
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/968DFDCE973311EDBFD0B43CC4F9AE02.roa
File: 968DFDCE973311EDBFD0B43CC4F9AE02.roa (raw, json)
Hash identifier: epbDGYMjkBjgCB8zOENg9JA5Dqcx6zSsCf3WSlYM71Q=
Subject key identifier: 1C:74:01:63:B3:B5:4F:51:39:73:BA:15:76:FC:32:E2:AC:CF:F7:5E
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 2748
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/968DFDCE973311EDBFD0B43CC4F9AE02.roa
Signing time: Tue 30 Jun 2026 18:22:14 +0000
ROA not before: Tue 30 Jun 2026 18:22:14 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 65533
IP address blocks: 103.138.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10056 (0x2748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Jun 30 18:22:14 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a440956-eb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4d:32:06:de:2a:80:ad:ce:2a:f9:60:c8:bd:
74:f4:4f:e3:21:7a:2d:7c:e9:32:d1:ec:e0:cd:77:
13:45:cb:b0:5f:9c:fe:35:69:fb:53:bf:83:46:39:
be:03:f4:a2:8d:f6:33:0f:7e:77:35:a6:04:83:fb:
04:33:b9:1d:ec:7a:b2:5a:40:a5:11:6c:a0:48:90:
9c:2e:59:b1:9d:23:9a:78:44:cd:1b:b5:ff:af:75:
9f:36:05:87:f4:82:34:1f:57:02:ab:d7:d1:e6:de:
08:ef:6a:e9:fb:74:f7:aa:7d:ea:d7:c0:6e:a1:f5:
d0:ad:db:fb:f7:52:a1:53:65:a9:ba:77:2c:eb:72:
f5:90:5c:15:7c:db:2d:dd:c6:8c:81:13:95:36:ab:
72:33:6a:27:cc:f9:65:b5:a7:89:47:66:51:16:52:
f1:bf:ae:55:0a:05:b0:9f:50:66:fc:fc:aa:e7:c4:
91:e6:5e:b6:04:e0:78:c5:71:91:ea:d8:5e:02:e2:
fe:2b:41:2a:6d:99:60:24:32:a8:ae:43:66:34:cb:
61:63:88:52:48:c6:2f:94:30:5d:6f:4e:2d:e6:3d:
63:d6:3f:da:f0:82:5f:58:a8:33:a2:40:16:84:69:
00:4b:c3:ff:b6:0a:17:1c:22:7d:3e:8b:4d:37:2e:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:74:01:63:B3:B5:4F:51:39:73:BA:15:76:FC:32:E2:AC:CF:F7:5E
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/968DFDCE973311EDBFD0B43CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
67:58:8d:48:81:f1:05:3b:b7:8a:9e:13:62:54:80:29:33:af:
49:3b:a5:e7:59:21:72:cb:37:79:71:48:e6:e2:b0:d9:46:3f:
75:da:dd:c1:55:27:f2:1e:05:fa:01:0b:30:95:90:6f:e9:2a:
23:de:d4:bd:35:04:89:f2:30:0a:64:65:6a:05:1e:ca:a1:5f:
33:5d:1d:f2:8b:da:8d:e4:d0:5f:33:50:8f:21:8a:52:53:3a:
18:71:c5:9f:e8:6d:a6:97:27:57:a6:51:13:b5:3c:5e:64:8e:
58:85:18:fc:a7:24:11:51:e9:9c:b5:6b:f8:1d:d4:fa:f3:89:
15:d4:3a:d1:1d:4a:9e:ce:0e:60:d6:a4:59:b9:7a:4d:f7:94:
68:6f:cf:98:06:d3:93:51:90:d2:50:12:97:9c:44:ff:5a:a5:
fc:27:8a:2e:bf:84:28:84:00:70:dc:65:d4:09:37:65:b5:e8:
8d:95:23:b9:00:b4:72:a9:52:5b:5b:78:e1:bc:a3:ad:41:c8:
8a:5b:c2:ee:b4:57:5a:bf:b4:ed:07:7f:f7:ca:4e:c6:78:c3:
c4:d3:a4:d9:a3:6f:16:fb:3e:97:a8:87:5c:be:2f:f6:70:ea:
be:1e:ef:ee:fa:1c:dc:60:a3:09:9c:15:28:61:64:28:68:3d:
82:ab:c7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:12 2026 by rpki-client