
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/9C955450C77E11EB9DF68B6AC4F9AE02.roa
File: 9C955450C77E11EB9DF68B6AC4F9AE02.roa (raw, json)
Hash identifier: mmfq1A4JFs2jPRiNdsYAoBmzmeTYZwoCaqGyjp1X2RQ=
Subject key identifier: 51:8B:F8:C5:24:CC:D2:3E:44:52:DC:E9:ED:D8:E8:29:5A:17:36:FD
Certificate issuer: /CN=A91AF17B/serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6
Certificate serial: 0687
Authority key identifier: BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/9C955450C77E11EB9DF68B6AC4F9AE02.roa
Signing time: Sun 28 Jun 2026 23:27:52 +0000
ROA not before: Sun 28 Jun 2026 23:27:52 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 135378
IP address blocks: 103.167.120.0/23 maxlen: 23
103.167.120.0/24 maxlen: 24
103.167.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl
rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1671 (0x687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF17B, serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6
Validity
Not Before: Jun 28 23:27:52 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a41adf8-a5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d9:6c:84:de:2a:54:6c:26:25:4a:be:9b:d0:
9a:14:98:82:37:ba:b7:cd:33:18:2e:28:c2:e5:29:
8c:c0:c2:02:42:e8:93:25:18:65:cc:7d:aa:b1:0a:
d8:a2:e0:b4:67:cd:fb:8e:ee:f8:5c:73:6a:38:e0:
b3:aa:28:a9:96:64:98:f3:92:8a:4f:4c:c1:1c:8c:
53:1b:16:c8:d8:62:d0:ae:3d:ec:20:a1:33:d9:d7:
f4:53:42:5b:af:1c:4b:cd:93:70:9c:01:9d:81:36:
6f:f0:04:43:53:c7:8f:e7:d0:43:af:10:83:ca:77:
76:1b:09:3d:e0:12:5e:97:1f:16:83:3a:00:9a:da:
6d:26:da:89:89:6e:5b:b6:4e:08:37:8b:7b:ca:9f:
42:f7:ee:a2:d4:45:5d:a5:22:d8:50:e2:a6:35:b0:
f3:75:f0:01:e3:ce:94:aa:51:a8:0d:87:cd:88:fe:
fd:c2:59:3c:ef:be:19:03:60:91:d2:db:e8:6e:a5:
59:70:f7:71:82:a5:9f:c0:f4:bb:ea:0d:40:90:de:
52:7e:1a:76:c5:05:5b:d3:76:cd:fd:25:18:f3:61:
db:f8:34:49:ed:e8:66:83:9a:93:59:8e:89:2f:33:
b4:7d:18:a7:af:fa:77:f8:6d:0f:7e:f6:22:b5:c2:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8B:F8:C5:24:CC:D2:3E:44:52:DC:E9:ED:D8:E8:29:5A:17:36:FD
X509v3 Authority Key Identifier:
keyid:BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/9C955450C77E11EB9DF68B6AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.120.0/23
Signature Algorithm: sha256WithRSAEncryption
61:a1:9b:60:e2:fb:15:3f:1a:a1:86:c5:7b:b6:69:09:f4:c4:
52:4e:29:6f:e9:fd:fd:18:c8:a7:d5:7c:80:c9:a5:20:87:95:
b4:39:04:d4:01:f2:ab:45:63:14:e9:93:5a:e9:f8:ad:78:0e:
d2:00:50:71:04:42:11:f1:68:3a:0a:c3:f8:df:a1:9f:88:5e:
38:34:fe:f0:fe:e0:6e:bd:f2:56:f4:9d:d1:93:4b:e3:c7:9b:
80:15:f6:05:d0:d2:5a:2c:8c:a8:c1:15:7c:b8:ca:0b:31:22:
63:24:ed:33:2e:de:c4:af:9b:e6:c2:d8:d5:96:64:55:7b:19:
2b:94:79:07:21:7e:1c:ec:07:49:26:7d:67:8a:b7:7d:2e:7b:
5f:d9:6e:37:5f:e2:ef:a6:60:c0:2a:61:64:e3:c7:fa:63:3f:
79:0f:96:5f:28:13:27:a1:65:61:76:6d:14:fb:67:3b:91:99:
5f:9c:2f:b2:31:31:f4:be:b6:c7:90:79:e5:07:02:66:9c:09:
05:9a:ca:e5:e4:93:66:a5:f5:d1:89:97:fe:a2:56:7e:7e:76:
53:3d:f4:98:1b:59:5c:4f:3f:eb:8b:da:8b:3a:24:14:26:63:
ac:10:bc:c8:1d:35:65:4d:1d:fb:2e:11:6e:f5:85:cb:a9:c2:
85:28:52:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:54:33 2026 by rpki-client