
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/13CA64E4C35B11EFA021A243C4F9AE02.roa
File: 13CA64E4C35B11EFA021A243C4F9AE02.roa (raw, json)
Hash identifier: sOyNPxScuSAhxypChzwUczRXPq4WV5UpffavEeD3qNM=
Subject key identifier: 3D:4B:C3:7F:B2:11:68:DD:67:63:5D:F1:31:C3:34:04:9D:88:4E:F5
Certificate issuer: /CN=A9135F07/serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C
Certificate serial: 0135
Authority key identifier: 4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/13CA64E4C35B11EFA021A243C4F9AE02.roa
Signing time: Wed 29 Jul 2026 07:56:02 +0000
ROA not before: Wed 29 Jul 2026 07:56:02 +0000
ROA not after: Sat 28 Nov 2026 00:00:00 +0000
asID: 131331
IP address blocks: 157.20.40.0/24 maxlen: 24
157.20.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl
rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135F07, serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C
Validity
Not Before: Jul 29 07:56:02 2026 GMT
Not After : Nov 28 00:00:00 2026 GMT
Subject: CN=6a69b212-cd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:42:bc:b8:6a:c0:f9:97:79:e0:95:3b:1b:
d0:a6:0b:e6:5d:a0:2b:c8:34:d0:54:80:32:13:dd:
4d:55:6f:a6:6b:75:35:d6:38:33:0f:f5:0f:94:1e:
a0:7c:27:4d:aa:36:e8:a9:b8:1f:1f:11:94:94:7d:
55:04:af:53:21:94:e7:d2:55:74:f9:ce:44:c3:d6:
95:c9:91:c7:ed:37:0a:bb:78:e1:b2:62:2f:27:a2:
e4:89:c8:cd:ce:c1:94:51:ac:da:f4:d7:50:e3:96:
cb:56:3d:33:22:6e:77:bf:47:d7:d9:63:d8:df:40:
8f:87:e8:2c:c2:bc:e1:76:4b:d2:32:f1:74:e1:0d:
4b:18:b3:02:b1:de:71:98:c9:eb:94:72:9d:ae:29:
04:f4:c5:9b:ce:ad:bd:10:d7:49:93:09:ba:5b:12:
9f:af:38:00:5e:2a:3c:01:57:da:82:16:45:a8:61:
25:68:82:50:8f:7f:80:8c:eb:92:7a:0b:3f:30:04:
56:8c:d7:e7:10:2b:ea:fb:bc:35:d8:05:f6:9c:16:
51:e1:6a:a1:9f:4b:ad:07:98:47:98:63:e3:8e:50:
11:27:96:b2:0c:3d:cd:86:c7:cb:29:c2:6e:ba:5c:
63:23:34:f7:d4:d8:58:a0:3e:2f:25:41:ca:50:06:
83:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4B:C3:7F:B2:11:68:DD:67:63:5D:F1:31:C3:34:04:9D:88:4E:F5
X509v3 Authority Key Identifier:
keyid:4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/13CA64E4C35B11EFA021A243C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.40.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:80:4a:ad:fb:03:ae:f6:d2:1b:26:30:34:55:ac:e9:c9:e9:
b9:13:b3:fc:39:be:08:4b:e8:b0:87:36:b1:96:06:cb:cb:1f:
ac:4b:e5:c6:47:76:fb:40:c2:e2:1f:10:53:f2:68:4d:6b:c2:
07:63:6d:d6:a6:6b:82:67:4f:ad:6a:21:b7:0c:10:fd:86:0a:
44:60:13:1f:e1:dd:66:68:5e:54:da:5d:74:31:0b:bd:60:34:
d4:9e:a5:c8:8e:66:66:b7:bc:84:dd:fc:00:01:93:5c:53:d8:
79:1f:1d:96:bd:f8:60:da:3f:ad:c0:8e:4e:ba:c5:0b:50:74:
50:21:71:b5:ec:f6:fc:cb:d9:64:52:a7:8c:1f:43:16:9b:bd:
c0:78:47:24:22:03:55:fb:ed:7d:72:7a:fc:01:00:cd:bd:8e:
ff:a1:da:58:c6:b4:c4:97:c9:c9:10:b1:3d:30:5b:35:10:2a:
1c:d8:40:d5:08:1e:38:ba:cf:01:13:c9:75:33:37:64:d4:22:
39:50:a9:a6:68:26:e5:76:0e:3c:fb:f0:a6:e8:4d:82:41:ec:
28:51:bf:82:a2:6c:fa:82:58:a3:c4:e2:bc:ed:ab:83:c3:ee:
2e:40:13:44:4c:08:e4:f1:c3:b0:00:5f:57:f1:e2:5a:37:cb:
41:72:c9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:43:03 2026 by rpki-client