
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/A28D191A8F0B11F1A221D4CB6F11F970.roa
File: A28D191A8F0B11F1A221D4CB6F11F970.roa (raw, json)
Hash identifier: dmFE1Lu71TTV6LKy9L9ZuGNgYwfgQHvgYmU9J90y8UM=
Subject key identifier: B9:1F:9B:F6:58:30:5F:9E:2B:4A:D3:60:CF:8B:B7:69:55:75:9A:E7
Certificate issuer: /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D
Certificate serial: 0940
Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/A28D191A8F0B11F1A221D4CB6F11F970.roa
Signing time: Mon 03 Aug 2026 07:19:16 +0000
ROA not before: Mon 03 Aug 2026 07:19:16 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 132864
IP address blocks: 103.207.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl
rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2368 (0x940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D9CB, serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D
Validity
Not Before: Aug 3 07:19:16 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a7040f4-1353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ee:3c:1d:3c:43:8f:8d:af:67:7d:44:bb:e8:
55:77:ce:ea:ec:e2:af:d3:08:37:54:36:d6:99:71:
77:09:89:45:5f:c8:34:a9:d3:1b:c0:60:a1:18:a2:
b1:b7:ad:c0:a2:0b:de:68:42:1b:69:88:7f:f1:00:
9e:42:65:57:9c:fc:d9:04:4f:9a:ef:72:5b:52:73:
51:d0:b2:80:b9:8c:0f:50:c8:32:15:47:e3:13:c5:
35:f6:47:ed:a8:20:f5:7c:e0:a0:70:da:54:57:e1:
5e:fb:2c:1a:35:d0:a1:03:df:09:3f:c0:05:91:e0:
a6:20:f8:4f:05:e8:d8:6f:7f:d2:64:89:ca:8d:88:
d7:2d:4b:93:78:ef:b1:63:c5:aa:cf:56:ca:0a:c5:
50:7a:19:db:d2:98:ed:a7:a1:7a:26:33:7a:94:dc:
38:16:5b:92:70:ae:e4:84:7c:31:1c:f5:aa:fa:56:
4e:85:99:5f:da:c2:fb:62:e0:76:c6:2e:8b:6d:ff:
f7:2a:c2:b4:23:99:dc:d7:09:cf:6f:3b:41:7c:39:
cc:d1:d0:84:87:d8:a6:a8:d2:b8:6b:f9:2c:03:21:
5f:77:3b:f0:0e:b3:c2:f6:a8:83:7f:f2:a2:81:99:
26:40:5b:7f:63:ac:18:03:56:2c:e3:49:60:0e:62:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1F:9B:F6:58:30:5F:9E:2B:4A:D3:60:CF:8B:B7:69:55:75:9A:E7
X509v3 Authority Key Identifier:
keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/A28D191A8F0B11F1A221D4CB6F11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.207.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:45:0c:08:8d:cb:c9:26:c8:d4:9e:41:16:4e:68:a5:46:86:
67:5d:af:64:e8:c3:54:bf:c0:70:55:62:b6:62:60:43:2c:50:
35:fa:1e:fa:a3:9f:38:09:a3:9d:28:cf:8b:f6:9f:71:4d:50:
d6:20:65:b9:fb:dd:bc:55:2e:27:74:5a:06:c2:c4:8e:7d:b7:
0d:cc:7f:02:be:7f:b8:b7:91:4f:3c:aa:12:0e:95:22:4b:66:
40:45:66:85:c5:53:d2:70:db:e8:05:44:9c:75:e9:7b:14:8f:
6e:2c:c6:40:1d:be:b1:8b:ec:77:22:8c:69:26:64:3e:cc:7b:
e2:ae:0f:0d:69:fa:ca:98:71:9f:53:df:72:5b:05:7f:74:ae:
54:4f:58:85:ad:2f:0a:fd:b5:0c:b0:f7:39:61:bd:ab:72:67:
24:3e:53:f2:be:a6:f0:24:3b:78:e4:f7:9c:d8:18:5c:02:28:
b9:7e:a2:28:21:c9:16:9c:53:a9:f4:8a:f5:35:07:d7:58:07:
f8:38:73:7c:54:01:72:ba:d4:dd:69:95:24:95:92:c1:5d:36:
e9:37:4b:3d:18:30:a5:f9:df:00:df:1f:e1:c5:f6:b1:de:bf:
4f:dd:33:c4:2c:e8:b7:b7:1c:70:4e:1c:7d:f9:06:ff:fe:84:
6b:ea:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:37:01 2026 by rpki-client