
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/CAD00992C9C611F09C9EF018C4F9AE02.roa
File: CAD00992C9C611F09C9EF018C4F9AE02.roa (raw, json)
Hash identifier: 1WK0pKqWk649s/jspmynYFwLv9eNrG6RsSK4CLXFtLE=
Subject key identifier: 9B:A6:ED:93:14:89:68:AF:92:4F:55:18:1B:0D:C6:F6:8B:56:26:B8
Certificate issuer: /CN=A91A98E5/serialNumber=03C8560034E917F48406B40469500B23F3956B5D
Certificate serial: 76
Authority key identifier: 03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/CAD00992C9C611F09C9EF018C4F9AE02.roa
Signing time: Mon 29 Jun 2026 03:34:08 +0000
ROA not before: Mon 29 Jun 2026 03:34:08 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 151615
IP address blocks: 103.238.154.0/23 maxlen: 24
2401:1920::/32 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.crl
rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A98E5, serialNumber=03C8560034E917F48406B40469500B23F3956B5D
Validity
Not Before: Jun 29 03:34:08 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a41e7b0-6142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b1:94:ad:5d:ec:3d:db:f1:f5:91:f9:ee:21:
12:ac:8e:2d:5d:9e:8d:2c:9d:89:fb:24:bd:3a:be:
65:67:e1:f1:f5:fe:18:36:77:d7:0e:54:f9:40:54:
5d:5a:01:77:b1:96:66:96:64:b8:e7:d3:af:55:a1:
ea:20:4b:95:2f:ac:5b:19:76:dc:78:f9:63:ad:60:
65:3b:5b:ed:2b:b9:87:6e:61:87:aa:37:66:f5:a6:
51:db:ea:8d:01:c7:2e:6b:2f:51:0b:26:5a:db:4a:
e7:0a:cc:73:46:9f:84:e0:3e:53:a5:51:33:1e:b3:
2a:ad:85:f3:8d:77:13:7c:ba:a4:a6:83:cf:32:0f:
26:e8:95:fa:69:73:93:05:b1:f6:6f:a9:5c:19:aa:
11:de:e3:ca:38:d3:d0:4a:f9:70:a8:21:9e:d1:73:
8b:c2:66:f6:66:36:f9:2a:10:c7:9b:bf:4f:63:6c:
16:9f:5e:47:5f:f4:c9:db:0a:9a:30:e3:af:fb:72:
24:7a:c2:99:60:ac:72:c4:31:70:6c:2f:9c:68:4a:
12:29:0b:8a:11:83:9e:d2:0f:90:62:ee:cb:16:d8:
ef:90:19:95:85:df:78:07:e9:8e:fb:a1:0b:17:b4:
d3:2f:41:d2:1e:5a:f9:3c:38:af:1a:41:4c:60:93:
b5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A6:ED:93:14:89:68:AF:92:4F:55:18:1B:0D:C6:F6:8B:56:26:B8
X509v3 Authority Key Identifier:
keyid:03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/CAD00992C9C611F09C9EF018C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.238.154.0/23
IPv6:
2401:1920::/32
Signature Algorithm: sha256WithRSAEncryption
87:ec:5d:da:8c:fc:1d:ce:2b:10:6d:f3:bd:79:e1:23:c8:2d:
be:a9:0d:51:8e:c7:ca:dd:36:65:17:9b:66:ed:71:4d:7d:a2:
95:2a:d3:7f:ad:63:03:68:4d:38:8c:b4:16:49:e6:c0:fb:eb:
1a:03:5a:a6:94:ad:8a:f3:1c:d2:b4:24:b8:c4:02:86:33:62:
0d:e6:a2:83:20:74:d0:3e:66:55:df:7a:b0:e8:37:7d:4d:e0:
ae:d9:20:4e:97:11:87:75:6b:dc:64:59:ae:23:79:57:63:a1:
c9:50:7a:51:08:8f:71:d8:4e:41:a0:41:59:19:2c:c2:ae:8c:
92:ce:9b:b5:a2:02:92:37:a4:b8:f5:26:5c:1e:38:12:2d:03:
d8:b4:e2:1a:32:ad:6f:ec:9d:83:c9:81:b9:11:2a:3c:58:5f:
9f:c6:ab:e1:cd:a3:94:f9:41:3b:51:ab:02:d6:a1:17:ff:37:
ee:df:a4:f2:0b:46:dd:9d:a5:96:da:66:8c:ed:24:5b:72:e6:
59:d3:a6:61:0c:df:b0:ab:10:b7:95:48:7a:10:45:9d:82:5e:
56:54:d3:bc:1d:9d:f3:a6:24:86:d2:a2:fe:5b:97:8c:d2:2f:
48:4c:5a:51:f8:fc:e2:9f:d6:66:23:db:d8:45:0d:75:3d:b8:
e2:67:7d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:03:51 2026 by rpki-client