
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/2FE7B7E6500D11F0B18D7376C4F9AE02.roa
File: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (raw, json)
Hash identifier: 9sVvG8nqt07RYgdjskUj+nbNgt9KI1DJ9r2FPQyKhdI=
Subject key identifier: 04:2D:CD:58:6C:16:76:0D:21:D0:8B:4F:4F:05:5D:48:17:77:53:C6
Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Certificate serial: 01A5
Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/2FE7B7E6500D11F0B18D7376C4F9AE02.roa
Signing time: Thu 03 Sep 2026 05:55:17 +0000
ROA not before: Thu 03 Sep 2026 05:55:17 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 8796
IP address blocks: 103.110.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Validity
Not Before: Sep 3 05:55:17 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a990bc5-9754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:4f:25:43:92:6a:33:66:f9:b1:c3:3b:ed:
2a:a3:83:44:f5:bd:15:4e:19:62:88:01:06:a3:57:
52:f4:79:ff:c8:09:a7:e9:43:86:e5:6c:c3:fb:f7:
d3:ca:d6:79:6b:46:9e:94:bf:2c:fd:7e:6b:d9:ac:
19:86:4c:b0:1c:55:9b:59:2a:9b:6f:92:eb:14:a4:
b0:ed:cc:8b:e5:c1:ec:d1:70:20:2a:1c:d3:4e:25:
5d:f3:1e:38:6c:93:8c:d5:26:02:c9:f6:93:a1:88:
21:5d:83:34:a9:48:50:39:60:1b:0d:82:0d:8f:c6:
b3:60:f5:9c:bd:3c:c8:dc:de:cb:36:0a:99:e4:a5:
06:bb:e7:4f:f7:20:11:3a:0c:2c:8f:2c:f9:e6:4c:
e1:69:42:73:3e:d5:f8:9f:63:2a:7f:ad:94:94:8c:
28:5f:c3:bf:a1:40:85:c3:82:7b:d2:fc:4e:bd:43:
61:73:d3:5e:95:22:17:85:96:4a:0c:65:6a:a2:80:
22:6a:fd:9c:0c:9f:d7:a0:f8:e6:62:6a:ad:61:6c:
ce:c4:13:3d:78:59:0f:b7:ef:12:4c:a1:27:a1:fa:
0b:d4:9f:04:a1:df:e3:d6:80:78:0b:ec:a0:8a:40:
06:76:0c:2e:04:6e:da:54:83:ae:46:7f:5a:95:63:
fe:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2D:CD:58:6C:16:76:0D:21:D0:8B:4F:4F:05:5D:48:17:77:53:C6
X509v3 Authority Key Identifier:
keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/2FE7B7E6500D11F0B18D7376C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.110.220.0/23
Signature Algorithm: sha256WithRSAEncryption
45:71:11:a5:1e:0d:25:b9:92:ea:bc:c7:87:12:44:fd:ed:e0:
92:76:54:58:1f:89:c0:1b:a8:2f:0a:f4:3c:86:bf:26:de:fd:
4e:54:a6:c7:8a:1b:24:be:dd:e4:30:50:3c:fc:8b:bd:6b:a7:
f7:61:2b:f8:f2:9b:ad:db:a8:b2:d0:d4:13:84:68:1e:31:0c:
af:1b:9b:c2:84:e8:a8:b5:db:13:1a:df:c1:6e:68:8f:1d:61:
04:54:2e:c5:19:ad:4b:37:c3:29:e8:64:37:01:8a:bf:10:e9:
cd:17:4b:62:f5:dc:ed:53:23:13:cf:ea:5d:4f:bb:60:45:a8:
90:b6:91:78:b5:2f:90:4b:40:9a:b1:3c:36:fe:ad:08:80:7b:
8c:81:82:a8:72:45:dc:4f:2f:7f:a1:a4:19:58:1d:b3:91:d5:
07:84:0b:a8:d4:b8:44:03:3a:a0:df:0d:a7:59:72:d9:93:c6:
48:4f:a3:58:50:a3:58:fc:24:b5:31:78:ea:cf:56:44:96:4c:
9b:54:c2:a5:4b:dd:64:1c:65:8f:1d:dd:2f:31:31:47:8c:59:
52:3d:3e:1b:c2:ee:18:ba:11:bd:96:e8:76:16:e7:8a:30:bf:
c9:be:04:df:02:2a:62:32:9d:d7:e3:68:9a:4e:8c:c6:16:70:
1d:ee:f7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:28:16 2026 by rpki-client