
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/13CC4306433711F18A02B862AB833773.roa
File: 13CC4306433711F18A02B862AB833773.roa (raw, json)
Hash identifier: 4UatX4Tw5T6Cxt0fPDGgJ9hIPv2v0sxsXyzKNr9mnPs=
Subject key identifier: F0:0D:2B:EB:1B:D0:D0:57:CF:16:72:8C:F2:43:33:30:F9:55:3E:F5
Certificate issuer: /CN=A91CE7BD/serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80
Certificate serial: 06CB
Authority key identifier: E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/13CC4306433711F18A02B862AB833773.roa
Signing time: Fri 01 May 2026 06:48:02 +0000
ROA not before: Fri 01 May 2026 06:48:02 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 137213
IP address blocks: 103.166.58.0/23 maxlen: 23
103.166.58.0/24 maxlen: 24
103.166.59.0/24 maxlen: 24
2402:5ba0::/32 maxlen: 32
2402:5ba0::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl
rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1739 (0x6cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE7BD, serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80
Validity
Not Before: May 1 06:48:02 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f44ca2-431a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2e:0b:cb:9e:59:b8:d1:e8:63:6c:77:9b:64:
e3:60:2b:40:69:15:48:40:2d:c9:27:b7:9d:ac:3f:
14:bb:63:5f:c7:30:2b:d2:52:63:a1:6a:81:00:fd:
ac:54:db:41:14:89:d4:3e:43:9a:69:11:d3:0e:3e:
f9:7c:fa:0f:06:f8:e6:9c:06:10:78:73:e5:c5:4f:
d5:16:f9:0e:02:d8:fc:30:a0:52:2d:25:31:90:1f:
00:09:8e:f1:1e:aa:e2:b2:21:3e:f6:fe:0b:59:65:
9a:6b:9f:98:9c:0d:1c:55:8d:eb:d1:6e:48:0d:55:
bc:72:8a:0e:8d:61:48:30:11:2c:95:f8:58:58:77:
1e:01:dc:fd:f1:5e:7a:a1:44:2e:26:48:a5:11:72:
b7:eb:82:92:fb:cd:68:8b:28:bb:d3:c1:e8:4a:0d:
4e:08:0b:d4:93:0a:f9:28:d2:eb:c3:a5:c3:a8:9c:
18:d0:d1:72:9c:94:fb:13:59:34:48:49:1c:e0:52:
79:28:a3:79:22:67:65:ea:c0:e3:38:04:40:32:cf:
e6:70:a0:74:f5:d9:16:60:90:43:ad:6e:0f:b7:b8:
22:88:63:bd:cb:0f:ff:df:35:4b:ad:b1:b7:71:f0:
31:02:e5:cb:9c:eb:89:1c:3e:76:e7:19:7c:45:bc:
25:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0D:2B:EB:1B:D0:D0:57:CF:16:72:8C:F2:43:33:30:F9:55:3E:F5
X509v3 Authority Key Identifier:
keyid:E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/13CC4306433711F18A02B862AB833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.58.0/23
IPv6:
2402:5ba0::/32
Signature Algorithm: sha256WithRSAEncryption
80:b4:8f:3e:30:91:22:6f:3b:f3:ae:b1:9f:c2:73:e4:ca:10:
17:8b:18:b2:72:bb:0d:86:3e:13:cb:d9:54:21:19:7a:02:7b:
f9:eb:20:c7:81:73:cc:fa:43:49:a2:48:38:59:e0:db:02:ea:
c1:2e:80:a1:6c:aa:9b:3c:03:4a:06:df:35:f7:d9:b7:4f:84:
49:61:3c:19:9f:ae:8e:1e:a4:bc:5d:29:73:da:d4:7d:8e:7a:
75:04:be:9a:5c:37:64:c3:50:65:7e:1d:c3:af:85:14:8b:1d:
8a:5f:37:8b:45:a2:eb:c7:a2:02:28:7f:94:f4:d1:48:59:8d:
da:ee:fe:11:4f:71:d0:83:4a:ef:6f:1c:73:92:d3:01:d2:96:
f1:e8:e2:13:bc:ef:73:5b:40:4d:58:25:52:4c:5c:1a:94:f9:
5c:c8:c6:22:b8:1c:c8:ae:ed:bf:be:a4:30:a4:86:8a:62:e5:
b1:1c:05:b5:c9:3c:aa:14:5d:fe:74:eb:f8:46:81:e2:b9:65:
e1:b0:59:ff:9c:38:f5:bc:b2:2d:e3:c2:ee:26:30:b6:90:99:
73:e0:d9:be:11:f8:bc:4e:9b:52:fd:2a:ea:9d:06:5e:cb:70:
3c:57:15:e4:65:07:58:24:0f:9f:a9:3c:af:e6:73:bc:8c:73:
32:f6:14:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:39 2026 by rpki-client