
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/33B3C60425FD11EDA4097785C4F9AE02.roa
File: 33B3C60425FD11EDA4097785C4F9AE02.roa (raw, json)
Hash identifier: iRFvE1rr26SrK4L0azwVGFZPRC7sliMA8aHjEhbdZr8=
Subject key identifier: B3:2D:9C:C9:FC:6E:44:36:54:20:CC:74:27:32:88:AF:1B:49:B2:83
Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
Certificate serial: 06B5
Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/33B3C60425FD11EDA4097785C4F9AE02.roa
Signing time: Sat 06 Jun 2026 23:27:10 +0000
ROA not before: Sat 06 Jun 2026 23:27:10 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 38254
IP address blocks: 103.167.250.0/24 maxlen: 24
103.167.251.0/24 maxlen: 24
2001:df6:c480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl
rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:36:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1717 (0x6b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
Validity
Not Before: Jun 6 23:27:10 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a24acce-43f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6b:97:62:c4:48:3b:98:8f:54:1e:37:41:c9:
17:d2:f6:71:7b:4b:26:f3:94:be:60:eb:15:72:c3:
6b:bc:ac:42:f9:6e:ae:12:fd:f4:d1:ab:81:09:ad:
c0:a6:9d:62:0e:57:27:4c:35:d2:6f:d9:c4:61:b6:
85:be:81:3a:cf:19:75:1f:5f:b0:75:4d:48:c9:7f:
dc:49:3b:5a:b5:bf:17:63:89:a4:c7:58:bf:d6:fd:
25:cd:c5:d0:ea:f2:43:12:b0:1c:21:1e:fc:d9:bd:
37:78:47:7d:f9:22:ba:8b:a9:af:9f:d5:66:6e:3a:
c2:bd:b8:58:fa:63:1e:b5:48:c9:39:8d:39:db:60:
a6:b8:2d:1b:f4:30:92:db:8a:a1:ff:e8:18:ea:c0:
33:c8:09:0a:f0:d3:3e:ba:78:44:b9:9d:a7:d0:56:
66:f3:80:84:43:40:cd:40:c2:4c:0f:b4:bc:b4:6d:
83:27:c0:5d:0e:70:7a:c3:18:0f:4a:bc:4c:2b:d8:
90:9c:c1:48:f9:aa:2d:f6:c1:f9:ba:cc:8a:5b:39:
df:59:c0:e6:94:d8:1a:e2:e9:f6:c8:b9:36:b5:6b:
bb:74:7b:24:fb:37:0d:ca:ac:e6:dd:60:33:71:59:
eb:cc:87:d1:d5:49:0d:8e:01:d4:d4:70:cd:e5:0e:
d4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2D:9C:C9:FC:6E:44:36:54:20:CC:74:27:32:88:AF:1B:49:B2:83
X509v3 Authority Key Identifier:
keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/33B3C60425FD11EDA4097785C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.250.0/23
IPv6:
2001:df6:c480::/48
Signature Algorithm: sha256WithRSAEncryption
be:2c:d3:e5:50:46:85:18:c8:74:91:8e:31:b8:c6:8c:cb:11:
15:38:e5:c8:59:ca:05:ac:97:5a:bc:7f:43:06:65:67:7e:52:
96:47:16:05:3c:fb:09:d5:2c:f6:8b:8f:7f:70:44:56:fa:e0:
00:26:04:2f:4d:2b:6d:5f:fc:fd:04:65:06:f3:0f:7c:55:26:
82:3c:51:28:27:52:88:16:41:08:fe:d4:60:4b:f2:1d:a6:02:
3d:cc:e7:73:3e:cc:ba:1b:2c:d8:0d:ab:76:0d:ea:53:29:2c:
a9:3d:f3:c8:e1:c6:fb:13:47:8f:53:76:be:1b:97:91:99:42:
7e:53:b6:7f:91:e3:98:50:90:43:68:cf:ed:fd:e3:3e:79:d9:
61:7f:6b:bf:6c:b3:78:19:5c:a7:bd:93:19:97:43:d5:f3:d8:
68:49:86:80:af:0d:21:fd:70:47:e5:08:12:30:3c:53:71:9c:
f3:d9:cf:b0:75:06:fa:5c:8a:2b:1b:1a:a3:5c:26:24:69:ff:
67:c8:7b:31:f9:2f:e4:3b:3f:15:a3:ae:fb:6b:2e:e9:05:db:
6a:b3:b5:bc:14:e0:c6:27:ac:76:c8:9b:f2:57:37:97:91:19:
c1:d4:b9:e0:b9:44:79:a6:f2:7f:04:fd:3b:2d:a1:ba:3b:90:
a4:ab:b3:85
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND
RTVEMTE3RjkwHhcNMjYwNjA2MjMyNzEwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTI0YWNjZS00M2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzWuXYsRIO5iPVB43QckX0vZxe0sm85S+YOsVcsNrvKxC+W6uEv300auBCa3A
pp1iDlcnTDXSb9nEYbaFvoE6zxl1H1+wdU1IyX/cSTtatb8XY4mkx1i/1v0lzcXQ
6vJDErAcIR782b03eEd9+SK6i6mvn9VmbjrCvbhY+mMetUjJOY0522CmuC0b9DCS
24qh/+gY6sAzyAkK8NM+unhEuZ2n0FZm84CEQ0DNQMJMD7S8tG2DJ8BdDnB6wxgP
SrxMK9iQnMFI+aot9sH5usyKWznfWcDmlNga4un2yLk2tWu7dHsk+zcNyqzm3WAz
cVnrzIfR1UkNjgHU1HDN5Q7UewIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLMtnMn8
bkQ2VCDMdCcyiK8bSbKDMB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4
NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjBEMzkvN0YyNEZGRDBDODU4MTFFQkJFMEVGODM0QzRGOUFFMDIvMzNCM0M2MDQy
NUZEMTFFREE0MDk3Nzg1QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ6f6MA8EAgACMAkDBwAgAQ32xIAwDQYJKoZIhvcNAQELBQADggEB
AL4s0+VQRoUYyHSRjjG4xozLERU45chZygWsl1q8f0MGZWd+UpZHFgU8+wnVLPaL
j39wRFb64AAmBC9NK21f/P0EZQbzD3xVJoI8USgnUogWQQj+1GBL8h2mAj3M53M+
zLobLNgNq3YN6lMpLKk988jhxvsTR49Tdr4bl5GZQn5Ttn+R45hQkENoz+394z55
2WF/a79ss3gZXKe9kxmXQ9Xz2GhJhoCvDSH9cEflCBIwPFNxnPPZz7B1Bvpciisb
GqNcJiRp/2fIezH5L+Q7PxWjrvtrLukF22qztbwU4MYnrHbIm/JXN5eRGcHUueC5
RHmm8n8E/Tstobo7kKSrs4U=
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:01:30 2026 by rpki-client