
$ rpki-client -vvf rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/E390F83EC1CD11EB86A00568C4F9AE02.roa
File: E390F83EC1CD11EB86A00568C4F9AE02.roa (raw, json)
Hash identifier: iQ+PgNNqf8UmV9fcTIqKb5ivLyfy8TSAmHAuDpQqAYo=
Subject key identifier: 66:13:85:14:86:AD:CF:53:80:E3:03:79:40:C6:6A:DE:AF:B8:A0:A9
Certificate issuer: /CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7
Certificate serial: 0689
Authority key identifier: 5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/E390F83EC1CD11EB86A00568C4F9AE02.roa
Signing time: Tue 26 May 2026 23:27:38 +0000
ROA not before: Tue 26 May 2026 23:27:38 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 142298
IP address blocks: 103.167.190.0/23 maxlen: 23
103.167.190.0/24 maxlen: 24
103.167.191.0/24 maxlen: 24
2001:df6:bd80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl
rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1673 (0x689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911959A, serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7
Validity
Not Before: May 26 23:27:38 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a162c6a-af81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0c:b4:55:8e:21:6a:cf:71:44:3c:60:43:75:
75:83:b8:04:40:11:81:cf:b9:1f:fc:98:d8:ec:bb:
2d:59:76:31:ab:37:ae:82:86:52:a2:67:e7:9c:f1:
90:a8:e9:9c:dd:f2:b0:47:5c:9a:9d:68:16:d5:5f:
b0:58:90:4a:64:ba:71:c7:f9:9e:03:1f:d5:38:82:
a5:df:20:c6:f9:51:ff:74:f4:9f:ce:a3:0b:da:f5:
6f:f9:2e:f4:37:b2:e1:e2:0a:1d:fd:dc:6b:ea:ba:
e4:fa:ea:ea:f9:ac:e5:55:e7:dc:84:93:13:7b:9e:
29:8e:03:fa:ea:d0:b4:49:f1:04:30:e3:a7:f3:94:
58:8b:fd:05:d6:86:fd:be:52:ca:47:ab:37:5e:ca:
f7:5f:6a:83:2e:16:0f:ab:e0:42:fd:06:f7:d4:ac:
d6:27:2e:55:50:3b:fe:f3:fb:d2:cc:7a:73:1d:a7:
d8:b9:cb:34:66:ab:6e:dc:f6:57:db:2a:7b:16:a0:
41:75:2e:1c:f3:55:fa:5b:6d:01:f2:da:7f:06:9d:
22:79:c8:93:53:73:77:d5:65:0e:4e:01:6f:49:f9:
31:e5:6e:2b:79:a6:6a:16:d3:41:79:db:30:92:be:
3f:09:fa:7d:94:9f:d5:c7:95:da:29:f2:da:38:c5:
99:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:13:85:14:86:AD:CF:53:80:E3:03:79:40:C6:6A:DE:AF:B8:A0:A9
X509v3 Authority Key Identifier:
keyid:5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/E390F83EC1CD11EB86A00568C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.190.0/23
IPv6:
2001:df6:bd80::/48
Signature Algorithm: sha256WithRSAEncryption
c3:61:53:2d:47:99:cb:54:7f:b8:f2:fb:b2:d2:50:ec:7e:3e:
9b:a5:2c:9f:3c:2a:7e:06:01:2f:1f:f8:f4:82:01:16:89:d5:
39:7f:0f:bf:95:8e:81:70:2d:cc:7b:28:af:1b:3e:58:9b:3d:
db:e8:cf:89:3a:d2:15:86:b8:da:96:a9:71:7f:8d:82:77:7e:
d5:bc:52:13:86:47:ea:ae:7a:63:bd:f7:97:98:70:24:83:88:
77:00:cb:bb:64:86:79:51:21:26:c0:3a:e5:df:4c:36:69:83:
e9:80:af:5c:df:b4:dc:b1:ea:6a:09:60:98:17:91:30:a1:3c:
45:d3:e5:91:3a:5d:d1:9b:2c:2b:05:d5:ac:2b:3b:d8:63:13:
9c:c6:ba:02:2a:c2:af:18:e9:53:72:1f:83:56:2d:5a:af:6e:
4d:96:93:02:a3:db:1a:37:90:54:f1:9f:46:13:83:bb:9e:bb:
b1:1e:da:c7:ff:13:3a:60:49:8e:71:40:10:cf:45:f8:04:3a:
73:6c:0d:b5:ad:8e:68:67:0e:8c:b5:07:94:6c:86:43:50:24:
a5:04:38:c4:d5:c9:cd:04:86:fd:a7:d4:76:50:5c:37:4f:92:
87:a6:54:3f:4f:aa:8c:ad:72:3d:56:a4:73:5b:90:32:b9:0c:
26:e2:9d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:11:38 2026 by rpki-client