
$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/0F7F7F6A072311ED8067812FC4F9AE02.roa
File: 0F7F7F6A072311ED8067812FC4F9AE02.roa (raw, json)
Hash identifier: VkVnfC34JR/811jGxsrew1RM+A9tRAb0W7MV3qismys=
Subject key identifier: AD:8A:C0:D1:DF:8C:5F:DA:FB:DF:80:AA:1F:80:66:41:AB:F8:27:DD
Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial: 7E1E
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/0F7F7F6A072311ED8067812FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:06:45 +0000
ROA not before: Tue 02 Sep 2025 17:36:22 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 2914
IP address blocks: 103.13.80.0/22 maxlen: 23
202.68.64.0/20 maxlen: 23
203.4.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32286 (0x7e1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100
Validity
Not Before: Sep 2 17:36:22 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a48035-1c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:37:11:71:8a:ae:4d:1a:0e:c5:78:46:15:
af:a5:39:54:42:dc:d9:f7:b3:8f:d9:ee:03:d0:09:
32:c7:bd:80:e6:63:93:7d:4e:f2:0b:e3:ad:55:8a:
43:4a:9f:db:7a:3b:7c:1e:b1:09:f7:68:f0:9a:f4:
07:21:63:25:5f:3e:06:7f:34:d0:05:45:fd:76:68:
e3:1b:0b:cc:97:0b:e3:5e:6d:4e:fe:48:21:70:3c:
b7:c1:18:7d:3e:16:6d:04:48:c2:57:54:56:91:11:
53:8c:25:c2:0f:0c:5a:6b:b1:64:72:00:11:87:b9:
00:6f:ec:1b:71:f3:c3:14:80:4f:d8:6d:c4:d0:b9:
09:35:7e:ab:39:2f:b2:69:1e:fc:6b:70:a9:99:f7:
bc:52:ce:f6:13:3c:25:70:7a:ae:f4:bb:10:9e:e0:
cb:92:c3:fb:53:3a:56:01:b8:eb:fb:de:fe:3a:5b:
f0:97:ad:06:2b:66:ca:a5:56:86:93:9b:62:51:a9:
49:f0:b0:5c:3c:82:8f:a8:76:99:3c:3d:d4:ab:d2:
d7:ff:0c:43:33:b5:69:b7:95:34:d4:fb:ef:13:70:
c7:e9:cb:0f:57:23:4a:f9:f4:3f:47:54:59:46:86:
03:70:a9:4c:ae:bb:71:f7:49:73:22:39:ac:44:3a:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8A:C0:D1:DF:8C:5F:DA:FB:DF:80:AA:1F:80:66:41:AB:F8:27:DD
X509v3 Authority Key Identifier:
keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/0F7F7F6A072311ED8067812FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.13.80.0/22
202.68.64.0/20
203.4.212.0/22
Signature Algorithm: sha256WithRSAEncryption
14:3e:35:a4:e0:d2:ef:c8:97:20:7f:4c:8e:02:78:7e:34:a1:
86:f6:f0:d9:f7:c5:48:a2:11:4f:c9:e4:10:54:e7:78:0c:86:
64:73:a8:30:68:9b:31:a9:f8:b3:d7:c6:76:36:72:64:16:ca:
96:83:69:d3:5b:09:74:b4:87:dd:0a:ae:9d:10:72:a6:0c:fd:
2b:b8:81:ac:a4:83:ab:81:20:c9:d3:5c:4e:1c:46:39:ac:a3:
3d:53:c5:f2:5a:b7:56:ca:be:ed:fd:95:3c:3f:b5:2d:5b:6f:
aa:ce:d7:fd:d3:1b:5a:d8:53:8c:4d:df:87:e3:fd:2a:57:6b:
b4:93:fd:5c:08:52:f2:4f:fd:28:a7:2d:a9:d2:54:54:38:39:
62:d9:a3:bb:47:a4:13:b1:2b:d1:db:ca:4e:82:dd:12:c9:f2:
4e:67:d1:56:51:b1:bd:0d:16:65:37:4d:49:c7:1f:b1:16:c3:
27:ec:80:e8:7d:6a:db:4c:52:9c:cb:c4:d3:2f:94:4b:19:d2:
e1:22:21:4a:3e:ca:d9:5c:c9:8d:41:c2:22:ef:ab:41:4f:ce:
4b:f7:01:c7:af:fd:83:e0:e0:5e:ea:74:32:31:31:eb:44:7b:
7a:d9:cf:94:6e:a1:07:16:5d:e7:02:6c:3d:a5:14:dd:9a:4e:
3c:6e:8e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:40:50 2026 by rpki-client