
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/04231ECC326F11F0B0723439C4F9AE02.roa
File: 04231ECC326F11F0B0723439C4F9AE02.roa (raw, json)
Hash identifier: w3uOUeW/FatR7+z01Z2HvN2GffooWt+q9F95kyByhRI=
Subject key identifier: 9A:21:4E:CB:F5:7C:58:FE:6B:B4:DC:35:F7:29:B4:A1:5A:78:69:CA
Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial: 0C5E
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/04231ECC326F11F0B0723439C4F9AE02.roa
Signing time: Tue 28 Jul 2026 19:41:08 +0000
ROA not before: Tue 28 Jul 2026 19:41:08 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 135426
IP address blocks: 103.17.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:41:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3166 (0xc5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Validity
Not Before: Jul 28 19:41:08 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a6905d4-336e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:70:4f:17:7a:dd:d2:4e:55:3a:01:3d:3c:
79:28:8d:19:ab:56:f5:8a:35:be:24:c9:ce:49:2f:
b9:70:d7:ed:ac:57:6e:f1:5f:b0:ef:73:7b:89:44:
c3:77:8a:13:e6:34:14:cd:62:8b:d0:37:ce:d1:af:
a3:9e:d2:03:47:e0:7f:cc:48:27:1e:7b:50:f6:75:
82:25:81:66:f2:bb:9e:5e:2a:3e:f3:e0:6b:14:ea:
4d:98:34:d6:77:fe:27:98:73:39:c6:41:fb:36:ec:
fb:c5:55:4a:48:23:27:83:21:19:ae:e2:02:5f:70:
70:61:16:f6:bc:69:ef:7d:b7:0f:a5:3e:f9:38:b5:
d6:59:d1:b6:d1:7b:43:bc:fd:7b:87:de:ad:15:b3:
a7:c7:be:a6:a1:80:80:22:fb:9c:a3:1e:f1:95:e5:
f0:43:d9:46:84:fc:35:c6:b5:af:13:9a:2d:dc:3d:
b4:82:e7:86:64:3c:44:05:29:96:44:f5:60:9b:25:
24:ff:fa:44:23:3e:07:4e:1a:4b:3f:19:28:a1:5d:
0c:e8:b8:f0:a3:7d:cb:86:65:19:9b:35:ad:bd:a6:
00:2c:3d:54:90:e5:3b:03:83:e4:e0:93:c2:a1:a0:
1b:67:38:8a:a4:2a:71:a6:d7:63:7e:fb:50:a1:32:
79:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:21:4E:CB:F5:7C:58:FE:6B:B4:DC:35:F7:29:B4:A1:5A:78:69:CA
X509v3 Authority Key Identifier:
keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/04231ECC326F11F0B0723439C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.17.29.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:96:c4:cf:04:90:40:bc:47:0e:14:4c:48:9e:e4:3c:4c:02:
41:6f:ad:cc:de:c2:09:31:c8:9f:37:0e:06:09:32:0d:34:69:
32:7f:b3:39:49:da:f9:76:8f:a5:58:ef:19:bf:1a:a7:02:43:
00:08:df:25:a6:66:ea:6c:4a:f5:7e:62:5b:23:33:6b:a7:b3:
fe:78:7f:9d:49:30:27:3c:f4:a2:90:1c:1b:44:09:af:25:06:
16:0c:83:f3:d3:17:78:07:fb:67:0c:6e:91:d7:8a:92:2d:47:
04:1a:66:57:e3:a0:28:d4:99:78:a1:b7:99:90:49:69:78:f6:
d4:0a:b9:0b:7e:f6:5e:ab:37:52:5e:d0:c1:62:e6:fe:fd:92:
08:42:8c:2a:72:af:78:ee:82:25:d4:5e:39:ac:33:4f:1f:6c:
b4:54:f9:52:62:e2:d6:28:23:3e:e7:a7:ff:29:5d:7e:c5:ae:
55:65:02:dc:70:ca:cc:31:e1:35:ed:b3:c6:b4:87:ea:c3:bb:
52:b4:94:89:26:bc:1d:85:c4:a4:3a:89:bf:0a:47:91:79:ae:
90:21:08:54:b0:1a:83:bc:35:e8:ea:b3:ca:1c:fe:fa:56:01:
6d:44:83:02:e2:0a:f4:72:ce:b3:43:6a:e2:b9:35:eb:a5:bc:
e2:d8:3a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:28:49 2026 by rpki-client