
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/3DB131DC86F211F1B8F66003A7EE528E.roa
File: 3DB131DC86F211F1B8F66003A7EE528E.roa (raw, json)
Hash identifier: T9oa5S8DaEPPgONLHjexgjcqCZuStZji3DTSUWo4KYA=
Subject key identifier: 5C:A6:4A:C7:F1:1C:FB:F0:1B:4E:6A:9B:1B:7E:27:3D:6E:F8:15:7D
Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial: 0855
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/3DB131DC86F211F1B8F66003A7EE528E.roa
Signing time: Mon 24 Aug 2026 04:29:19 +0000
ROA not before: Mon 24 Aug 2026 04:29:19 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 142045
IP address blocks: 103.165.158.0/24 maxlen: 24
2407:4ac0:1400::/38 maxlen: 40
2407:4ac0:1800::/37 maxlen: 40
2407:4ac0:2000::/35 maxlen: 40
2407:4ac0:6000::/35 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2133 (0x855)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Validity
Not Before: Aug 24 04:29:19 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a8bc89f-75d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:74:49:8e:30:d3:f7:26:1b:66:21:66:cc:
18:5f:8a:34:f2:c2:51:cb:a1:fe:c7:53:38:89:3a:
0e:1f:ea:a3:1c:de:77:94:77:43:53:05:97:d6:23:
aa:24:9f:af:1e:35:e3:27:0f:e9:a3:58:cf:24:3e:
41:63:78:6a:e4:f9:ad:0f:e8:ea:72:42:f6:12:ba:
a4:ef:dd:1f:9b:46:3f:67:bb:02:b8:e5:72:be:81:
ab:16:97:fa:8f:03:38:61:b1:2b:1f:94:4c:14:a9:
b8:28:bd:a4:a2:50:8f:02:3a:05:09:3b:12:cf:d7:
f3:35:f4:89:6b:80:b3:2f:0c:51:78:5e:a5:5a:c9:
b0:19:14:6d:56:21:97:b1:0a:47:97:95:9f:28:39:
1d:a9:f9:e7:a1:59:31:db:a6:e9:1d:8b:f3:81:64:
42:9c:0c:49:fd:51:9c:d4:33:07:ad:d4:db:0e:73:
c5:d2:58:3a:b4:53:fa:8f:ee:4c:7a:65:25:0b:b1:
2a:6f:1f:f1:30:a2:62:31:0f:8b:86:f8:e8:c1:c4:
43:5c:45:47:2d:23:49:7e:bd:ee:7b:f7:a6:cc:8c:
d9:16:2c:61:6d:64:8b:50:f4:bb:3e:7f:0b:4a:6c:
0a:d4:90:d2:09:02:7c:7b:d7:31:be:b2:4e:ab:e4:
63:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A6:4A:C7:F1:1C:FB:F0:1B:4E:6A:9B:1B:7E:27:3D:6E:F8:15:7D
X509v3 Authority Key Identifier:
keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/3DB131DC86F211F1B8F66003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.165.158.0/24
IPv6:
2407:4ac0:1400::-2407:4ac0:3fff:ffff:ffff:ffff:ffff:ffff
2407:4ac0:6000::/35
Signature Algorithm: sha256WithRSAEncryption
75:0a:12:2a:b5:33:47:fd:e3:b3:d1:d9:5c:a0:e8:c9:a0:2f:
c8:d8:06:a7:b0:8a:cc:57:5b:9e:66:dc:d1:30:53:a0:b1:37:
04:1c:1e:1b:e1:43:8f:9d:08:a6:ec:50:8d:37:40:39:78:cd:
30:24:f1:fd:c7:b5:a7:2e:ce:ad:5e:2c:67:95:9b:bd:b5:1f:
3d:58:4d:04:97:67:af:06:f8:5a:c3:c5:1d:2f:9d:1c:39:81:
60:c8:b1:8b:07:cc:d5:1d:77:3d:74:8d:10:a6:b6:e8:de:30:
e2:46:e9:09:c0:a5:ef:b0:31:c1:ae:75:3c:45:01:9f:a9:5f:
73:3e:ef:f0:d2:24:26:8b:22:9e:c2:7a:5e:26:b4:9f:36:34:
77:29:3c:10:1b:8d:84:6f:98:cb:3f:d0:5e:6d:56:5e:2a:f4:
77:16:54:8f:07:2d:9b:69:08:79:fa:1a:71:c7:ed:a8:6a:58:
9d:ad:e9:11:e8:24:41:d7:c4:7f:63:83:9c:4b:d4:99:23:e5:
9d:6a:e5:fb:03:a5:37:d1:6c:e4:4f:c3:0c:21:29:67:0e:6d:
a4:6a:5f:0b:da:91:f7:3d:6d:ce:f6:3c:3b:22:b2:64:5e:5f:
e5:19:39:44:c3:3e:b3:a9:61:e3:69:ac:94:a1:91:9a:b7:02:
dc:4f:6b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:10:56 2026 by rpki-client