
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/813EDCA4137E11EF9969A86BC4F9AE02.roa
File: 813EDCA4137E11EF9969A86BC4F9AE02.roa (raw, json)
Hash identifier: nhipcqCRahKjZ7pabpVlQXPUYNPrNjWPoR5hykm0s/Q=
Subject key identifier: 17:3C:6E:2B:EC:EE:1D:F0:1A:24:04:6E:57:5D:C6:4F:EE:43:4F:B9
Certificate issuer: /CN=A9128C33/serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E
Certificate serial: 023B
Authority key identifier: AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/813EDCA4137E11EF9969A86BC4F9AE02.roa
Signing time: Fri 25 Sep 2026 03:53:04 +0000
ROA not before: Fri 25 Sep 2026 03:53:04 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 151671
IP address blocks: 103.255.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl
rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 03:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128C33, serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E
Validity
Not Before: Sep 25 03:53:04 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ab5f020-82a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:33:85:be:f0:18:3b:3d:bd:80:92:8e:73:86:
0b:9c:91:d9:e5:55:6d:59:7a:99:e5:c1:c3:bc:14:
21:86:01:1e:ef:86:a4:13:4a:44:fd:83:09:38:f8:
c9:42:84:c1:0c:f8:dc:f7:14:b5:81:2f:52:e6:29:
df:02:e4:e0:8f:30:a4:1b:98:8b:a0:83:3b:2a:f7:
94:6c:04:7b:04:2f:c9:15:cf:11:a4:85:cc:61:2f:
30:0c:4d:ae:0a:96:23:72:01:df:7f:67:2e:5c:6f:
dc:f0:23:3f:c0:9e:92:86:f8:24:9c:36:b2:ae:ba:
ce:b1:2e:2e:3a:35:07:1c:96:26:00:b6:e4:c8:bb:
c9:70:fa:c5:50:0b:c1:0a:81:a3:ac:a1:31:b7:00:
18:dd:a8:c4:fa:6b:06:69:7e:e8:f0:0c:d5:70:5d:
9b:a1:13:ef:f5:04:8c:ed:cd:c0:52:99:b7:91:69:
cc:86:b2:f4:07:e4:d9:06:15:6c:88:2f:92:55:7d:
37:74:81:60:64:a6:3b:bb:85:c2:3b:65:33:f6:64:
72:aa:18:a6:36:03:02:6d:2c:7c:c3:f4:42:43:25:
11:d8:35:f3:9c:f8:42:ba:dd:85:45:2b:8d:ad:66:
c5:60:8e:0e:3c:87:27:fd:10:3e:a7:e7:86:b8:c6:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3C:6E:2B:EC:EE:1D:F0:1A:24:04:6E:57:5D:C6:4F:EE:43:4F:B9
X509v3 Authority Key Identifier:
keyid:AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/813EDCA4137E11EF9969A86BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.255.96.0/24
Signature Algorithm: sha256WithRSAEncryption
13:91:28:08:81:89:66:0a:2c:e4:c9:8a:ec:8f:8e:e6:5b:4e:
e3:73:bc:8c:8b:2b:09:03:b8:70:28:56:1e:65:99:1e:a6:d4:
42:c9:01:c6:bd:90:d5:d3:1e:4c:91:13:a1:47:39:ec:89:8e:
b3:ff:b3:6d:19:64:20:05:de:cd:30:42:74:a2:78:db:e6:4a:
fd:4d:57:ac:23:cd:81:f5:dd:92:3f:7e:07:5e:e3:b1:d5:15:
95:0b:36:ec:ce:d1:e4:c0:d6:46:92:72:78:d3:ba:4b:7a:bc:
c3:ba:ab:87:05:fe:3d:ef:a0:91:1a:7f:4b:9c:34:46:cd:0f:
99:31:b6:d2:32:97:6e:95:a5:08:3f:4b:93:c0:e6:43:48:96:
ac:27:9e:20:88:12:70:f1:74:79:c7:66:08:b5:b2:22:e0:87:
6e:25:8c:74:08:d2:1d:4f:dd:be:7d:51:5c:f9:c7:9b:e8:bc:
e6:80:52:45:26:63:63:1e:bb:af:3d:66:6f:79:58:65:e5:fe:
ed:63:2b:1e:eb:af:a7:1d:fc:52:44:eb:ec:12:77:b2:66:53:
fa:52:49:80:59:5f:19:2a:41:02:89:d8:c9:1f:c6:59:a5:4e:
20:55:b9:02:c4:f6:5b:0e:93:9b:dd:e7:dc:b3:24:3b:aa:30:
a3:d1:35:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:23:23 2026 by rpki-client