
$ rpki-client -vvf rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/9D6DB59E1C5211EA8C6AAE37C4F9AE02.roa
File: 9D6DB59E1C5211EA8C6AAE37C4F9AE02.roa (raw, json)
Hash identifier: g//qqw4vslub3wSOjjjwSfRWoS3+1KaYhkbV1Us5KAY=
Subject key identifier: B7:28:52:CC:E0:96:E3:DD:FB:F8:2D:4E:DD:11:2A:2D:C0:EF:78:FF
Certificate issuer: /CN=A91315C1/serialNumber=406E2DFBAA0EA007DDC66993F2C7B308DA0A1A57
Certificate serial: 0CB1
Authority key identifier: 40:6E:2D:FB:AA:0E:A0:07:DD:C6:69:93:F2:C7:B3:08:DA:0A:1A:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/9D6DB59E1C5211EA8C6AAE37C4F9AE02.roa
Signing time: Tue 28 Jul 2026 19:36:48 +0000
ROA not before: Tue 28 Jul 2026 19:36:48 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 139261
IP address blocks: 103.140.132.0/23 maxlen: 23
103.140.132.0/24 maxlen: 24
103.140.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.crl
rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:36:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3249 (0xcb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91315C1, serialNumber=406E2DFBAA0EA007DDC66993F2C7B308DA0A1A57
Validity
Not Before: Jul 28 19:36:48 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6904cf-4b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:3b:03:b5:43:81:56:8a:07:0f:e6:9e:f3:
e3:36:51:aa:4b:40:49:32:7f:8f:ff:26:b0:69:91:
81:a4:a7:b4:fd:b9:5c:bd:bb:70:26:03:6f:9d:db:
86:77:93:50:d0:f4:10:3d:46:49:1e:43:f9:fa:4b:
13:5e:d7:1a:06:29:8e:b4:a2:3a:a1:19:fe:5f:7b:
23:45:22:c3:cd:07:b6:1d:ea:5f:24:3d:81:d8:a4:
02:67:fc:fa:3c:38:ac:44:93:28:26:ae:cd:02:cc:
69:b2:cb:65:be:1d:20:a1:52:ab:d5:b9:9b:40:69:
a9:9f:9f:bd:ca:a9:b7:b2:2c:61:e8:ca:7c:5a:15:
91:dc:d9:2a:ea:21:17:51:b0:9e:ea:92:35:45:87:
ba:24:5d:b9:9b:84:cc:4d:f1:fd:20:ae:77:ce:4d:
30:b8:87:6a:fc:55:4f:72:8f:d9:84:2b:a9:6e:61:
c7:cd:3c:22:31:de:e2:f8:0c:ee:2c:62:45:72:54:
80:b7:e9:f0:1f:df:89:10:6b:5b:8b:86:85:05:6a:
e0:ed:43:19:c1:c1:f0:fb:4f:18:7e:53:e7:c3:b8:
d6:e3:b7:d0:7e:f0:23:28:1b:da:36:d9:cf:03:b6:
d6:4a:1c:58:c8:8d:3a:0d:f3:a9:b9:7c:70:31:dc:
0a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:28:52:CC:E0:96:E3:DD:FB:F8:2D:4E:DD:11:2A:2D:C0:EF:78:FF
X509v3 Authority Key Identifier:
keyid:40:6E:2D:FB:AA:0E:A0:07:DD:C6:69:93:F2:C7:B3:08:DA:0A:1A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/9D6DB59E1C5211EA8C6AAE37C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.132.0/23
Signature Algorithm: sha256WithRSAEncryption
45:44:c8:17:3e:36:cf:5c:1e:f3:e0:bc:df:93:e9:ab:f9:05:
77:dc:23:7f:5f:5d:a2:47:d7:4e:14:09:a7:ac:ad:9b:f3:bb:
17:be:52:8a:62:cf:a2:37:bf:8b:e8:69:59:76:de:96:8c:68:
89:f9:7c:57:14:71:55:59:f2:46:57:d5:e2:f6:1e:c3:08:c5:
8c:d4:97:7f:7d:80:cd:14:58:10:64:b1:49:c9:06:8f:40:12:
8d:fd:97:f6:b1:44:4a:61:9d:c6:ce:75:90:5e:c1:ec:e3:74:
97:21:90:50:af:27:5b:fa:10:bd:71:b3:42:ad:68:e5:9b:00:
d4:e3:45:57:06:50:64:7d:3b:7f:82:23:26:62:df:d8:df:f3:
6b:d0:da:c1:f4:ef:16:81:ab:9b:a6:f5:76:22:c1:a2:67:d5:
50:d1:6f:95:bf:2c:1f:84:45:39:0c:87:b4:37:b4:c5:ae:7d:
1a:1c:b8:fa:38:fb:4e:38:11:bd:08:bd:e2:6d:5e:1f:68:0b:
4a:65:61:40:89:a6:2f:7e:2e:60:f0:b9:c7:82:8a:44:0f:e5:
e7:51:13:5c:6b:e7:15:8e:9f:af:ad:80:c0:51:06:e7:67:3a:
85:90:dc:c4:04:4a:f2:ca:67:04:34:96:ab:31:d2:b8:79:e2:
d5:40:a6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:17:53 2026 by rpki-client