
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/C8D6C4CAD1EF11EAA9944238C4F9AE02.roa
File: C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (raw, json)
Hash identifier: 4OkyBwmRIM7XSlHuA0mZ17uCQ8kxzwQYFaT6wsYTPlw=
Subject key identifier: 7F:F5:0B:C1:D6:06:5B:28:E6:A5:00:B2:C0:D6:BE:C6:CB:B0:83:2A
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 277F
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/C8D6C4CAD1EF11EAA9944238C4F9AE02.roa
Signing time: Fri 02 Oct 2026 18:34:31 +0000
ROA not before: Fri 02 Oct 2026 18:34:31 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139038
IP address blocks: 103.138.210.0/24 maxlen: 24
103.138.210.254/32 maxlen: 32
2001:df0:5580::/48 maxlen: 48
2001:df0:5580::/54 maxlen: 54
2001:df0:5580:800::/54 maxlen: 54
2001:df0:5580:1000::/52 maxlen: 52
2001:df0:5580:1000::/54 maxlen: 54
2001:df0:5580:2000::/52 maxlen: 52
2001:df0:5580:3000::/52 maxlen: 52
2001:df0:5580:7000::/52 maxlen: 52
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 18:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10111 (0x277f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Oct 2 18:34:31 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6abff937-7e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6d:55:82:8b:1a:2b:a5:f3:be:12:ac:84:9d:
e8:a7:81:d9:a5:be:c4:64:91:1e:1b:69:7f:f8:55:
0b:41:b0:77:ae:5f:37:7e:99:fc:24:1b:67:a7:e3:
06:2d:d2:d0:40:af:ba:20:27:cf:ca:58:a0:22:0f:
e1:04:30:35:c5:5f:98:82:9d:33:24:68:3f:7c:2e:
62:2e:92:bc:3d:69:86:f7:65:43:54:b8:a8:fb:6f:
ce:7d:2c:78:af:a2:e2:71:f6:ac:9e:d2:20:24:cc:
c6:7d:fc:0d:c8:3b:55:43:74:ee:fe:07:84:bc:ad:
91:d7:e8:5e:0a:44:4b:a6:60:3a:8c:b8:a7:65:d4:
d9:37:60:d0:31:36:1d:da:ef:11:14:64:29:7f:67:
b4:6b:31:2f:9d:f2:0e:98:fa:59:d9:71:46:f8:99:
3f:d4:6e:a8:6d:04:0e:18:71:62:e5:1d:ad:c4:23:
7a:9a:c3:8c:33:6b:59:a5:08:ea:af:25:7a:a8:05:
27:0b:4e:18:ce:5e:10:1c:e6:23:fa:45:e1:93:70:
02:fc:28:1d:d8:46:9d:ec:39:48:cb:59:31:00:f3:
25:9c:8d:ad:66:c3:0c:99:af:2e:ef:26:98:48:46:
90:85:6d:30:8a:54:e7:b9:ad:00:77:ff:44:81:3e:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F5:0B:C1:D6:06:5B:28:E6:A5:00:B2:C0:D6:BE:C6:CB:B0:83:2A
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/C8D6C4CAD1EF11EAA9944238C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
IPv6:
2001:df0:5580::/48
Signature Algorithm: sha256WithRSAEncryption
83:7f:63:f6:41:2b:51:3b:7c:b1:89:9b:cd:5a:a7:60:ea:8f:
70:c2:24:9c:93:c7:4a:ff:00:20:ae:d1:0c:98:c1:b4:5b:e4:
08:58:d4:8e:49:69:b4:d1:54:a4:80:7c:87:c3:ba:09:38:2e:
2f:15:ec:fa:b6:04:bd:6e:d5:ea:9f:d0:be:56:2a:dd:3f:ef:
14:60:20:ae:7f:53:dc:54:4c:a5:93:6b:9b:88:93:36:da:83:
64:32:5c:82:48:fe:8c:6e:31:b3:49:96:4d:7e:d3:6d:a4:ab:
04:e7:dd:5a:50:77:3c:1d:8e:3a:33:ac:dd:f5:39:70:28:35:
f9:56:22:4e:11:51:ec:9f:66:14:75:f1:ac:5e:0b:c3:50:bb:
bf:8d:99:66:93:f3:00:26:1d:59:7d:cd:b0:4e:0b:82:0c:78:
dd:b6:98:74:bd:2c:eb:a9:3e:ae:b4:4e:5d:d0:7e:98:3b:a7:
16:fb:cd:5d:16:7f:aa:5a:d2:e5:cd:35:68:01:6d:a7:d2:55:
65:60:50:97:34:66:5b:ab:0d:1f:ca:52:82:1e:65:36:5a:9b:
dc:c2:ef:41:9c:c4:b7:f0:a5:6c:94:91:7e:18:8a:76:36:82:
9c:45:0f:71:b0:71:78:9d:fe:9f:d3:77:b1:9b:4f:0c:86:a2:
a4:2b:6e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:43:14 2026 by rpki-client