
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/C7513D2484CC11F18B5F25E597A30FBC.roa
File: C7513D2484CC11F18B5F25E597A30FBC.roa (raw, json)
Hash identifier: qjU7k0c2AFRf9V00UA42zSZWvTGD4WQ9W16GHJB9dqo=
Subject key identifier: 3A:8A:51:01:A7:71:A8:6A:8A:AC:72:0A:75:E7:E2:53:17:7C:0B:54
Certificate issuer: /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F
Certificate serial: 03FE
Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/C7513D2484CC11F18B5F25E597A30FBC.roa
Signing time: Tue 21 Jul 2026 06:24:08 +0000
ROA not before: Tue 21 Jul 2026 06:24:08 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 63969
IP address blocks: 103.187.38.0/23 maxlen: 23
103.187.38.0/24 maxlen: 24
103.187.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl
rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:21:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1022 (0x3fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DED5A, serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F
Validity
Not Before: Jul 21 06:24:08 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a5f1088-4d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:e3:be:6f:0a:02:b9:72:5b:b5:34:bf:7d:
dd:1f:74:5d:91:1f:da:74:4a:db:78:74:5f:5b:5c:
9e:cd:99:4f:da:01:4e:8c:12:a1:98:dd:40:04:02:
38:be:03:b4:4a:65:50:51:10:86:6b:9a:89:23:28:
2d:64:a6:17:f4:3f:ea:9d:8b:52:cc:8f:3e:25:e6:
c0:09:82:f0:99:90:f9:3d:0a:d3:a0:de:5d:da:a5:
11:32:e6:23:23:fb:bf:4b:4e:2d:0d:7c:12:1e:a8:
93:6b:42:3c:b2:c6:8e:3f:da:45:2d:a3:e4:d3:df:
b7:2d:54:d1:fa:f5:d7:ba:e0:46:e1:5b:ae:6d:33:
e7:ee:8b:84:bf:0a:d9:ef:77:54:6b:ae:f4:f8:53:
20:5b:b6:e7:0c:be:d7:96:f1:9a:f0:09:19:2e:97:
56:df:a9:fa:b6:58:d3:52:12:4c:1b:a5:52:bb:74:
72:56:50:99:f8:16:a0:73:02:d5:d2:a8:2e:2d:6c:
05:fc:50:92:0a:42:96:64:2a:19:a6:9f:02:a7:a3:
d6:de:37:ee:36:30:64:ef:ba:21:ea:b3:62:3e:12:
2c:15:a0:5a:8b:2d:8d:cb:e7:f0:0c:b8:24:5f:9b:
fe:65:69:4e:89:ae:58:3f:b4:c6:f3:a8:b5:8d:2f:
08:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8A:51:01:A7:71:A8:6A:8A:AC:72:0A:75:E7:E2:53:17:7C:0B:54
X509v3 Authority Key Identifier:
keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/C7513D2484CC11F18B5F25E597A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.187.38.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:23:dd:04:fb:76:42:bc:cb:62:73:58:55:8f:1a:84:cb:30:
05:58:2d:c4:8a:2b:be:98:a2:07:38:16:eb:14:db:86:47:74:
48:d1:6b:c6:e7:1a:9e:c5:53:af:95:9c:e4:32:0b:f5:24:95:
1f:a5:d6:31:f2:5b:c4:c6:91:39:59:8c:46:73:22:fe:ce:02:
a6:79:49:ba:d1:e8:b9:69:99:9e:a1:9e:b7:6b:79:c2:95:ad:
82:05:28:b6:4d:4b:fa:d0:2b:69:e0:0c:b9:fb:a2:12:25:3d:
19:c8:ab:48:c6:84:90:56:a4:ed:38:30:73:fb:4f:b2:22:11:
c6:23:49:19:6e:45:56:72:9a:2f:66:8f:2b:09:46:cf:df:77:
79:dc:61:ca:a5:ee:ec:18:60:40:53:ae:c4:22:c8:c0:de:ac:
5d:8a:af:69:96:71:2e:b1:c0:d0:3f:e7:3f:ee:91:de:87:07:
d7:c6:d2:16:6a:91:2c:92:25:7e:0d:6c:12:28:2b:6e:ae:56:
2c:ce:2f:f0:60:0f:31:1a:24:4a:37:ab:62:f2:63:d7:27:a8:
fb:3e:9b:34:1b:17:23:98:44:b7:64:9a:99:11:ea:53:6b:0f:
e9:cc:bc:f9:6c:5a:7a:26:82:02:b5:b5:4a:df:fb:b2:86:ae:
44:8d:ba:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:47 2026 by rpki-client