
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/E667E45629D211F19DF1399897833773.roa
File: E667E45629D211F19DF1399897833773.roa (raw, json)
Hash identifier: SD1U0oEAY17iDXAUSZr2OKlv5Jwiojbt4ibmLhQz9DM=
Subject key identifier: 33:DB:0E:5D:6F:04:A2:3C:03:FA:01:70:06:A8:96:0D:F6:72:5B:A6
Certificate issuer: /CN=A9121E02/serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311
Certificate serial: 60
Authority key identifier: 90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/E667E45629D211F19DF1399897833773.roa
Signing time: Thu 17 Sep 2026 08:58:46 +0000
ROA not before: Thu 17 Sep 2026 08:58:46 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 18229
IP address blocks: 103.13.96.0/24 maxlen: 24
103.13.97.0/24 maxlen: 24
103.13.98.0/24 maxlen: 24
103.13.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl
rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121E02, serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311
Validity
Not Before: Sep 17 08:58:46 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6aababc6-583a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:53:72:ae:cd:25:8b:1a:17:33:86:7d:f9:93:
c6:ce:ce:97:d3:d5:87:f2:ad:9e:f4:b8:a6:4d:85:
6d:6a:52:fc:f5:cb:49:0d:31:2b:05:32:d6:36:10:
e6:c6:14:9f:3d:e6:76:a2:a1:de:81:c5:e2:8a:9c:
0e:cc:d9:3b:6f:b2:3c:a0:06:83:9c:0b:b1:02:06:
01:69:d5:a9:d8:b9:36:3f:54:de:16:69:f5:65:e0:
84:50:17:98:c4:7b:18:76:83:7e:67:84:62:98:d7:
af:30:29:eb:79:0e:ce:0f:d2:bd:36:f3:47:30:e4:
ed:4d:49:24:f8:16:a4:59:2a:48:67:47:72:83:24:
a0:21:c3:92:df:d6:e8:93:7e:be:bf:22:b7:ce:6b:
45:2c:25:29:85:e3:be:79:ac:b9:72:54:c3:16:86:
7a:7d:44:27:c2:dd:30:35:0c:5e:05:b7:8a:20:c8:
e4:16:4c:01:9b:2d:2c:29:18:ee:60:4d:03:56:dd:
47:45:45:e4:9c:fa:2d:44:f3:83:ca:d7:f0:e5:34:
25:29:17:e1:a8:c5:3c:ba:b2:61:39:1c:ba:31:2d:
b0:9f:4e:d1:0c:51:97:90:b5:63:bc:8b:8c:37:30:
1e:b2:70:54:f9:59:f5:5b:c4:5e:47:c2:63:04:3b:
0a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DB:0E:5D:6F:04:A2:3C:03:FA:01:70:06:A8:96:0D:F6:72:5B:A6
X509v3 Authority Key Identifier:
keyid:90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/E667E45629D211F19DF1399897833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.13.96.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:07:f4:a3:e5:37:fd:58:03:61:f1:6b:58:68:12:66:ab:22:
b7:a5:76:31:f5:8c:b7:8f:33:93:f5:87:7f:92:00:13:c8:06:
b2:e9:40:ca:4f:1d:14:e9:de:b4:47:51:af:6c:f4:d0:0b:a7:
e2:c9:8a:dd:8d:67:e8:1c:fd:11:4a:85:d0:f3:f5:f4:e8:f0:
c0:66:78:b9:d1:c5:99:aa:c6:f0:e6:6c:0e:1a:b4:16:e5:2d:
1a:d0:e6:99:31:7c:ce:6c:e1:91:ff:2a:4f:33:46:1b:af:e3:
c7:19:a4:35:f3:c4:19:40:3f:6e:d6:11:10:91:0b:8f:2b:74:
f9:3a:bb:0e:74:01:6b:63:a7:16:cb:63:81:dc:34:5a:44:dc:
39:18:23:9a:3e:9a:08:d9:27:0d:40:6a:26:e8:d8:ac:b4:67:
4d:ba:8b:11:53:29:eb:32:3f:7d:1d:12:5a:34:6f:28:b1:22:
d4:ad:2d:d2:ad:e2:17:4d:2c:c2:b2:bc:83:65:5b:9b:fe:64:
bd:1d:0a:3b:03:f0:30:3a:7e:6d:33:12:01:92:09:f9:94:e5:
8d:ad:b2:60:32:fb:39:fc:61:c2:04:10:29:dd:61:41:e4:52:
2c:a9:3a:5a:d8:b2:09:50:15:7e:48:5c:43:2e:65:97:4c:ea:
0d:3b:7e:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:22:51 2026 by rpki-client