
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/0B33A3D45C0411EC83F9BB50C4F9AE02.roa
File: 0B33A3D45C0411EC83F9BB50C4F9AE02.roa (raw, json)
Hash identifier: zJF8O8liQWTTTI9wsOOoUt8RrC5l66VVMz14ooZ1WOc=
Subject key identifier: 68:7C:3A:81:32:A8:ED:1D:72:8D:ED:EF:51:57:C1:F0:AC:0D:EE:1E
Certificate issuer: /CN=A913339B/serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523
Certificate serial: 055C
Authority key identifier: D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/0B33A3D45C0411EC83F9BB50C4F9AE02.roa
Signing time: Sat 24 Oct 2026 23:47:42 +0000
ROA not before: Sat 24 Oct 2026 23:47:42 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 10021
IP address blocks: 103.173.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl
rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 23:13:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1372 (0x55c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913339B, serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523
Validity
Not Before: Oct 24 23:47:42 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6add439e-8c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2e:16:17:ca:dc:20:21:8e:ea:47:3a:14:b8:
fe:11:3b:20:91:0f:14:55:c4:26:9c:f7:4f:8a:3b:
75:c3:23:80:98:6b:ce:e7:f3:fa:74:76:f7:b8:1e:
68:7c:af:9e:8b:26:4d:81:f9:6f:78:08:42:57:62:
ee:b6:59:ac:fc:87:9e:6e:b5:de:d7:9a:58:de:05:
0e:5b:ed:96:73:b3:98:af:4c:74:4a:8d:87:c7:a7:
f1:e0:d3:74:bd:0e:57:34:1b:00:bd:90:7d:f4:95:
3f:d0:1c:a8:0a:ab:29:e1:8b:a5:98:05:b3:8c:32:
52:38:51:81:e5:ac:56:07:cd:98:4a:fc:98:53:d6:
d4:85:9b:2d:af:f2:b2:9e:81:93:b2:3b:cd:ff:4f:
16:96:a3:f5:48:48:11:81:80:cc:64:81:23:a3:ad:
e3:fd:c8:0b:10:5e:9e:40:ce:a9:82:ed:74:b6:07:
47:c3:24:47:20:12:1a:b2:0c:2d:c8:e2:87:a4:b2:
8a:50:d7:79:f3:80:20:e7:6a:99:6e:ec:4b:b2:b2:
22:30:5d:73:ab:4f:4b:79:55:5a:3f:1a:c2:38:81:
26:ae:72:be:0a:8a:df:12:75:9d:09:d1:70:35:55:
f8:4f:c3:e4:0e:0c:99:a4:af:ba:e7:94:4f:54:90:
a0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7C:3A:81:32:A8:ED:1D:72:8D:ED:EF:51:57:C1:F0:AC:0D:EE:1E
X509v3 Authority Key Identifier:
keyid:D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/0B33A3D45C0411EC83F9BB50C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.237.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:ae:af:a4:50:30:ef:57:df:f5:b2:c2:1c:bb:a5:75:e3:43:
4e:59:f5:9c:fc:2e:3d:33:e7:45:72:13:e6:37:a1:d7:09:3d:
05:b8:1e:72:d3:0b:24:92:b9:6b:10:f2:00:19:5d:1e:14:06:
10:93:bd:16:51:b2:5c:fd:85:03:99:4f:ed:7d:37:fd:80:15:
63:cd:e3:a1:18:2a:83:be:ba:48:bf:63:c1:70:2e:bb:2d:41:
1a:dc:10:c7:4c:ff:03:4c:03:b5:1f:be:6b:2e:58:40:cc:ba:
0a:0c:ee:8b:f0:aa:c7:2e:bf:a1:dd:89:ea:06:ca:1d:8a:29:
76:24:a6:dd:c3:9f:f4:24:6d:b9:19:9e:85:a4:a9:80:cf:e1:
29:91:41:73:55:a1:de:51:17:26:a9:59:9c:1a:c0:f5:70:ab:
ae:eb:57:99:7f:d7:f5:e7:f4:cc:81:2a:88:8c:0b:e0:98:19:
f5:da:01:c5:dd:b1:92:23:31:c0:fd:c7:f7:99:31:17:5a:51:
d2:04:04:86:00:fd:42:67:72:3f:6b:95:92:a1:00:c9:7e:93:
10:15:ee:00:af:1b:ad:82:85:b3:6a:a9:b2:91:fc:67:b0:be:
64:4c:3e:8e:da:4b:0c:3e:13:88:ae:fe:ff:f9:76:58:45:2d:
ab:c0:01:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:32:15 2026 by rpki-client