
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/674009AE09D811EA9BCFCE1EC4F9AE02.roa
File: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (raw, json)
Hash identifier: DqO78dcrLcTqky8MHqNvDeEZVWA5cZxIE2/PsLNtSF4=
Subject key identifier: E3:FA:0A:BE:B6:3F:FE:06:5F:6F:AE:CD:3C:4A:4D:89:4E:A3:E4:AC
Certificate issuer: /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
Certificate serial: 0D24
Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/674009AE09D811EA9BCFCE1EC4F9AE02.roa
Signing time: Tue 08 Sep 2026 18:36:56 +0000
ROA not before: Tue 08 Sep 2026 18:36:56 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 58665
IP address blocks: 103.12.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl
rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3364 (0xd24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACC41, serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF
Validity
Not Before: Sep 8 18:36:56 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aa055c8-2842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:10:7c:9d:29:42:d8:04:ad:99:c0:a8:d5:11:
62:3e:77:14:6f:a9:cd:58:df:a4:d0:84:2c:40:0e:
02:ac:5d:0e:9e:06:da:17:75:04:d9:19:df:2d:1a:
cf:30:d1:af:23:87:98:84:c1:83:2a:a6:bd:5d:dd:
1b:35:98:0c:37:b7:74:51:67:ee:81:52:76:30:e7:
8e:68:19:d6:df:14:b2:2d:d9:be:26:6b:d7:6c:0c:
22:65:63:ef:04:3b:f7:6f:cf:f3:c9:6b:1c:26:c6:
99:16:1e:56:53:5c:97:71:29:f9:e0:8c:fd:77:dd:
a4:c3:c7:4f:64:d5:3f:b6:d1:98:25:05:7d:1b:e8:
b9:81:00:f8:08:2c:61:f5:7b:f2:8c:1a:19:cb:5b:
43:b9:bb:92:e4:b2:70:3f:30:a3:75:10:58:1b:30:
14:07:00:ca:19:4c:59:4f:1e:6b:e3:28:81:ed:e5:
8c:5b:77:25:3b:e7:5a:b3:4a:27:ae:3b:6b:92:4f:
56:6e:6a:01:58:68:ae:bb:11:9c:6f:95:48:f3:fc:
bf:21:2d:c3:9e:5b:6a:ad:7d:50:7e:62:5c:95:c8:
a7:bf:ed:8f:b7:c4:73:eb:7c:bb:55:06:f3:99:d6:
42:d7:e2:ca:2d:61:ff:0d:3f:f5:37:90:26:86:1f:
3c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FA:0A:BE:B6:3F:FE:06:5F:6F:AE:CD:3C:4A:4D:89:4E:A3:E4:AC
X509v3 Authority Key Identifier:
keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/674009AE09D811EA9BCFCE1EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.228.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:49:92:94:f8:7b:cd:2f:e7:64:48:b6:19:6b:63:3c:31:cc:
b6:6f:16:88:da:59:57:d6:c9:0c:f2:95:50:65:e7:5d:09:1f:
b0:4e:dd:8c:98:0b:1f:1a:32:6b:90:3d:34:ac:cb:b6:0a:19:
34:47:9c:f9:63:e4:f3:2d:70:bb:97:be:33:72:bc:0c:47:af:
67:9c:80:8a:39:c7:80:1c:29:a4:47:6d:1e:39:e5:30:c9:51:
b5:15:0d:73:b7:2d:d2:ba:c4:65:57:be:bc:0c:aa:c7:e1:c8:
f8:51:b7:b3:de:5c:4c:68:cd:93:d6:aa:db:19:0d:d0:83:c4:
2a:d6:39:06:ae:2d:9a:16:1e:e7:95:42:dd:f4:11:d4:b2:8c:
d4:9a:cd:38:ed:78:3c:93:9a:b8:aa:81:de:69:26:af:1a:d3:
98:92:02:ef:83:c0:89:d9:a2:85:bf:3c:78:a2:1f:cf:ef:54:
1f:44:46:53:ce:8a:0e:8d:5e:74:84:1d:a2:e9:95:e6:1b:e1:
bf:62:1a:75:9a:a5:b4:11:9c:4f:e7:a4:8c:10:a4:13:90:b5:
54:f7:16:e1:55:99:5b:47:3e:d4:2d:eb:18:f1:5a:08:39:3b:
89:6c:ed:27:6b:43:0d:3d:b0:44:57:f9:89:4d:85:e8:c6:a5:
4a:7f:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:25:01 2026 by rpki-client