
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/47EB76428ABA11EB8A85C01BC4F9AE02.roa
File: 47EB76428ABA11EB8A85C01BC4F9AE02.roa (raw, json)
Hash identifier: YDCZOZA5hCri+gJHNjoyBzUnNsUwszBPU7LfQafrIJU=
Subject key identifier: 83:97:75:26:2A:26:0B:95:39:F3:82:E6:61:AA:4D:0F:C4:66:9B:B0
Certificate issuer: /CN=A91A935D/serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
Certificate serial: 0741
Authority key identifier: 63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/47EB76428ABA11EB8A85C01BC4F9AE02.roa
Signing time: Mon 24 Aug 2026 22:43:28 +0000
ROA not before: Mon 24 Aug 2026 22:43:28 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 136805
IP address blocks: 103.96.141.0/24 maxlen: 24
103.109.123.0/24 maxlen: 24
103.109.132.0/23 maxlen: 23
2001:df1:df00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl
rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1857 (0x741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A935D, serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
Validity
Not Before: Aug 24 22:43:28 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8cc910-ee10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:5c:94:7b:d9:8f:66:73:a7:86:b6:33:58:
89:3f:b9:7b:02:39:56:5a:f3:7d:e5:d7:5f:7f:4b:
29:10:63:03:0a:11:26:55:fe:a6:f7:d7:dc:6b:04:
96:7c:c7:1b:bb:75:27:c4:19:bf:4d:d7:eb:95:15:
25:af:e8:26:37:10:f0:d1:4a:6c:79:7f:77:a9:94:
2a:28:af:03:1f:1c:c1:77:77:f7:03:4a:63:85:81:
5c:fc:07:e2:25:83:a0:a8:b0:27:e8:eb:b1:8f:20:
50:79:c0:3d:a0:de:a4:35:42:6a:bd:d2:99:a2:72:
d0:6b:18:b2:cb:a6:0d:b2:c9:7e:7c:5e:2f:13:b4:
82:38:f2:31:26:83:5f:2c:97:a2:f2:62:7a:22:67:
7b:5a:b0:96:4c:72:23:64:5b:9b:98:a3:47:82:e9:
54:a4:b8:db:c4:23:cb:75:df:74:8f:ee:00:b9:72:
ce:fb:50:32:6b:4c:63:98:97:25:90:2a:23:cc:a2:
d5:d4:d5:08:b9:17:30:9c:f0:e4:b8:0f:7e:06:2d:
f1:9e:0e:2e:4c:7f:22:ab:f6:85:89:45:37:e5:7c:
03:24:c0:b8:24:51:fa:2f:20:57:41:04:4c:0e:83:
d0:4e:5d:b1:15:32:b6:1a:7b:b3:09:89:54:18:e9:
9d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:97:75:26:2A:26:0B:95:39:F3:82:E6:61:AA:4D:0F:C4:66:9B:B0
X509v3 Authority Key Identifier:
keyid:63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/47EB76428ABA11EB8A85C01BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.96.141.0/24
103.109.123.0/24
103.109.132.0/23
IPv6:
2001:df1:df00::/48
Signature Algorithm: sha256WithRSAEncryption
2e:ac:61:97:ee:ba:2d:5a:f6:b3:42:16:04:27:8a:0d:28:de:
e2:13:d5:01:29:76:18:22:9a:b7:ec:3d:23:b7:84:f5:19:f7:
34:f3:3f:08:ea:8c:25:42:8b:4c:8a:0e:12:64:20:04:41:6a:
76:b5:55:0f:b6:ff:ce:19:ea:f2:c8:e4:07:0f:8a:87:27:3d:
b8:75:21:14:4e:c9:c4:75:af:7b:0e:66:33:f1:f1:58:e9:74:
f8:53:c2:a9:df:1b:bb:be:4e:0e:59:b1:ff:87:b8:b3:ab:7b:
59:7a:22:ef:36:4d:38:1c:6f:a9:ff:a6:3c:ce:e3:7c:5f:77:
71:ad:be:9e:a2:12:6d:b3:e9:2b:6f:12:30:2f:ce:e0:8d:1e:
ff:d7:4a:83:93:21:b5:d2:25:11:dc:76:62:3c:c6:42:2a:b9:
94:5b:cc:d8:8b:1c:8f:f0:ca:15:48:ad:40:2d:a4:3e:64:4d:
13:86:1a:7d:4a:7a:a8:47:6d:c5:7d:79:57:33:50:35:fd:5c:
02:c4:0b:e9:1e:dd:50:d9:8a:a6:d2:4a:0f:22:39:52:f1:12:
91:c4:ee:91:d2:be:bd:2a:6c:6e:a4:f8:2b:c1:d7:ed:21:c5:
6b:7b:f1:fa:0f:10:76:82:1c:54:e8:ce:d2:76:a4:b9:79:5d:
cb:69:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:42:32 2026 by rpki-client