
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/5958BB9C794811F1AAEBC54078A30FBC.roa
File: 5958BB9C794811F1AAEBC54078A30FBC.roa (raw, json)
Hash identifier: TuJjYxvjs+S72EJKI50mOSLZsks+omAAzCh4dv+qAnY=
Subject key identifier: D2:D2:E6:9C:FC:68:27:61:17:9A:AD:6B:81:88:CD:49:3B:47:70:EF
Certificate issuer: /CN=A9190F97/serialNumber=CBBD5B1C31C1612E15ACEC47254FD2F33EC69C64
Certificate serial: 39
Authority key identifier: CB:BD:5B:1C:31:C1:61:2E:15:AC:EC:47:25:4F:D2:F3:3E:C6:9C:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/5958BB9C794811F1AAEBC54078A30FBC.roa
Signing time: Tue 15 Sep 2026 19:59:08 +0000
ROA not before: Tue 15 Sep 2026 19:59:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 103.211.216.0/23 maxlen: 24
103.211.218.0/23 maxlen: 24
116.206.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl
rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190F97, serialNumber=CBBD5B1C31C1612E15ACEC47254FD2F33EC69C64
Validity
Not Before: Sep 15 19:59:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aa9a38c-4b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ee:12:e9:71:17:87:ed:3c:80:41:f2:78:38:
90:09:27:fd:50:a8:a0:a8:37:23:4a:e3:89:60:bd:
ce:5e:9d:e6:2b:8a:8c:dd:5a:e6:42:6f:0a:c8:16:
d5:02:71:05:f1:f7:50:a1:17:7d:3d:61:6b:f2:0b:
08:78:f1:0c:ae:26:10:8d:e0:65:57:0f:5a:f4:55:
77:85:5c:37:a9:31:19:64:56:c5:75:e8:4b:03:30:
23:e0:1e:d5:93:ca:e5:2a:52:c3:aa:5f:ad:cb:eb:
c9:db:2c:e0:74:66:c4:64:fe:27:5f:d3:79:61:11:
96:bc:06:e7:2f:8b:b3:21:86:47:c8:85:a8:91:94:
06:b3:63:5c:88:3f:33:55:67:67:0f:ab:74:72:89:
1a:4b:c7:0c:21:fd:4a:71:f7:ab:e5:2d:e9:8e:b3:
9d:99:4e:6b:07:22:59:c7:e9:9d:b3:f0:d8:1b:ce:
a6:85:71:a0:93:4a:e9:51:28:b7:8a:ee:95:b5:c9:
33:f1:f8:f8:d1:7c:eb:3b:78:94:7b:b9:ea:f9:5f:
a9:72:24:f4:a6:2e:80:fa:ac:60:db:7f:58:fd:65:
3c:d9:38:a5:ca:7f:8d:4c:e1:42:d3:85:ee:0c:56:
ac:98:51:2a:32:1d:08:ef:db:f0:8f:cb:05:d9:c5:
35:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D2:E6:9C:FC:68:27:61:17:9A:AD:6B:81:88:CD:49:3B:47:70:EF
X509v3 Authority Key Identifier:
keyid:CB:BD:5B:1C:31:C1:61:2E:15:AC:EC:47:25:4F:D2:F3:3E:C6:9C:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/5958BB9C794811F1AAEBC54078A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.211.216.0/22
116.206.104.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:26:a8:3b:cd:87:a4:0f:7a:ec:04:78:c9:cd:e0:7c:de:63:
24:c6:b3:17:44:59:bb:0c:99:ac:fd:e9:84:ce:a8:1e:83:b7:
e0:93:9a:de:38:1f:85:51:8c:f5:cf:85:9a:df:29:dc:a9:0b:
5e:b2:51:d8:43:53:74:40:f8:52:85:bf:1e:d0:6f:98:34:0b:
4c:93:1f:19:71:43:90:07:53:55:02:96:56:99:9d:21:5b:96:
cb:f2:07:20:9f:e1:0d:60:57:e5:d8:8c:28:bc:42:68:46:95:
2c:22:3e:d5:de:25:cb:ba:6b:61:c5:8d:77:3a:91:45:48:d8:
6b:64:0d:be:a2:04:34:16:a4:69:eb:4b:14:01:82:43:81:e4:
33:3f:77:cd:6e:bd:6a:e4:00:f8:a1:80:51:e9:d9:5e:eb:e4:
57:5d:62:9c:32:fd:95:12:4b:3c:23:ec:55:30:f1:85:04:df:
98:81:82:8c:d5:35:77:75:4a:2e:b9:a1:18:dd:26:f3:23:f6:
4a:96:1b:da:a7:03:c3:4f:dc:ed:a3:15:a0:57:45:f5:4f:de:
38:8f:e5:0f:82:64:c4:e0:50:c8:55:1f:e9:2d:bc:74:df:5d:
3c:9c:25:12:98:e5:22:08:de:8d:cf:ad:dd:23:d3:de:b6:e9:
07:9e:65:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:59:11 2026 by rpki-client