
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/88DA4EC83E3511ED8B05E85AC4F9AE02.roa
File: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (raw, json)
Hash identifier: ZgAplW2WPpphTjMrs3xfinlKfr7iRBVAdXaHsqlCR2o=
Subject key identifier: 76:81:4A:EA:4E:B5:2A:1D:4E:91:B4:19:3D:18:DA:65:08:2F:63:22
Certificate issuer: /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
Certificate serial: 02A8
Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/88DA4EC83E3511ED8B05E85AC4F9AE02.roa
Signing time: Fri 17 Apr 2026 01:33:42 +0000
ROA not before: Fri 17 Apr 2026 01:33:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132229
IP address blocks: 103.7.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl
rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2C5A, serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
Validity
Not Before: Apr 17 01:33:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e18df5-93d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:33:57:59:4b:fb:86:be:2a:62:77:ef:5c:b0:
81:7e:99:f7:33:99:de:57:de:50:c6:c9:39:e8:58:
02:5f:7e:4d:71:a0:9f:b2:8e:c1:39:aa:d4:96:42:
20:1f:fa:95:6f:be:a2:a4:55:fc:78:15:95:7d:a5:
65:9f:ec:24:73:db:85:7f:d0:7c:d7:ec:e4:d2:ae:
ad:c1:fc:4e:79:51:b5:29:74:78:f6:ea:a3:e0:0e:
cf:9d:bf:af:17:02:16:12:01:84:f5:38:45:4d:47:
a1:29:bc:fc:92:0a:df:29:5b:fb:50:d1:ae:12:17:
21:b2:84:56:5f:78:bc:13:d8:df:3b:55:3c:30:8d:
3a:18:3d:27:a9:b6:5d:96:a5:8a:56:64:b7:44:ca:
47:a8:a4:6a:19:33:80:5b:03:ea:97:79:25:d1:2e:
1a:71:d0:ee:48:f0:81:4c:32:14:46:0d:e5:2a:69:
53:4a:d0:d5:3f:60:de:b4:08:00:72:43:73:34:24:
29:c2:e4:3b:4c:bc:80:13:b3:f6:20:56:4a:c8:8f:
5d:9b:4c:4f:04:9c:0c:8e:fc:87:43:80:f9:21:e0:
4a:c9:4f:02:e1:6c:ee:0c:e0:a5:ad:9b:d3:66:b8:
a3:59:a7:ea:0e:97:eb:fa:2b:24:d2:1a:58:9a:5b:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:81:4A:EA:4E:B5:2A:1D:4E:91:B4:19:3D:18:DA:65:08:2F:63:22
X509v3 Authority Key Identifier:
keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/88DA4EC83E3511ED8B05E85AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.7.224.0/24
Signature Algorithm: sha256WithRSAEncryption
29:96:d1:54:4a:0e:7c:58:8e:47:92:9b:cb:88:99:85:b1:f6:
27:cb:35:60:b6:6a:b5:3d:65:37:45:7a:f5:a1:c1:e5:26:9a:
70:d8:ff:75:db:24:95:bb:55:83:90:7a:1c:0b:b6:23:40:19:
96:af:b0:3d:94:2a:13:87:b5:47:e3:ec:a2:dc:21:fe:89:11:
41:93:0c:1c:9c:af:b5:19:5c:03:80:f0:12:88:37:36:92:d8:
6b:93:fb:d4:35:aa:2a:16:ff:73:c9:bc:29:0b:e0:b3:97:7c:
ae:9e:2b:d5:fd:ce:5a:dc:d8:37:8b:68:19:d2:e3:14:2d:3e:
f2:f5:3f:a4:73:76:21:16:d1:f8:7b:3a:6a:77:02:46:e1:77:
e1:6c:16:cb:52:fe:6b:b2:a1:28:94:06:10:15:f6:9e:1a:7f:
1a:40:45:2c:d4:e6:36:32:f7:95:ce:af:b8:68:49:99:d2:e8:
7a:50:4b:0f:a5:3a:ba:4c:e2:b9:44:bf:8b:1f:14:84:7c:c8:
0d:e7:8e:0a:c9:34:51:06:73:9b:cf:51:41:76:94:6d:4e:fc:
b1:b6:0e:3c:a1:8e:ee:d2:f0:5d:23:bc:bd:13:80:bf:82:a6:
30:ef:3c:16:fe:55:7a:9f:53:25:7b:ac:e9:54:c6:c6:12:c8:
c6:15:3d:84
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTJDNUExMTAvBgNVBAUTKDc0QkYyRkUyNkQ0NEZGRUY2M0RFNjgzRjQyNDI0ODI0
MEZCNzIyOUEwHhcNMjYwNDE3MDEzMzQyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWUxOGRmNS05M2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9TNXWUv7hr4qYnfvXLCBfpn3M5neV95Qxsk56FgCX35NcaCfso7BOarUlkIg
H/qVb76ipFX8eBWVfaVln+wkc9uFf9B81+zk0q6twfxOeVG1KXR49uqj4A7Pnb+v
FwIWEgGE9ThFTUehKbz8kgrfKVv7UNGuEhchsoRWX3i8E9jfO1U8MI06GD0nqbZd
lqWKVmS3RMpHqKRqGTOAWwPql3kl0S4acdDuSPCBTDIURg3lKmlTStDVP2DetAgA
ckNzNCQpwuQ7TLyAE7P2IFZKyI9dm0xPBJwMjvyHQ4D5IeBKyU8C4WzuDOClrZvT
ZrijWafqDpfr+isk0hpYmlvEXwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHaBSupO
tSodTpG0GT0Y2mUIL2MiMB8GA1UdIwQYMBaAFHS/L+JtRP/vY95oP0JCSCQPtyKa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1QS8wQUVGMEZEODNF
MzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8tOWozbWdfUWtKSUpBLTNJ
cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RMOHY0bTFFXy05ajNtZ19Ra0pJSkEtM0lwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTJDNUEvMEFFRjBGRDgzRTMyMTFFRDhERDdFMDZBQzRGOUFFMDIvODhEQTRFQzgz
RTM1MTFFRDhCMDVFODVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZwfgMA0GCSqGSIb3DQEBCwUAA4IBAQApltFUSg58WI5HkpvLiJmF
sfYnyzVgtmq1PWU3RXr1ocHlJppw2P912ySVu1WDkHocC7YjQBmWr7A9lCoTh7VH
4+yi3CH+iRFBkwwcnK+1GVwDgPASiDc2kthrk/vUNaoqFv9zybwpC+Czl3yunivV
/c5a3Ng3i2gZ0uMULT7y9T+kc3YhFtH4ezpqdwJG4XfhbBbLUv5rsqEolAYQFfae
Gn8aQEUs1OY2MveVzq+4aEmZ0uh6UEsPpTq6TOK5RL+LHxSEfMgN544KyTRRBnOb
z1FBdpRtTvyxtg48oY7u0vBdI7y9E4C/gqYw7zwW/lV6n1Mle6zpVMbGEsjGFT2E
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:12:02 2026 by rpki-client