:ef:6a:7b:e2:db:4d:26:aa:fe:68:20:a1:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:31:C8:01:22:2C:C0:20:01:A9:10:CA:48:FC:DF:17:83:3D:45:A2
X509v3 Authority Key Identifier:
keyid:84:70:73:1B:89:9A:8D:EE:B2:9F:EA:51:B9:0D:C1:58:DB:DA:2A:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/813A255423A611F09025FC11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.120.144.0/22
IPv6:
2403:5940::/32
Signature Algorithm: sha256WithRSAEncryption
75:c4:4c:f7:a1:25:93:c3:a5:0f:a3:d0:c0:fa:69:ba:dc:d9:
a2:dc:84:26:d2:1b:01:d8:78:28:7c:33:88:66:ef:84:3c:2a:
5e:4d:e1:a9:3c:90:11:90:90:ca:3a:93:a7:dd:5b:fd:86:46:
88:a3:cc:f8:71:90:17:f7:a7:f9:54:5b:bc:7c:d6:df:4c:54:
9a:c0:4c:2b:bf:dd:a5:f5:dc:77:1d:70:6d:25:a9:ae:8b:12:
8a:3a:cc:d7:aa:69:7d:61:62:04:d7:27:aa:39:27:89:ee:fe:
33:b1:da:40:d6:4c:ac:d8:7d:76:26:ed:4b:24:4b:58:8c:4c:
91:c2:40:12:74:0b:8d:e6:2e:38:85:84:6e:9f:25:1f:59:a9:
c5:0c:9a:f2:36:93:16:ee:0c:a1:21:7e:8a:c7:80:f4:9d:1a:
01:b8:90:d7:02:47:61:de:c5:98:70:e5:90:54:b7:88:9b:54:
a6:2e:9f:3e:10:1d:c9:46:7b:bb:d4:9a:7d:81:7b:d6:8e:e1:
fd:65:8c:30:f6:a5:ae:00:2c:f3:55:19:86:98:5d:61:78:c6:
51:c3:68:86:36:f3:27:54:4e:e6:a2:9b:13:ae:de:65:b3:0f:
2e:3f:0c:7d:3b:d2:9d:17:79:31:6a:b0:63:23:3e:39:fe:8d:
d0:b3:5c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:18 2026 by rpki-client