
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/13DD1B662D3111F180CCA088BC833773.roa
File: 13DD1B662D3111F180CCA088BC833773.roa (raw, json)
Hash identifier: R7dTMiB8fLcK528K7ntTaoxEftrwMiKxX3YP8FhMfmA=
Subject key identifier: FE:97:9A:6B:B8:DB:A8:5A:2D:02:0D:6B:F7:14:84:D7:75:67:82:E2
Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
Certificate serial: 23B2
Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/13DD1B662D3111F180CCA088BC833773.roa
Signing time: Tue 31 Mar 2026 18:41:39 +0000
ROA not before: Tue 31 Mar 2026 18:41:39 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 13335
IP address blocks: 103.241.212.0/24 maxlen: 24
103.241.214.0/24 maxlen: 24
103.241.215.0/24 maxlen: 24
202.165.124.0/24 maxlen: 24
202.165.125.0/24 maxlen: 24
202.165.126.0/24 maxlen: 24
202.165.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl
rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9138 (0x23b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
Validity
Not Before: Mar 31 18:41:39 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69cc1563-9ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:4d:f5:cd:38:9c:80:f5:42:13:e9:bb:57:
8f:07:22:61:71:4c:fd:d1:1f:02:5d:cd:1d:1a:a7:
a9:d7:c4:df:a4:87:da:b3:83:f5:d1:60:43:7b:ec:
c7:92:a3:1a:6b:86:db:20:39:66:16:b9:85:7e:91:
02:b6:e9:cc:96:6f:04:d1:c3:d2:3f:57:03:3a:5f:
36:63:b5:99:c9:38:ab:45:8e:1f:1b:8c:a8:a4:0a:
8d:19:e4:5b:88:1c:c9:99:9c:1a:17:bb:26:e4:23:
e5:1d:bf:f3:46:68:e5:64:7c:4e:96:1e:18:e8:fb:
2d:5c:75:3e:32:29:b7:7f:35:c2:60:60:e7:c9:d8:
f1:22:37:05:6e:4f:93:ce:b1:a6:b4:17:07:1e:ca:
5f:28:78:0e:2d:c3:d0:78:44:78:3e:01:d2:b8:2c:
12:1a:83:93:26:ff:63:26:f8:1f:a8:27:52:97:8b:
65:ce:9d:82:af:1c:f5:b9:57:fa:a8:7b:67:0e:c2:
ad:5d:3b:e6:92:d1:2b:67:71:d2:7a:0f:f8:f9:54:
88:9a:87:df:c5:76:73:ac:03:e8:17:32:cb:66:d1:
16:99:a7:4d:c8:da:5a:11:da:25:d3:30:7d:91:29:
90:c6:a0:c5:d8:2f:42:13:d3:4e:8a:3a:5b:cf:f1:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:97:9A:6B:B8:DB:A8:5A:2D:02:0D:6B:F7:14:84:D7:75:67:82:E2
X509v3 Authority Key Identifier:
keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/13DD1B662D3111F180CCA088BC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.241.212.0/24
103.241.214.0/23
202.165.124.0/22
Signature Algorithm: sha256WithRSAEncryption
07:b1:a6:37:6e:0c:13:43:ba:f5:33:64:1c:50:8b:26:9b:0f:
d9:57:bc:3f:43:c2:28:f6:50:e4:5e:d1:9f:d8:8e:e6:08:1b:
07:fb:fc:b3:f6:ca:c8:ba:23:8c:18:36:dd:30:32:98:64:4c:
fb:2f:98:55:61:4a:aa:55:06:79:c7:e1:35:02:e4:41:19:a0:
9b:70:86:99:20:b3:33:5d:8c:11:ce:51:ad:18:ee:fd:93:67:
ca:eb:48:bf:ba:a6:0e:22:1c:d6:31:d6:0d:f5:d4:ad:31:1c:
7a:ee:d4:6a:31:33:d0:b0:04:67:77:23:58:9a:66:56:ff:05:
56:22:cf:26:78:91:43:9e:c4:25:f9:e0:ab:1f:fa:7d:3d:31:
5a:d3:21:ed:f0:ae:d8:99:96:53:df:b1:49:da:93:9b:f3:b6:
45:b2:cc:ee:0b:44:a0:90:b8:e3:08:0c:0b:27:49:3d:38:79:
49:3f:7d:71:55:88:1b:46:0d:c7:57:8b:95:51:c4:7c:44:2f:
02:39:ea:23:3b:9e:48:23:cd:bb:43:c3:07:2e:06:65:1d:75:
25:d5:85:13:59:38:bf:ed:2e:30:9b:c8:d1:80:ee:b7:2e:a1:
18:d3:30:98:fc:0b:de:94:78:82:b2:14:63:03:48:95:83:0b:
52:f7:c4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:12:29 2026 by rpki-client