
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/641D4DF8302B11EAA1F5A16AC4F9AE02.roa
File: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (raw, json)
Hash identifier: sXBQBxueKe1CqsSkcLSZtAl1yOR3L97KsnKbAwvpYXA=
Subject key identifier: CA:41:F3:94:0B:0A:06:68:D1:7A:E7:A9:AC:DF:14:E3:56:E8:38:44
Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4
Certificate serial: 1087
Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/641D4DF8302B11EAA1F5A16AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:01:09 +0000
ROA not before: Wed 18 Feb 2026 17:15:40 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 133151
IP address blocks: 103.247.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl
rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4231 (0x1087)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E8F3, serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4
Validity
Not Before: Feb 18 17:15:40 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a470d5-7af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:e0:54:26:72:4f:01:6a:69:28:25:32:87:
f5:ff:af:35:64:db:76:b6:06:b0:aa:53:07:23:72:
27:3e:7b:7e:c8:6c:e1:71:a1:75:4a:29:0c:ce:30:
9a:14:a2:47:b4:86:97:7a:8b:0a:26:21:3a:70:e4:
84:33:20:39:69:cb:db:75:2d:70:35:7f:93:03:6d:
1b:65:0a:5a:39:4b:12:dc:aa:87:8d:97:48:01:42:
00:0e:5b:da:f3:aa:da:4e:32:0b:a8:bb:72:ad:1b:
cd:29:dd:18:76:bc:89:f3:8a:6f:25:38:45:f9:cb:
f6:12:a6:ed:5c:ac:1e:2b:43:73:0e:30:7c:98:8d:
24:0e:f1:b9:66:74:df:a2:11:35:21:f5:74:ef:6c:
ca:10:ad:9f:8d:0c:ef:7e:bd:fb:29:cd:3e:d1:80:
89:48:ff:70:a7:c1:e4:2d:00:4d:f8:5a:39:f5:4c:
a5:3f:ec:bf:51:48:06:ef:65:7e:82:76:22:ab:65:
e0:19:f7:d4:93:24:49:cc:41:6a:45:d0:48:a9:dc:
48:14:e1:fa:8e:c6:fa:6c:ac:10:77:75:3e:16:1c:
7a:62:86:8e:3e:99:a3:e8:80:61:7f:c9:21:1e:ec:
00:47:38:39:32:38:f6:11:b3:69:2d:cd:40:71:3d:
1b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:41:F3:94:0B:0A:06:68:D1:7A:E7:A9:AC:DF:14:E3:56:E8:38:44
X509v3 Authority Key Identifier:
keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/641D4DF8302B11EAA1F5A16AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.247.204.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:61:e7:a1:29:9c:2c:83:42:f2:84:ac:2f:6b:2f:f4:c9:6c:
67:87:02:41:82:10:34:51:30:17:3a:fe:04:ad:67:0d:b0:a1:
f8:e4:82:d0:b4:7b:1f:23:93:10:37:72:13:44:6b:61:f6:08:
58:ac:12:6f:6a:09:f7:98:31:16:75:99:21:f2:b5:20:cd:be:
20:fd:0b:80:67:f9:04:57:31:21:7d:5e:72:92:68:1f:bd:87:
61:ca:82:f8:be:f4:1d:20:32:80:24:79:a2:5b:14:da:92:4f:
45:22:7e:4e:d6:4a:e7:ee:34:f8:d9:1c:1a:b8:b9:f6:6d:1f:
df:cd:54:54:81:de:d4:99:6b:52:9f:f0:93:32:09:52:69:8e:
de:33:05:96:88:1b:66:63:d3:8f:54:15:24:39:69:e3:f9:35:
73:e2:73:79:83:02:4d:c3:5d:00:18:2b:16:d8:2f:af:27:9c:
bc:9d:d6:bd:f4:e9:ef:25:79:66:48:5c:7a:41:06:9d:19:b7:
60:8a:c5:b3:17:a7:fa:e5:7b:eb:d0:2f:0f:ba:d3:56:00:cd:
8b:eb:2c:be:59:81:57:9f:c0:6c:ce:a0:a5:82:8d:49:80:3e:
92:7a:42:8b:71:66:7a:d3:10:4c:12:34:63:41:bb:13:f8:00:
66:6f:d4:4e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICEIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz
ODIxMjg4QTQwHhcNMjYwMjE4MTcxNTQwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzBkNS03YWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtergVCZyTwFqaSglMof1/681ZNt2tgawqlMHI3InPnt+yGzhcaF1SikMzjCa
FKJHtIaXeosKJiE6cOSEMyA5acvbdS1wNX+TA20bZQpaOUsS3KqHjZdIAUIADlva
86raTjILqLtyrRvNKd0YdryJ84pvJThF+cv2EqbtXKweK0NzDjB8mI0kDvG5ZnTf
ohE1IfV072zKEK2fjQzvfr37Kc0+0YCJSP9wp8HkLQBN+Fo59UylP+y/UUgG72V+
gnYiq2XgGffUkyRJzEFqRdBIqdxIFOH6jsb6bKwQd3U+Fhx6YoaOPpmj6IBhf8kh
HuwARzg5Mjj2EbNpLc1AcT0bSwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMpB85QL
CgZo0XrnqazfFONW6DhEMB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0
OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp
S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0U4RjMvMTJGNERGMTg1NDk0MTFFOUI1OTdFNTcxQzRGOUFFMDIvNjQxRDRERjgz
MDJCMTFFQUExRjVBMTZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ/fMMA0GCSqGSIb3DQEBCwUAA4IBAQChYeehKZwsg0LyhKwvay/0
yWxnhwJBghA0UTAXOv4ErWcNsKH45ILQtHsfI5MQN3ITRGth9ghYrBJvagn3mDEW
dZkh8rUgzb4g/QuAZ/kEVzEhfV5ykmgfvYdhyoL4vvQdIDKAJHmiWxTakk9FIn5O
1krn7jT42RwauLn2bR/fzVRUgd7UmWtSn/CTMglSaY7eMwWWiBtmY9OPVBUkOWnj
+TVz4nN5gwJNw10AGCsW2C+vJ5y8nda99OnvJXlmSFx6QQadGbdgisWzF6f65Xvr
0C8PutNWAM2L6yy+WYFXn8BszqClgo1JgD6SekKLcWZ60xBMEjRjQbsT+ABmb9RO
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:01 2026 by rpki-client