
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/6DDABFB26CD511ED9EC9CF83C4F9AE02.roa
File: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (raw, json)
Hash identifier: 3dUCIeGW9ZSEXPUxbipGG/ek5tGQ+5C3cytMAnP5RWg=
Subject key identifier: 03:01:E7:AF:40:17:7C:33:9E:D5:43:FC:C9:B7:18:F5:15:FC:58:A8
Certificate issuer: /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
Certificate serial: 0E34
Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/6DDABFB26CD511ED9EC9CF83C4F9AE02.roa
Signing time: Fri 24 Jul 2026 18:35:10 +0000
ROA not before: Fri 24 Jul 2026 18:35:10 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 137828
IP address blocks: 103.115.72.0/22 maxlen: 22
103.115.72.0/23 maxlen: 23
103.115.72.0/24 maxlen: 24
103.115.73.0/24 maxlen: 24
103.115.74.0/23 maxlen: 23
103.115.74.0/24 maxlen: 24
103.115.75.0/24 maxlen: 24
2402:e1c0::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl
rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3636 (0xe34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF9A1, serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
Validity
Not Before: Jul 24 18:35:10 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a63b05e-9a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:59:1a:91:34:27:c7:e5:83:23:f6:25:b0:
6f:02:42:16:b7:32:44:2e:fc:1f:fe:e7:07:bd:40:
39:af:80:ea:dd:e3:88:ce:a4:b7:1f:8b:5b:91:49:
09:a3:f7:72:6e:5a:6d:cc:dd:51:35:97:08:72:81:
8a:1c:af:a8:4f:2b:f7:e6:4e:2f:43:7e:66:53:8f:
a6:ad:7d:a5:65:0c:f4:59:81:3c:b3:38:b2:dd:7a:
7f:c1:e1:33:ef:cc:30:9d:b8:d1:35:63:04:a7:9f:
d2:54:13:8f:09:d7:8c:19:fd:62:a6:b3:7c:3e:bc:
d0:40:df:10:22:bf:15:9d:51:85:9d:43:b6:75:4d:
ee:3e:bf:25:1f:62:e2:1d:e4:3e:00:da:af:76:d3:
bd:b6:0f:d6:91:d5:b5:60:d9:06:49:68:49:8f:9b:
da:a9:38:74:3f:54:2a:bd:b0:0b:27:5d:ea:68:2d:
f0:05:f0:c0:26:8b:4e:0e:d0:dd:71:02:16:e2:ce:
9e:2f:51:ba:92:48:89:f7:34:ed:88:bb:07:c5:a1:
45:ca:19:f6:1b:a8:ec:71:a0:ee:46:1b:f0:f3:71:
ba:f6:79:ea:ee:da:bb:c0:0f:ed:cc:4f:10:20:72:
f4:0f:9d:ee:27:42:46:07:ab:78:7e:95:dd:1a:56:
e2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:01:E7:AF:40:17:7C:33:9E:D5:43:FC:C9:B7:18:F5:15:FC:58:A8
X509v3 Authority Key Identifier:
keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/6DDABFB26CD511ED9EC9CF83C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.115.72.0/22
IPv6:
2402:e1c0::/32
Signature Algorithm: sha256WithRSAEncryption
00:8b:72:98:ef:29:20:eb:8e:7f:f1:c5:25:a3:7b:7b:cb:b1:
f7:92:50:35:e0:5e:ee:9f:4b:5c:d3:34:ac:dd:51:44:e8:8a:
72:24:3a:ee:18:5c:c7:b7:c5:c9:db:3c:08:76:c3:7b:fe:0c:
a7:b5:8f:7f:44:de:77:61:8b:c7:e8:73:ba:f8:2e:3f:a3:0b:
a0:98:d1:c5:f0:ce:c6:5c:3d:d8:15:15:5e:4e:a6:f8:2b:82:
39:55:16:63:36:f2:54:db:0d:41:f7:60:33:27:9a:56:8e:05:
51:01:4c:d5:51:f4:70:25:2b:f0:5f:47:69:aa:db:5c:1b:4e:
71:0c:17:8a:c7:91:e2:3a:09:a4:e5:fe:e6:9c:0a:da:1a:9e:
96:73:3a:a0:4d:2f:c7:3b:48:09:ed:0b:ff:b9:7b:f0:13:cc:
eb:c7:e7:e9:e0:a1:c0:be:ea:34:25:9a:b5:0e:c0:7d:77:a5:
56:a5:c9:cd:7c:f2:a8:d9:57:95:8d:26:44:56:65:4c:3f:9f:
70:1c:95:b2:40:36:85:04:10:4d:23:c8:55:3c:8f:dd:84:8d:
9b:ac:7f:5a:8b:47:20:70:31:5c:e1:2d:a9:20:e3:a0:60:4e:
f4:1e:1a:69:07:1f:29:cf:d0:3a:98:75:72:59:d9:7b:90:22:
b7:26:03:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:35:14 2026 by rpki-client