
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/C59B1D6E0C1811EDA9B32927C4F9AE02.roa
File: C59B1D6E0C1811EDA9B32927C4F9AE02.roa (raw, json)
Hash identifier: 8z0XBV6e+fEAEFFa5RbaRTCyigpSMXHXc63eCflfmfI=
Subject key identifier: E3:B4:88:12:96:AD:22:48:01:57:26:63:80:15:13:22:5A:0C:72:73
Certificate issuer: /CN=A919F213/serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B
Certificate serial: 0313
Authority key identifier: AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/C59B1D6E0C1811EDA9B32927C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:04:34 +0000
ROA not before: Thu 07 Aug 2025 02:38:11 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 150000
IP address blocks: 103.190.138.0/23 maxlen: 23
103.190.138.0/24 maxlen: 24
103.190.139.0/24 maxlen: 24
2001:df0:ee40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl
rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:32:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 787 (0x313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F213, serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B
Validity
Not Before: Aug 7 02:38:11 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a40122-9bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:9d:08:d5:78:cf:ad:6d:a1:bb:e8:9d:fb:
dc:24:83:f3:34:6b:14:39:31:da:08:88:ea:42:0d:
f1:b9:b9:58:4d:e3:9d:4a:f1:2f:a2:d1:8d:c1:db:
8b:03:19:c4:db:30:36:6a:56:c6:80:2d:96:59:fa:
f5:63:6a:4b:07:0d:3f:00:cb:76:16:e0:49:f5:4e:
d8:4b:72:ca:af:27:30:5b:32:57:c3:ea:52:e7:51:
b4:98:d3:4f:31:f7:55:65:d8:22:02:d8:43:2e:ee:
96:2c:9c:2f:cc:c2:2f:a6:1c:71:d5:72:09:c3:5f:
5c:97:1d:21:f9:1c:48:fc:72:f6:51:7b:a0:c4:72:
9f:54:03:20:a4:d0:ea:9e:80:ab:c5:52:c0:a8:9b:
c6:cc:ca:ac:0a:88:e5:44:ad:7a:be:27:2e:7a:3c:
b1:04:b7:b2:c0:6a:76:17:3c:47:2c:c0:df:47:43:
2c:f6:d9:b6:ff:76:f0:0c:eb:b1:63:72:61:cb:2d:
85:a4:ac:77:51:bc:e3:94:de:5c:35:14:f9:8d:5a:
3d:f1:32:c7:35:61:60:80:5b:a2:0e:65:c2:5d:19:
b5:8b:d8:98:1a:b4:c8:2a:a4:d5:3f:b0:f5:53:ca:
f9:08:cd:75:be:20:42:f6:90:1e:f9:34:8e:ec:c7:
0d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B4:88:12:96:AD:22:48:01:57:26:63:80:15:13:22:5A:0C:72:73
X509v3 Authority Key Identifier:
keyid:AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/C59B1D6E0C1811EDA9B32927C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.190.138.0/23
IPv6:
2001:df0:ee40::/48
Signature Algorithm: sha256WithRSAEncryption
86:c6:fc:8b:90:93:29:50:21:69:20:27:3e:2c:ea:73:95:f9:
19:e2:5a:12:2a:34:fe:1d:1b:1c:72:ec:71:dd:e9:79:c0:f9:
fc:c1:b5:8d:cd:41:28:fa:ff:fd:49:20:19:c0:b8:8b:ff:00:
b4:61:1c:3b:f7:7a:7d:9c:d9:ae:8c:d1:67:df:19:60:36:a9:
de:ad:f8:17:9e:23:ee:93:ad:f0:da:7e:76:0a:0e:1e:bf:c6:
66:67:f1:9a:5d:c3:7d:a0:71:5d:7e:7c:c7:64:e1:c0:24:9f:
65:19:7d:67:e1:58:03:e0:3e:39:2e:8f:87:cf:f1:1f:0c:32:
57:74:20:65:71:5c:0c:02:30:34:28:ab:9d:d2:56:05:49:c0:
8d:0c:c5:26:cd:ef:fc:93:14:d6:2f:4b:81:bc:2e:f9:1c:f3:
e9:5b:8f:3e:23:5e:59:a3:c0:c9:ff:f9:c0:b1:8d:80:4a:3a:
5e:a3:06:b4:c8:d0:49:d5:dc:51:8b:73:35:e1:f8:a9:25:d6:
58:03:03:e9:43:82:a7:66:23:e5:b9:00:20:f2:b4:96:e8:73:
67:ad:1a:0e:07:69:30:91:70:29:ae:ca:68:1f:00:dc:44:54:
e8:5e:9d:6e:db:95:18:d7:c6:55:2f:41:b4:c9:8e:d5:e4:d1:
a0:fc:63:d9
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYyMTMxMTAvBgNVBAUTKEFDQ0U4MkI1RURGNEEyMUMzMjAxQjhFMkI0MDAwQzgz
MjQ1MTM1MEIwHhcNMjUwODA3MDIzODExWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDEyMi05YmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvFmdCNV4z61tobvonfvcJIPzNGsUOTHaCIjqQg3xublYTeOdSvEvotGNwduL
AxnE2zA2albGgC2WWfr1Y2pLBw0/AMt2FuBJ9U7YS3LKrycwWzJXw+pS51G0mNNP
MfdVZdgiAthDLu6WLJwvzMIvphxx1XIJw19clx0h+RxI/HL2UXugxHKfVAMgpNDq
noCrxVLAqJvGzMqsCojlRK16vicuejyxBLeywGp2FzxHLMDfR0Ms9tm2/3bwDOux
Y3Jhyy2FpKx3UbzjlN5cNRT5jVo98TLHNWFggFuiDmXCXRm1i9iYGrTIKqTVP7D1
U8r5CM11viBC9pAe+TSO7McNjQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFOO0iBKW
rSJIAVcmY4AVEyJaDHJzMB8GA1UdIwQYMBaAFKzOgrXt9KIcMgG44rQADIMkUTUL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIxMy83MjM0RERDNDBD
MTYxMUVEQjQwMUY0MjVDNEY5QUUwMi9yTTZDdGUzMG9od3lBYmppdEFBTWd5UlJO
UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JNNkN0ZTMwb2h3eUFiaml0QUFNZ3lSUk5Rcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUYyMTMvNzIzNEREQzQwQzE2MTFFREI0MDFGNDI1QzRGOUFFMDIvQzU5QjFENkUw
QzE4MTFFREE5QjMyOTI3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ76KMA8EAgACMAkDBwAgAQ3w7kAwDQYJKoZIhvcNAQELBQADggEB
AIbG/IuQkylQIWkgJz4s6nOV+RniWhIqNP4dGxxy7HHd6XnA+fzBtY3NQSj6//1J
IBnAuIv/ALRhHDv3en2c2a6M0WffGWA2qd6t+BeeI+6TrfDafnYKDh6/xmZn8Zpd
w32gcV1+fMdk4cAkn2UZfWfhWAPgPjkuj4fP8R8MMld0IGVxXAwCMDQoq53SVgVJ
wI0MxSbN7/yTFNYvS4G8Lvkc8+lbjz4jXlmjwMn/+cCxjYBKOl6jBrTI0EnV3FGL
czXh+Kkl1lgDA+lDgqdmI+W5ACDytJboc2etGg4HaTCRcCmuymgfANxEVOhenW7b
lRjXxlUvQbTJjtXk0aD8Y9k=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:32 2026 by rpki-client