
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/727EECD2678811EF99602F53C4F9AE02.roa
File: 727EECD2678811EF99602F53C4F9AE02.roa (raw, json)
Hash identifier: cMZQcfYkNAd3pSMLn6i/CLXBMAI7zdRWfjgvrnhxhtg=
Subject key identifier: 79:7B:3F:BF:EB:8D:6D:50:5F:D2:EE:4B:1F:93:C8:CB:E9:F1:56:33
Certificate issuer: /CN=A91B2252/serialNumber=308A0F042371D744E4CB62AB51E904F70CACD37A
Certificate serial: 08C0
Authority key identifier: 30:8A:0F:04:23:71:D7:44:E4:CB:62:AB:51:E9:04:F7:0C:AC:D3:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/727EECD2678811EF99602F53C4F9AE02.roa
Signing time: Thu 20 Aug 2026 20:41:45 +0000
ROA not before: Thu 20 Aug 2026 20:41:45 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 140948
IP address blocks: 103.153.196.0/23 maxlen: 23
103.153.196.0/24 maxlen: 24
103.153.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.crl
rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:36:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240 (0x8c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2252, serialNumber=308A0F042371D744E4CB62AB51E904F70CACD37A
Validity
Not Before: Aug 20 20:41:45 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a876689-1d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:31:d6:49:40:9d:56:9a:ef:d2:06:34:b5:
ba:7e:15:15:a1:8f:5f:70:7b:0e:f6:45:94:84:97:
1b:cf:d0:b8:18:64:18:6c:09:77:47:b2:a5:a3:a5:
d5:c6:51:af:c9:a8:e2:77:13:be:1d:b6:e6:db:a1:
c2:21:6d:d1:9e:9c:cd:e1:c0:a8:04:e3:24:aa:b2:
43:f2:c5:30:99:d0:9a:8f:c5:52:7d:94:a3:7e:7a:
83:b8:d8:53:bd:e0:48:5b:49:44:80:d5:98:50:32:
52:40:87:e6:f6:72:8b:52:5a:a1:f9:b8:b1:00:c1:
8c:60:a8:6f:b6:21:3b:d1:09:2a:8c:3b:22:78:2b:
31:6c:22:b2:45:5a:3e:9a:dd:bc:cc:16:18:49:78:
b0:9e:2c:f0:91:fa:d9:04:da:2c:22:1e:56:9c:f2:
33:5f:4d:9e:34:0c:e5:6c:81:03:e3:4a:d5:7d:cb:
d5:53:46:6d:11:48:f0:68:54:86:ab:67:ee:4b:fd:
2a:03:00:33:6b:84:8d:5b:6f:1d:ff:aa:c0:2f:56:
b0:34:d0:85:f1:f7:48:c5:84:5a:d0:38:73:81:a4:
20:f7:fd:b0:fb:fb:dc:2d:6b:ea:82:3b:e0:7a:90:
36:1e:07:76:66:c0:f7:85:fa:a7:ba:b5:16:15:71:
fa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7B:3F:BF:EB:8D:6D:50:5F:D2:EE:4B:1F:93:C8:CB:E9:F1:56:33
X509v3 Authority Key Identifier:
keyid:30:8A:0F:04:23:71:D7:44:E4:CB:62:AB:51:E9:04:F7:0C:AC:D3:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/727EECD2678811EF99602F53C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.196.0/23
Signature Algorithm: sha256WithRSAEncryption
01:a5:ad:45:91:ea:bb:80:82:2f:78:e3:9b:ff:e2:d1:df:34:
0f:b4:02:91:90:80:03:74:c3:0b:3a:e0:fd:89:d4:4a:f2:a8:
b6:c3:99:a1:b7:01:d1:63:59:ef:80:b5:7e:f5:84:50:20:7e:
7f:ea:70:ec:6c:30:f8:a7:96:00:d2:c0:77:46:9e:41:a7:b0:
83:10:9c:28:16:d8:05:c7:d6:ee:65:ae:03:96:8f:fa:c0:d9:
13:aa:97:51:55:e6:6c:e5:34:a2:02:61:1e:d9:51:bb:63:ee:
54:41:fd:5a:d2:11:d2:2b:4d:05:88:33:4d:63:0b:42:91:0d:
98:25:13:3c:c8:77:6f:be:74:ea:8d:80:9b:2c:4d:92:22:e0:
4f:a6:30:e3:79:bc:c1:f4:0e:41:41:00:1a:25:1b:12:52:0d:
1d:1c:f2:32:69:73:ea:0d:c4:28:11:69:38:57:3c:63:d3:76:
7b:7b:4b:df:7c:e3:e7:73:5c:f7:5a:5a:b2:61:35:ba:bd:36:
dc:99:e4:12:b7:1d:a0:2c:12:d9:db:6f:4e:4a:22:d8:b4:bc:
2b:15:58:e4:98:fe:43:31:11:12:64:6f:8d:ab:5a:1a:f7:67:
57:9f:29:24:3a:19:45:ae:0b:c1:81:ba:7f:cd:c4:a6:37:ab:
04:18:ba:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:33:24 2026 by rpki-client