
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/CD23AE8C403011EEA773CE47C4F9AE02.roa
File: CD23AE8C403011EEA773CE47C4F9AE02.roa (raw, json)
Hash identifier: PZelJVR91rZQn+1K6DzeKrU/OaplNw2OEalh3VTRehI=
Subject key identifier: C7:8C:43:C4:0D:85:3C:CF:72:D6:4B:2A:33:22:77:20:E5:65:26:D7
Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial: 02E7
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/CD23AE8C403011EEA773CE47C4F9AE02.roa
Signing time: Sat 29 Aug 2026 01:52:02 +0000
ROA not before: Sat 29 Aug 2026 01:52:02 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 134424
IP address blocks: 103.167.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 743 (0x2e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Validity
Not Before: Aug 29 01:52:02 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a923b42-2477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:da:30:c3:01:56:cb:22:c1:38:8a:5d:a3:
a6:b3:2e:19:2a:7b:71:87:19:22:58:80:3a:0d:a9:
0f:90:a1:5b:c4:9e:35:e3:7e:a9:59:5c:b7:91:22:
d3:94:48:d9:ed:1c:e6:69:d8:4f:9d:fc:d7:0f:c2:
93:08:bc:3a:7d:15:0d:d1:4b:38:c2:f9:6e:ca:92:
90:1f:dc:cb:d6:91:82:0e:5d:96:25:23:02:15:73:
29:8e:a6:89:91:47:80:5e:a4:28:84:6d:7f:10:ad:
29:15:9b:bf:3c:8d:d2:80:d7:d4:1e:51:82:09:b7:
61:6c:ee:fd:7b:ad:34:8a:97:9c:20:ed:f5:84:70:
ee:8a:88:c8:29:cb:09:fd:03:73:86:fa:24:4f:c8:
14:66:9b:a1:94:22:fb:a5:b3:53:b5:fb:01:dc:a3:
44:20:c6:8c:07:00:8b:d0:8a:a1:f5:bf:d2:5f:3d:
50:68:6d:11:09:e5:d4:bb:d9:09:41:33:45:3d:d1:
04:95:74:f4:54:9c:54:96:cb:b1:1d:e9:cd:0b:b8:
5c:78:e9:28:98:98:8e:15:60:ee:a3:1b:e4:c8:75:
81:16:30:ba:c1:7a:a9:36:a9:e5:74:cb:58:40:fc:
28:86:06:a2:66:7f:c7:53:db:24:8a:51:bb:dd:d4:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8C:43:C4:0D:85:3C:CF:72:D6:4B:2A:33:22:77:20:E5:65:26:D7
X509v3 Authority Key Identifier:
keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/CD23AE8C403011EEA773CE47C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.209.0/24
Signature Algorithm: sha256WithRSAEncryption
60:47:d2:da:c9:86:11:68:6e:c4:00:b2:2c:32:b1:e6:80:f5:
b7:56:90:ec:8d:6c:08:60:ab:07:2c:8f:4e:e3:12:a8:65:98:
92:2e:56:86:f9:03:3a:e7:80:9c:30:e0:2d:7f:3e:bf:bd:9d:
ed:0a:57:68:52:ec:42:bd:ad:e6:39:1c:52:74:ed:87:6b:e9:
49:c1:cc:41:94:66:8f:88:5a:49:2b:cb:89:e4:0e:ae:a0:a5:
d0:58:0d:97:f3:09:a1:91:e0:65:6d:e8:f8:43:63:0b:dd:5a:
ec:49:52:04:7e:1a:23:ad:66:ef:ca:8a:fb:2a:a9:15:f2:ef:
ff:6d:57:34:b9:05:a6:05:21:c2:54:78:37:d5:38:fa:8d:33:
e9:34:60:8a:42:d9:e1:d9:93:a9:67:82:82:be:aa:3d:57:69:
0d:13:e7:25:7e:de:5e:fc:ab:6e:75:18:f3:42:48:de:b4:16:
6e:e5:c9:b1:57:ed:b8:da:cf:62:43:65:0c:c9:f9:8d:e8:84:
83:e9:06:37:0d:16:8e:f4:1f:78:2c:c6:96:e1:de:30:a5:7e:
40:84:fe:f3:ec:da:09:09:ad:47:76:0a:61:71:2a:dd:3f:69:
17:e9:7f:9e:00:a6:55:ba:e5:f4:e8:32:ca:2d:65:f5:fd:f0:
d5:6a:4f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:48:48 2026 by rpki-client