
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/B8D1F4E8501411F09C0FE83FC4F9AE02.roa
File: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (raw, json)
Hash identifier: ++NAzFdgrCWq7Psti37kYod0Z/Cf5rqqSx5tqVELD30=
Subject key identifier: C9:36:73:68:C8:47:CA:AF:7B:6D:98:BD:94:9A:FB:18:D3:05:3A:0D
Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Certificate serial: 01A2
Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/B8D1F4E8501411F09C0FE83FC4F9AE02.roa
Signing time: Thu 03 Sep 2026 05:55:11 +0000
ROA not before: Thu 03 Sep 2026 05:55:11 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 395886
IP address blocks: 103.110.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:54:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Validity
Not Before: Sep 3 05:55:11 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a990bbf-50e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:97:93:92:40:f7:fb:82:e7:41:bd:e9:9c:
5e:01:5d:3d:8d:50:7f:1d:df:68:7d:9a:0a:c5:06:
dd:be:9d:b2:f5:63:54:eb:38:b4:02:a2:aa:fa:39:
df:27:0b:c7:12:8b:c2:1e:5f:cb:9e:6e:27:52:f4:
66:48:ca:92:c0:2d:18:e0:9c:48:c3:7f:f8:57:2a:
e6:61:24:73:d1:87:83:e1:cb:ab:88:fe:3e:03:d3:
b5:f2:47:dd:6d:79:b1:29:be:6c:92:b4:c2:8a:88:
70:27:66:f6:be:b0:5b:b7:cb:44:7b:bd:31:2c:5c:
1c:06:e2:d7:62:25:64:fa:d3:5a:dc:6f:c9:5e:bd:
a4:c4:ca:6b:33:49:61:4d:3c:86:07:06:ad:e4:82:
8a:71:5b:6d:c8:be:c3:17:aa:33:bb:c7:9e:6c:f4:
3f:72:98:5a:62:fd:f7:43:ac:40:e5:ca:94:c6:8d:
5c:1c:5a:0c:0c:b6:3e:84:cd:14:60:52:19:25:4d:
c8:18:a1:e2:a9:cf:d1:61:45:5c:7f:52:0e:a0:1b:
07:da:ca:67:52:fe:79:9d:b8:1e:14:d4:21:4a:e6:
6f:9e:81:9b:23:84:b0:12:36:bd:3d:5d:13:ea:64:
26:17:d0:b4:3d:ea:7e:c6:d6:02:02:83:4f:47:87:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:36:73:68:C8:47:CA:AF:7B:6D:98:BD:94:9A:FB:18:D3:05:3A:0D
X509v3 Authority Key Identifier:
keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/B8D1F4E8501411F09C0FE83FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.110.220.0/23
Signature Algorithm: sha256WithRSAEncryption
21:c3:93:64:cc:09:4d:0e:ef:2c:a6:76:ab:62:2f:e9:b8:e1:
b3:0b:1a:56:29:cf:c9:e4:c8:3e:b1:cc:b5:b7:12:37:38:a0:
e1:9a:b2:02:52:8c:d9:fe:16:1a:79:3d:f8:a6:dc:9c:90:bd:
47:81:9a:2d:b4:3a:b2:b2:60:5b:b8:0f:1a:43:3a:5c:8f:32:
10:15:58:e1:1e:fb:1b:c0:05:04:63:4f:9c:9a:8d:60:69:37:
cc:3b:eb:1c:b8:9b:ee:e9:77:2a:8b:52:3f:3e:1f:3b:c2:16:
62:37:7d:eb:5e:b4:58:fb:0f:3f:58:7f:93:31:4a:c4:32:39:
cb:40:d7:de:0d:61:11:f2:6e:e0:c3:9a:1c:cd:67:56:f5:f5:
04:62:9f:db:39:36:82:c1:74:01:9f:06:e7:ac:c5:c1:f6:56:
af:0c:e0:a0:5c:af:8a:a3:41:db:98:6b:0e:cb:90:72:13:e6:
c0:08:b9:eb:63:f5:52:4b:c5:db:a1:22:e3:b1:cb:77:58:60:
00:07:81:a2:bf:5f:75:e8:fa:9d:54:f3:47:ed:4a:9e:2e:3f:
6b:02:8c:9a:7d:85:4c:4f:3a:3d:7e:c7:3f:65:72:f5:2d:af:
8f:c4:c8:77:bd:3d:9e:60:80:21:49:cb:5c:2e:cf:43:ed:f6:
fe:12:d7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:27:22 2026 by rpki-client