
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/448983A8892D11EEB4AA276EC4F9AE02.roa
File: 448983A8892D11EEB4AA276EC4F9AE02.roa (raw, json)
Hash identifier: lgyx7/qafkJCguA9zUl+91jAGWqg8OIrfv5N1bTHWnQ=
Subject key identifier: AA:88:2B:2B:AE:61:5A:76:C5:5F:35:72:AB:DD:55:E2:22:2D:96:7D
Certificate issuer: /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Certificate serial: 01DD
Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/448983A8892D11EEB4AA276EC4F9AE02.roa
Signing time: Wed 27 May 2026 04:34:25 +0000
ROA not before: Wed 27 May 2026 04:34:25 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 151325
IP address blocks: 103.254.91.0/24 maxlen: 24
2001:df2:6b40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl
rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169591, serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Validity
Not Before: May 27 04:34:25 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a167451-4aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:c4:0d:97:d8:13:fb:23:7e:99:b8:7f:14:
63:c6:26:8a:84:37:3c:f0:7e:00:1a:70:75:65:12:
34:f2:42:8b:83:ee:be:43:6c:7c:a1:0d:fc:f9:9c:
2f:33:01:82:2a:33:ae:32:05:a6:96:eb:df:d9:94:
84:01:8c:3e:28:82:d7:01:57:04:67:c5:ed:aa:9f:
28:6a:e0:50:53:94:a0:98:06:89:82:06:18:42:1c:
4c:36:14:f1:8e:be:ed:13:b7:3d:db:5e:a6:1f:bc:
8a:a9:20:2b:a4:18:ae:3e:61:10:15:29:f1:fe:f9:
1a:2f:04:94:0d:4f:2b:91:df:57:d5:67:48:79:a1:
c1:ca:6e:31:e5:fa:96:4b:a7:2a:63:2e:16:ae:4e:
99:86:75:fe:87:05:8a:aa:83:2b:34:4d:b3:82:21:
2f:a9:55:35:2d:e5:54:72:b3:dd:af:e5:69:40:dd:
31:c4:05:28:93:b7:a8:86:26:45:0f:ac:91:d9:0e:
6d:2c:2a:91:35:96:ca:13:a3:1e:b9:e1:76:8d:c8:
c5:19:2c:cb:b9:e1:f2:4a:37:26:b5:16:d9:7f:5a:
2b:ed:c9:33:f5:44:68:81:c5:c7:bd:ec:10:e6:b4:
79:05:14:be:3d:73:d1:b7:68:f8:1f:00:67:2b:a6:
f5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:88:2B:2B:AE:61:5A:76:C5:5F:35:72:AB:DD:55:E2:22:2D:96:7D
X509v3 Authority Key Identifier:
keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/448983A8892D11EEB4AA276EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.254.91.0/24
IPv6:
2001:df2:6b40::/48
Signature Algorithm: sha256WithRSAEncryption
21:7b:b6:aa:bc:0a:cf:1c:98:c0:51:b2:54:fc:aa:0b:61:4e:
c6:78:59:0d:f1:0d:7a:77:dd:83:14:22:d9:b9:bc:6d:94:98:
d8:31:bb:2b:2a:67:de:91:b1:0d:93:19:0a:2f:30:cd:88:7b:
d7:e0:fa:6c:b4:74:f1:0a:ec:e3:c1:88:ef:56:2f:6f:35:0a:
91:57:6d:20:37:22:d3:27:46:a5:e2:18:8c:f9:1b:b9:4b:74:
47:dc:33:2a:9f:fc:6d:e9:6e:88:d2:77:1d:d8:49:9f:17:5a:
34:c1:69:fa:44:b5:95:6f:47:e8:16:3e:85:f0:5b:d9:76:18:
92:3b:b0:ee:0c:5b:40:c1:5e:37:c1:68:f3:e8:3c:5b:ed:a2:
53:c0:e5:17:0d:5d:1a:b2:2b:c8:52:a9:62:be:9f:b0:3e:f3:
f4:43:ad:a5:cd:3c:c5:73:c4:9b:2b:69:39:53:be:6e:06:68:
27:67:98:f4:23:0a:00:02:04:8b:5a:ba:85:02:87:61:fa:f0:
e9:02:05:88:b8:14:1e:2c:d5:fc:2f:2f:cb:d9:79:b9:d4:b4:
a0:5f:57:1b:06:da:3c:85:07:a5:81:5d:c8:56:c8:64:40:e1:
6b:bb:29:30:9f:f8:62:d4:40:fb:c9:25:ef:b4:65:9a:39:c9:
60:82:51:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:06 2026 by rpki-client