
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/31DE4D9C1D0E11EDA9995986C4F9AE02.roa
File: 31DE4D9C1D0E11EDA9995986C4F9AE02.roa (raw, json)
Hash identifier: rEMEaFSkUPyNJGeFdpB243G604CFHXeQzDUNQLc8UU0=
Subject key identifier: 2D:08:C2:C8:A8:64:52:CC:0A:11:72:0A:77:FC:41:3B:8B:73:6A:AD
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6D73
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/31DE4D9C1D0E11EDA9995986C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:21:51 +0000
ROA not before: Fri 02 Oct 2026 15:21:51 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 131352
IP address blocks: 103.28.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 14:34:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28019 (0x6d73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:21:51 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcc0f-c936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:3c:3f:84:55:87:f6:ba:40:3b:38:04:e5:
0c:b3:98:11:61:a7:21:0f:de:60:a3:9f:21:05:94:
0b:69:6c:19:c1:9a:61:bb:3a:aa:82:1d:b1:68:1f:
61:3d:f5:ed:4b:20:d3:3e:19:52:84:4c:66:d9:6c:
47:38:fb:04:95:14:60:43:4c:48:35:6e:39:79:f6:
ea:a5:b1:0f:92:27:49:1f:67:77:73:84:4b:29:57:
9b:d8:5a:84:91:42:23:e8:5a:d0:8b:3f:f1:3b:0d:
1a:59:60:22:94:01:de:c2:af:2c:b4:99:d5:28:1c:
dc:09:43:d7:7c:04:92:4f:c6:f9:64:e2:ea:bb:ea:
3d:c2:f6:57:2f:2b:c0:fc:32:22:7d:7c:97:9d:f2:
8b:eb:81:31:a2:fc:b3:9c:d7:00:9b:35:fa:a4:c1:
52:15:85:01:83:8c:4d:0b:92:6b:30:e7:b9:83:25:
e6:fb:63:4a:d0:f5:c9:b3:37:a2:17:10:81:4e:9f:
38:48:0b:00:27:3f:c5:f3:56:fe:14:18:9b:8d:5f:
22:9f:a8:5e:cc:cb:60:26:53:86:89:56:ae:e5:91:
92:22:6a:12:7e:f6:08:49:04:68:dd:64:7f:8a:be:
c7:ae:a6:d5:d9:3f:44:ff:2a:48:15:39:26:05:ad:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:08:C2:C8:A8:64:52:CC:0A:11:72:0A:77:FC:41:3B:8B:73:6A:AD
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/31DE4D9C1D0E11EDA9995986C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.28.172.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:c8:45:a0:34:f9:3e:13:e6:4a:12:96:d1:6c:fc:5b:92:52:
c7:2c:0f:b0:f4:0b:dc:d8:86:94:b9:84:f3:5d:21:b7:08:a5:
19:76:cc:44:d2:3a:87:07:bb:b6:37:d8:ae:58:dd:b4:f5:ae:
45:67:7b:5e:39:fa:b6:11:49:a5:5c:45:ec:83:ae:f6:a9:b5:
62:65:2e:27:a6:32:62:27:b6:3c:dd:66:3c:c9:a7:66:a1:bb:
2f:0b:38:93:19:c3:f1:81:df:7e:50:a5:c3:38:81:7c:f4:dc:
10:c5:d3:8a:2e:e8:1b:1e:39:7d:a2:11:ed:aa:b6:4a:1b:28:
8a:15:e7:86:2d:1e:e5:74:3c:d8:ba:bd:2d:ef:f7:2b:ca:34:
88:cd:9a:18:d3:36:5d:1e:c6:57:75:e9:b0:42:6f:40:81:ee:
27:fe:33:29:ce:63:82:2f:8b:ed:58:1d:2e:ac:ff:bb:2f:f1:
e5:dd:99:e0:a0:17:19:d9:6e:dc:11:a1:e7:79:be:63:96:ac:
3f:e5:7e:7f:79:78:52:a0:b7:56:f2:a0:e0:86:49:51:d5:3e:
e4:d1:18:b6:d7:b9:94:cd:87:2b:92:30:b4:88:1f:fd:cf:b3:
44:f3:e3:87:9e:2b:fb:94:28:3f:30:b0:44:39:d7:be:83:68:
75:87:dc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:14:07 2026 by rpki-client