
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/13C23898BAA511EDB866A412C4F9AE02.roa
File: 13C23898BAA511EDB866A412C4F9AE02.roa (raw, json)
Hash identifier: vfCasisl/udX1pawaHCEifoYin0FJKKdJCoRiOIHcf0=
Subject key identifier: 3C:BE:6F:B6:D4:3D:F6:FB:3B:18:1F:EF:64:32:AF:6C:C3:0B:02:5F
Certificate issuer: /CN=A915FF72/serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
Certificate serial: 024C
Authority key identifier: 4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/13C23898BAA511EDB866A412C4F9AE02.roa
Signing time: Sun 29 Mar 2026 02:37:49 +0000
ROA not before: Sun 29 Mar 2026 02:37:49 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 149509
IP address blocks: 103.183.95.0/24 maxlen: 24
103.229.89.0/24 maxlen: 24
2001:df1:f340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl
rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FF72, serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
Validity
Not Before: Mar 29 02:37:49 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c8907d-7ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1e:b0:bb:fd:ad:97:0a:69:5e:31:39:a2:7f:
58:9d:09:1d:a3:9b:5d:4e:4d:3e:42:d8:0e:53:2c:
ed:03:c2:8e:13:f1:df:de:c1:cc:ce:74:f4:49:f9:
20:ae:5c:cf:7a:98:00:ed:f6:c5:c7:f0:2e:b5:32:
6b:40:1d:34:64:a5:2c:bd:d5:51:49:37:6a:98:3f:
e6:df:c1:ac:6a:1b:e1:1b:e7:69:bf:c3:40:4b:13:
6a:db:3b:06:f7:5f:a9:8e:16:40:b9:0c:e9:f0:51:
d2:22:bf:06:d7:ba:0b:5d:f5:6a:1b:54:ad:14:a4:
38:95:b3:f6:71:bb:06:db:ff:84:37:00:78:1d:ac:
7d:b8:44:ed:38:7f:ee:42:f7:77:86:6e:fb:2c:35:
06:6d:a4:b4:e3:6b:86:00:4b:3e:f0:19:3e:87:1c:
1f:34:3c:9e:2e:0a:59:77:ea:e5:69:11:79:dd:1b:
ec:cb:ff:78:de:d0:f6:5f:5f:33:5c:51:09:16:c5:
1e:56:30:d2:42:41:37:67:a0:fb:b7:70:eb:a1:cf:
9f:8b:48:4d:34:94:76:57:6a:37:a2:ba:99:fd:2e:
86:49:81:a5:0c:96:9b:f8:f5:32:37:e1:cd:74:2b:
6a:83:7a:7a:1b:c5:b1:df:74:9f:62:b3:0c:7d:5b:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BE:6F:B6:D4:3D:F6:FB:3B:18:1F:EF:64:32:AF:6C:C3:0B:02:5F
X509v3 Authority Key Identifier:
keyid:4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/13C23898BAA511EDB866A412C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.183.95.0/24
103.229.89.0/24
IPv6:
2001:df1:f340::/48
Signature Algorithm: sha256WithRSAEncryption
77:97:73:1b:9a:f6:94:36:6a:10:ff:43:88:82:c1:c5:7c:38:
bb:87:2b:53:9b:2e:61:bd:af:fa:ec:6f:c5:24:e2:9e:fa:56:
ac:94:56:3d:1c:6e:d1:be:61:ec:9f:d3:da:bc:72:f4:be:4e:
b0:48:0a:9a:a5:9c:99:51:17:f3:a5:3d:62:95:8c:93:12:d9:
46:c9:75:45:d8:c8:06:33:c7:77:b0:0a:de:33:b9:d1:84:78:
6a:5b:2e:f9:fa:a9:4f:2d:4a:b6:15:d1:15:37:56:80:39:b6:
22:14:ee:00:0c:a2:5d:5a:51:85:9e:96:44:14:54:df:5a:56:
38:8d:ff:fb:a3:d0:29:98:64:58:ac:93:39:68:34:c8:64:07:
53:d4:73:27:04:41:18:ac:8c:53:c7:a2:0b:89:3b:ef:98:f1:
b5:86:a8:36:9d:b1:fd:9f:8d:ce:f1:3a:38:6b:57:ef:82:0a:
bd:10:21:a4:62:db:10:6f:0b:98:c9:1c:42:cf:13:89:33:4b:
3a:07:30:3f:b5:68:53:a6:e1:8e:ed:89:f2:3e:7e:ff:7b:91:
68:6d:e3:42:f0:8d:ef:4c:ea:81:96:4f:af:3b:6d:d3:34:b2:
97:4a:97:72:c6:a4:1d:7e:1c:8b:a6:4c:94:48:35:bd:5a:29:
3d:03:05:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:41:09 2026 by rpki-client