
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/8224075A293711EB9DE16C62C4F9AE02.roa
File: 8224075A293711EB9DE16C62C4F9AE02.roa (raw, json)
Hash identifier: s5h3g17ryEBKDiDmSSciSjoKE05h0QA0TKlVxp3Bj0Q=
Subject key identifier: 5D:F1:86:06:C0:90:94:32:13:BD:C0:4B:49:99:68:12:2D:38:CB:AC
Certificate issuer: /CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED
Certificate serial: 081C
Authority key identifier: 22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/8224075A293711EB9DE16C62C4F9AE02.roa
Signing time: Tue 16 Jun 2026 21:24:51 +0000
ROA not before: Tue 16 Jun 2026 21:24:51 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 138988
IP address blocks: 103.138.34.0/23 maxlen: 23
103.138.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl
rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2076 (0x81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A665A, serialNumber=2240770E151C741A84DE94E28C752002B839FBED
Validity
Not Before: Jun 16 21:24:51 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a31bf23-bfc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:d8:83:8d:7c:48:c4:99:c8:6d:b7:b8:16:
65:58:cb:52:00:56:b7:10:33:01:3f:15:f5:24:6d:
73:46:5d:c1:e3:b9:19:0e:68:ea:17:01:d7:03:0d:
d8:d9:1d:6a:da:9d:b6:5a:4b:03:94:47:e3:b1:91:
55:b5:6d:80:72:07:8d:54:84:b3:96:ce:bc:93:7b:
24:bb:43:4e:e2:56:fe:55:f0:89:67:ae:86:f4:ce:
24:7c:8f:1e:02:d3:69:b0:8f:e9:58:b2:f0:81:32:
1f:13:30:8a:09:39:4f:4b:8a:46:c8:4a:db:62:fa:
af:6f:71:5b:3e:45:36:da:8a:7e:8c:80:09:72:fa:
3e:bc:aa:c8:76:49:9d:65:8f:ba:4d:7e:42:0e:c7:
3c:23:f6:f6:a8:a3:e3:37:45:0e:55:b3:d9:5c:f7:
ac:81:d8:45:71:42:dd:b3:54:71:2f:c4:1b:33:50:
5d:b7:17:0e:3f:d2:84:bf:38:e3:ec:93:44:1a:85:
84:05:7c:91:a1:95:b5:4a:d2:f3:a4:92:bc:4d:60:
d7:b0:e4:6c:46:f1:81:8e:8f:e1:9b:ad:b9:4f:ef:
47:51:b5:51:84:c5:a8:b4:ff:a2:fa:f2:c5:15:2e:
e0:bc:be:a3:c7:c5:01:64:2f:b4:b8:ca:5b:66:20:
21:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F1:86:06:C0:90:94:32:13:BD:C0:4B:49:99:68:12:2D:38:CB:AC
X509v3 Authority Key Identifier:
keyid:22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/8224075A293711EB9DE16C62C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.34.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:95:cc:6a:79:5e:77:93:42:9a:35:79:fa:0c:9e:9e:c6:9d:
4e:7f:ab:59:4b:3b:3e:e6:dc:f5:9e:bf:8c:f8:3d:40:d0:34:
0f:48:67:dc:1e:41:6f:f2:27:87:4f:c1:fa:d8:4c:a4:20:e7:
06:21:d3:46:0e:e1:d8:ef:7b:49:28:02:8a:5c:5f:80:7f:49:
52:2a:c1:48:1b:1e:d0:17:e0:a5:3c:13:1a:cf:76:6e:d3:ab:
1e:77:29:38:b3:0c:f2:cd:fb:8b:df:4e:6d:28:05:56:2a:7f:
ab:ea:47:67:8c:6c:bb:71:53:fe:45:ac:0a:18:40:1f:ee:bb:
6c:ff:58:d2:88:d9:fb:80:de:70:d0:ec:03:67:00:c8:d8:c9:
df:49:46:48:21:bb:cf:d5:2a:9d:d0:f2:fb:95:4c:71:7a:05:
f1:58:96:ba:d4:53:53:bd:8b:84:21:ff:6f:74:bd:c1:bc:30:
e7:c6:d0:0a:a8:d6:65:d4:fd:76:32:b8:20:28:b1:2a:91:0e:
d4:7e:14:93:bc:22:7d:e6:54:67:a9:41:61:56:19:f3:ec:58:
ef:19:a3:7a:65:ad:0a:07:d1:88:e6:46:05:3f:7a:f6:97:89:
45:44:8c:d2:bd:bc:08:f7:2d:38:97:c1:81:73:a0:86:af:68:
ad:2f:58:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:02:40 2026 by rpki-client