
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/C13356C0921511F089DDCF39C4F9AE02.roa
File: C13356C0921511F089DDCF39C4F9AE02.roa (raw, json)
Hash identifier: MW2m99OxK43iMBOt891iR2xsv1oqz6WeSP9nGWOwPAo=
Subject key identifier: DA:87:B3:90:5B:98:82:8E:6F:7F:98:87:8E:4B:FA:A4:9A:86:4E:9B
Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Certificate serial: 0D17
Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/C13356C0921511F089DDCF39C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:00:26 +0000
ROA not before: Mon 16 Feb 2026 18:15:53 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 135037
IP address blocks: 103.251.244.0/24 maxlen: 24
220.247.129.0/24 maxlen: 24
2407:7380:a::/48 maxlen: 48
2407:7380:a000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl
rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3351 (0xd17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Validity
Not Before: Feb 16 18:15:53 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a47eba-b458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4d:80:20:14:ff:e8:8c:36:27:82:65:23:a9:
bd:b7:ce:ae:ff:27:63:6f:30:69:29:6c:27:9f:76:
42:ff:f0:39:71:6a:a8:16:b0:45:cd:d2:87:08:4b:
c2:16:70:69:65:55:64:5f:3f:0c:25:ba:7c:8d:a7:
34:d0:1c:e7:c3:b1:04:9d:42:ca:12:4e:f1:1f:98:
05:91:37:1e:a0:2b:f1:70:b1:b5:93:0c:d8:9a:4a:
32:8f:0e:35:69:1c:2a:ca:92:0b:ea:75:ae:fd:98:
fb:7a:1e:10:7a:ba:50:1d:4a:17:be:f1:4e:6f:49:
78:29:47:d0:58:0f:c9:f7:97:21:36:81:dc:04:f6:
6c:1e:44:8c:58:31:1d:f4:0b:e2:ad:f4:b7:96:84:
52:20:87:9f:0d:95:b0:f8:84:c4:a3:bc:90:7a:11:
89:e3:88:98:8c:ec:71:16:a5:ec:ca:73:89:47:6b:
6c:83:3f:f5:98:50:79:75:0e:27:b9:17:4d:71:1a:
56:40:7a:e4:a5:07:54:52:e7:9d:5c:4c:5f:d1:ab:
ea:99:11:5c:b5:80:38:65:fe:f1:4e:de:31:a5:3c:
0e:5a:9e:fb:45:c4:bf:1f:d2:4b:33:4d:b8:68:71:
08:b6:c1:a4:75:b4:4d:ba:9e:ca:d7:12:5e:21:b0:
1e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:87:B3:90:5B:98:82:8E:6F:7F:98:87:8E:4B:FA:A4:9A:86:4E:9B
X509v3 Authority Key Identifier:
keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/C13356C0921511F089DDCF39C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.251.244.0/24
220.247.129.0/24
IPv6:
2407:7380:a::/48
2407:7380:a000::/48
Signature Algorithm: sha256WithRSAEncryption
81:16:93:99:88:de:c0:fa:50:46:f3:c1:8c:d7:b7:7a:f7:72:
6d:b0:b6:de:0c:0e:25:60:1d:ae:78:ac:14:a2:cf:40:67:36:
76:36:17:26:56:c8:b0:49:9f:ac:25:55:98:d6:e8:d4:32:97:
7c:6c:03:02:5a:11:23:b5:38:ba:e3:1b:00:4c:f9:db:51:06:
a1:bc:b8:48:db:ff:bc:88:b1:1f:89:90:66:69:6a:c1:d9:fd:
56:f3:b6:8a:f4:0a:6c:ee:c3:be:26:3c:bd:47:ae:83:c3:71:
ed:23:b9:84:cb:95:28:65:b8:03:55:61:30:73:85:cd:55:04:
28:3a:5d:74:58:48:5c:6a:92:9a:69:aa:6a:81:ab:fd:b0:d0:
85:6a:21:f8:a0:1b:00:77:62:8c:bb:e3:17:30:23:c4:87:8f:
09:56:28:78:f6:fe:23:80:fb:01:83:c2:c9:a6:33:e2:ac:bc:
eb:51:e5:13:a8:79:5e:04:c1:62:7e:5a:98:cc:f1:3b:d7:fa:
98:25:e6:d6:d8:00:b2:9e:e7:c6:2d:45:84:69:54:82:3c:7a:
be:74:e8:84:03:df:a9:3f:6a:d5:b7:1d:a8:ac:4c:66:13:ab:
25:1f:cb:85:0a:f0:ad:ac:95:7b:91:e2:a8:92:03:dc:3c:8b:
c4:47:33:21
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgICDRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD
MTkwNTIzQUUwHhcNMjYwMjE2MTgxNTUzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2ViYS1iNDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2k2AIBT/6Iw2J4JlI6m9t86u/ydjbzBpKWwnn3ZC//A5cWqoFrBFzdKHCEvC
FnBpZVVkXz8MJbp8jac00Bznw7EEnULKEk7xH5gFkTceoCvxcLG1kwzYmkoyjw41
aRwqypIL6nWu/Zj7eh4QerpQHUoXvvFOb0l4KUfQWA/J95chNoHcBPZsHkSMWDEd
9AvirfS3loRSIIefDZWw+ITEo7yQehGJ44iYjOxxFqXsynOJR2tsgz/1mFB5dQ4n
uRdNcRpWQHrkpQdUUuedXExf0avqmRFctYA4Zf7xTt4xpTwOWp77RcS/H9JLM024
aHEItsGkdbRNup7K1xJeIbAeGQIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFNqHs5Bb
mIKOb3+Yh45L+qSahk6bMB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5
MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ
NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUMzQkUvOTQ3QjM1MDYwOTM4MTFFQTk1Q0EzMTI5QzRGOUFFMDIvQzEzMzU2QzA5
MjE1MTFGMDg5RERDRjM5QzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAS
BAIAATAMAwQAZ/v0AwQA3PeBMBgEAgACMBIDBwAkB3OAAAoDBwAkB3OAoAAwDQYJ
KoZIhvcNAQELBQADggEBAIEWk5mI3sD6UEbzwYzXt3r3cm2wtt4MDiVgHa54rBSi
z0BnNnY2FyZWyLBJn6wlVZjW6NQyl3xsAwJaESO1OLrjGwBM+dtRBqG8uEjb/7yI
sR+JkGZpasHZ/Vbztor0Cmzuw74mPL1HroPDce0juYTLlShluANVYTBzhc1VBCg6
XXRYSFxqkpppqmqBq/2w0IVqIfigGwB3Yoy74xcwI8SHjwlWKHj2/iOA+wGDwsmm
M+KsvOtR5ROoeV4EwWJ+WpjM8TvX+pgl5tbYALKe58YtRYRpVII8er506IQD36k/
atW3HaisTGYTqyUfy4UK8K2slXuR4qiSA9w8i8RHMyE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:11 2026 by rpki-client