
$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/9ECB1908653F11F1B667060D8D47A888.roa
File: 9ECB1908653F11F1B667060D8D47A888.roa (raw, json)
Hash identifier: DbvXdABic1KJzkxyhPlZ4fRbKrDPMh8Orj+aI7Km8vs=
Subject key identifier: 73:66:B6:9E:15:20:7D:7D:35:65:56:42:78:A3:91:1C:6F:6E:72:9F
Certificate issuer: /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
Certificate serial: 0162
Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/9ECB1908653F11F1B667060D8D47A888.roa
Signing time: Thu 11 Jun 2026 02:45:35 +0000
ROA not before: Thu 11 Jun 2026 02:45:35 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 8796
IP address blocks: 103.135.112.0/24 maxlen: 24
103.135.113.0/24 maxlen: 24
103.135.114.0/24 maxlen: 24
103.135.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl
rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:09:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91356BA, serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
Validity
Not Before: Jun 11 02:45:35 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a2a214f-b87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:14:99:ae:e9:08:32:9f:a9:ba:f2:49:17:bf:
29:25:1c:69:45:3e:b3:16:8e:9f:09:0a:6d:57:1b:
9f:04:9a:10:f6:51:95:4e:9c:aa:e0:5a:3c:f4:e0:
85:05:e3:a9:7e:3e:25:e5:e0:0f:b2:fc:8f:bb:8e:
39:e4:40:a7:3b:f4:03:8e:81:e2:a8:0f:fb:4d:39:
77:ff:8f:a0:9b:59:69:f0:db:a4:69:90:d7:6a:5d:
06:14:ac:9e:5f:d7:10:3b:6b:90:19:fa:f4:13:a7:
b9:56:f3:5a:5c:a4:80:6b:4f:37:44:65:b9:e8:92:
51:57:ba:43:ff:e9:8e:46:24:cf:25:d4:a2:4b:6f:
21:c3:3b:31:58:6d:f1:83:d6:1d:0d:c2:af:40:87:
e7:f9:12:de:be:b3:b5:3f:7b:7e:23:d1:02:fa:6a:
8a:ca:b7:ae:6f:83:ec:92:45:a4:6d:39:5b:76:f9:
4f:ef:a3:1b:fb:a4:c6:40:15:6a:0c:50:0c:e6:82:
eb:98:39:6c:b6:e2:f5:c6:e5:5e:1f:4c:67:30:13:
c5:05:b7:37:86:49:80:7c:d9:20:60:bd:3a:aa:50:
b5:1d:fc:fa:ce:b8:b4:b3:2c:75:a8:7b:fb:6a:e3:
78:bb:63:4a:09:93:65:0c:b0:2f:4c:f1:9c:eb:09:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:66:B6:9E:15:20:7D:7D:35:65:56:42:78:A3:91:1C:6F:6E:72:9F
X509v3 Authority Key Identifier:
keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/9ECB1908653F11F1B667060D8D47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.112.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:58:96:4a:ef:c7:6a:1a:cf:5e:87:6e:58:08:51:28:44:fc:
11:6e:6a:fd:ed:32:ef:84:53:bc:ed:2f:59:18:c8:4d:61:39:
1c:14:04:13:16:b2:26:9a:c9:39:d4:71:a1:3c:7e:28:1c:2f:
1e:78:93:da:13:11:d9:f4:d7:ea:7a:66:1a:b6:0d:71:9e:ff:
75:fb:2d:54:45:8e:08:d2:f3:6f:f0:ca:a3:6b:38:eb:77:fd:
85:6a:b0:b3:e9:fc:66:01:b1:34:c0:7e:69:ce:db:eb:8b:4a:
79:c8:95:b0:40:81:4b:6e:42:ca:f2:db:dc:46:1f:3c:01:d0:
bc:63:2b:36:6d:26:16:0e:bf:7f:07:a7:43:0e:c4:e8:37:2d:
2e:6c:08:59:3b:a3:32:3c:02:d0:58:65:78:5b:bc:55:cc:5f:
95:f5:f6:84:f4:07:2e:5d:b6:86:90:e6:a0:f8:a8:d4:26:94:
d7:4f:c9:ce:97:2c:99:bf:1a:74:30:33:75:24:fb:49:e9:ce:
8e:43:92:c3:fd:1c:fd:53:01:27:9e:29:4a:c8:f8:9f:1c:38:
b3:b9:73:09:04:15:45:01:66:c0:79:4c:7d:41:03:30:32:75:
31:b4:2a:52:02:e8:8c:ae:0c:2f:5f:00:cc:b2:9f:58:7c:e6:
10:64:39:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:26:38 2026 by rpki-client