
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/9E3C65828CA011F0B1F47C12C4F9AE02.roa
File: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (raw, json)
Hash identifier: LLTLXt6xDjIK6bwOGJSxN6DvTteHHSfn+cjpk7hZfWk=
Subject key identifier: CC:32:17:D2:AF:27:58:FA:01:15:0E:D9:B2:91:48:98:06:76:8A:EE
Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial: 0612
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/9E3C65828CA011F0B1F47C12C4F9AE02.roa
Signing time: Thu 24 Sep 2026 23:44:36 +0000
ROA not before: Thu 24 Sep 2026 23:44:36 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 36002
IP address blocks: 103.73.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1554 (0x612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Validity
Not Before: Sep 24 23:44:36 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ab5b5e4-13ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f0:7f:04:24:7d:fc:e3:9a:3e:22:b0:7c:9a:
c8:72:94:86:98:b8:21:41:62:24:a2:22:93:75:24:
e4:1e:9d:d0:03:35:3c:a2:7b:c8:3f:10:d0:f3:ff:
91:d6:ee:6c:f4:99:35:8b:6b:f5:5d:d0:b2:73:53:
49:47:77:c3:4c:39:8d:14:97:7c:f7:91:ff:6f:0c:
74:ee:ed:89:67:c3:97:0c:eb:18:8c:1b:1f:64:81:
98:0f:02:f9:10:08:69:51:bc:d5:56:d9:d0:2b:6b:
80:5e:f4:71:ad:33:fc:65:9a:c5:a2:15:84:05:c6:
cd:bc:f0:21:1d:9a:28:c5:01:8b:c7:2b:7f:57:9e:
b4:a1:d4:e4:09:e1:a9:dc:ec:f7:73:96:d4:23:1e:
fb:19:90:e6:bc:82:ed:a1:ca:1d:0b:ed:9a:a5:65:
48:f0:21:01:66:b2:67:6a:17:d5:13:ed:f2:99:2d:
b0:e4:47:f9:4e:92:81:07:c4:8e:62:bf:7b:56:f8:
53:af:8b:28:d8:5b:25:f6:8f:b9:39:22:af:44:0e:
48:4e:1c:e4:91:2f:d8:1a:b0:0d:ef:d8:61:c2:60:
d4:18:f1:c4:87:16:7c:c9:21:6b:42:22:a0:fb:07:
9f:37:33:07:4e:b8:2b:69:32:c4:eb:68:ee:2d:ac:
e2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:32:17:D2:AF:27:58:FA:01:15:0E:D9:B2:91:48:98:06:76:8A:EE
X509v3 Authority Key Identifier:
keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/9E3C65828CA011F0B1F47C12C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.73.220.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b8:7c:ae:9a:1a:ce:a1:85:d7:64:8b:5f:a2:30:5b:96:59:
de:bf:fe:b7:19:68:d1:59:f1:43:b1:f5:cb:ab:a2:31:4f:81:
4d:b4:43:5e:75:4b:0d:20:49:ce:04:ab:c9:1a:55:a0:76:e3:
96:53:5b:91:9f:57:17:f2:c8:7b:35:8c:41:ef:6a:ab:6b:87:
a0:af:a6:4d:0a:7e:24:ef:92:84:cd:8f:ca:2e:1c:bf:2a:d9:
7f:36:43:3d:c2:8c:77:bc:39:4f:2c:e8:ed:91:36:83:b7:fd:
5c:2c:ed:d4:9f:4a:51:7d:6f:52:39:bc:ed:0a:09:00:69:e0:
34:38:81:1d:88:52:96:08:ff:e3:27:61:b9:1e:13:04:2f:e7:
b4:1b:75:78:b2:46:e0:50:7a:86:23:c7:9f:82:b6:8d:e8:cc:
d8:8e:4d:93:0f:7d:c6:9f:9c:3d:61:58:5e:d8:ce:30:19:b3:
f4:fa:75:86:2d:38:04:7b:6c:76:7b:28:d6:6b:de:5b:d7:de:
50:c7:53:11:b9:fd:2c:32:93:3a:71:10:d5:d9:ab:46:51:92:
5d:ae:55:b1:5f:8f:77:ab:ff:34:85:56:0b:8c:cc:01:7b:94:
14:3c:03:91:a7:6d:89:d3:d1:b5:80:46:db:1b:03:3c:49:68:
8f:2a:db:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:28:40 2026 by rpki-client