
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/ADFF1B80076711F1A8EB0774023D8C67.roa
File: ADFF1B80076711F1A8EB0774023D8C67.roa (raw, json)
Hash identifier: RKwgcMwcAkIc7uHynZPrQbWlXsZHj1vx0pht/X1vhHY=
Subject key identifier: F0:6B:A6:FC:59:2D:BD:16:F1:AF:4E:D1:01:32:DA:6A:C0:EC:7A:33
Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Certificate serial: 1096
Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/ADFF1B80076711F1A8EB0774023D8C67.roa
Signing time: Wed 03 Jun 2026 17:41:06 +0000
ROA not before: Wed 03 Jun 2026 17:41:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1828
IP address blocks: 103.38.152.0/24 maxlen: 24
103.38.153.0/24 maxlen: 24
103.38.154.0/23 maxlen: 23
103.38.154.0/24 maxlen: 24
103.38.155.0/24 maxlen: 24
111.221.57.0/24 maxlen: 24
111.221.58.0/23 maxlen: 24
202.58.136.0/21 maxlen: 21
2401:5dc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4246 (0x1096)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Validity
Not Before: Jun 3 17:41:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a206731-f85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:ec:fb:6a:4b:65:b2:b9:34:87:72:a2:0f:
6a:c2:44:b1:f4:dd:44:62:16:ff:26:8e:40:17:d6:
d6:ce:6c:f3:7b:bd:fb:82:c3:20:1f:c9:53:0d:64:
f1:2b:d1:c2:30:8a:7b:dc:95:3d:4a:67:ae:13:8a:
90:55:2b:24:ac:bd:89:91:92:b1:99:f0:6c:95:29:
7f:16:0b:1a:56:12:d6:e1:9c:c7:9e:d7:a1:52:17:
11:f1:85:16:b1:2f:64:73:e6:f5:0c:33:8a:6f:0e:
70:08:81:27:1a:2c:86:db:fe:8d:45:95:7e:e0:d7:
69:64:9b:f4:38:78:d8:ec:66:b5:6f:5e:4b:0a:9f:
75:3f:cf:07:c1:48:ae:72:bf:a8:a0:53:b2:32:80:
f9:5e:eb:a2:56:d5:7b:f6:9b:81:24:fe:3f:85:03:
04:9a:5a:f7:49:60:ed:51:e1:e6:d1:9a:84:ce:77:
08:cd:24:bf:4c:56:a3:71:c0:7c:d2:cf:29:51:0d:
88:33:ea:89:75:bf:47:10:0d:6e:1f:2e:4f:ba:92:
59:3c:55:d3:2d:07:3c:6d:0d:4b:39:86:0f:33:2a:
86:46:68:f7:b2:b3:80:9f:32:aa:90:82:ac:49:bd:
ff:b4:73:98:ec:4b:c8:11:10:cc:9e:1e:04:a6:27:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6B:A6:FC:59:2D:BD:16:F1:AF:4E:D1:01:32:DA:6A:C0:EC:7A:33
X509v3 Authority Key Identifier:
keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/ADFF1B80076711F1A8EB0774023D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.38.152.0/22
111.221.57.0-111.221.59.255
202.58.136.0/21
IPv6:
2401:5dc0::/32
Signature Algorithm: sha256WithRSAEncryption
2f:90:eb:3f:3e:5a:79:63:67:cc:5d:f1:62:c1:8d:4f:67:f5:
72:21:7b:52:ad:d1:bc:6e:fa:ff:69:e1:25:03:ad:c7:77:47:
2c:fb:23:b9:db:ad:69:9f:ab:d9:bd:88:d0:29:61:7c:a3:49:
33:43:2b:10:99:3b:28:a2:2e:3c:f2:c6:03:bd:8a:81:37:17:
39:7f:5f:66:43:c1:e5:b7:db:eb:ef:03:52:fd:62:67:29:22:
d2:34:c6:2e:ac:b2:3f:69:18:7f:e1:2e:32:b9:80:7d:a1:9f:
50:5e:ad:aa:a9:85:bd:42:15:77:34:fa:e2:8a:41:88:2b:8b:
15:c4:59:3f:b7:4e:91:89:13:f3:f0:6d:fc:b6:02:93:77:c1:
58:7d:d3:3a:57:e7:45:84:e4:15:67:a9:c1:14:0a:ec:c7:0d:
6c:89:95:a2:d2:5d:d3:25:b6:8b:f2:71:68:95:78:5d:b7:64:
9c:12:b5:5a:88:3d:61:00:cf:87:de:d9:84:cd:11:a6:fc:c3:
91:f5:7e:ce:ba:bd:3b:8c:4b:81:cb:ca:5d:3b:1b:a6:cd:6b:
6e:56:87:cb:40:a0:d9:73:7c:6d:4f:46:3d:3f:5d:b6:10:c5:
5f:4c:13:c3:ae:d9:ec:bf:ac:df:8b:dc:4d:b4:3b:64:02:db:
0a:78:47:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:29:34 2026 by rpki-client