
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/89631CA886F211F1B8F66003A7EE528E.roa
File: 89631CA886F211F1B8F66003A7EE528E.roa (raw, json)
Hash identifier: T9tejqo/viZ84AtMFih/yCchWtoB4a3/6YsZxvnzzj4=
Subject key identifier: FE:8E:52:1D:A2:D3:E1:DC:06:79:3D:14:9E:4A:58:27:18:D9:12:6F
Certificate issuer: /CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Certificate serial: 0582
Authority key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/89631CA886F211F1B8F66003A7EE528E.roa
Signing time: Thu 23 Jul 2026 23:59:27 +0000
ROA not before: Thu 23 Jul 2026 23:59:27 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 132491
IP address blocks: 103.73.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 00:04:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1410 (0x582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4357, serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Validity
Not Before: Jul 23 23:59:27 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a62aadf-d356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:f3:4c:a1:88:f5:eb:1d:58:69:3e:69:04:
8c:64:7f:4a:5e:4e:73:6b:f1:fd:44:08:9d:17:a0:
a0:6e:30:d4:87:e3:b4:1a:dc:71:1c:b2:8e:01:c4:
3b:6f:c9:39:bd:9c:a1:82:66:ec:d6:47:6b:95:a9:
8a:c7:f3:37:0c:bd:00:9d:78:bd:00:76:0c:16:53:
fe:75:8d:b8:c2:6c:98:bd:e6:a9:74:80:5d:a0:3b:
52:2f:36:3c:27:54:9a:35:5b:a3:00:8d:eb:e1:4f:
3a:df:48:72:d5:62:08:3f:b7:70:6f:69:ed:f4:16:
7c:77:94:b6:ea:3a:2d:fe:f7:6d:37:b4:b0:b8:7f:
ba:b1:a2:85:d6:61:e0:2b:5e:e8:77:84:61:c2:44:
b1:55:3f:8c:6a:1c:80:61:a7:71:17:94:33:f6:39:
12:7d:fc:3a:a8:69:8d:6c:a4:f4:c8:80:dc:6b:bd:
34:30:8f:14:33:2a:60:89:41:e1:a1:0f:05:b1:51:
63:75:17:f9:32:6f:4d:b3:40:5a:21:1f:db:f0:02:
b4:4b:47:3b:03:47:29:51:75:66:da:fe:c4:7e:ab:
a6:99:4c:e9:93:33:08:be:90:a1:6e:43:61:65:67:
a6:54:f9:05:66:ec:cc:a9:0d:41:52:9f:af:ff:f1:
28:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8E:52:1D:A2:D3:E1:DC:06:79:3D:14:9E:4A:58:27:18:D9:12:6F
X509v3 Authority Key Identifier:
keyid:CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/89631CA886F211F1B8F66003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.73.84.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:7b:0f:a2:15:32:e3:e9:02:f3:19:58:ae:1b:8d:b3:47:5e:
ab:ce:30:64:bc:8d:d8:df:83:75:c9:92:12:44:20:f3:ed:a3:
69:d8:ba:43:c4:01:87:a4:78:5e:8b:0c:56:7b:1b:d5:3c:64:
8d:4c:9e:f9:b8:6e:41:41:6b:0a:fb:f3:ab:dc:38:c9:4f:54:
5b:0c:f7:5c:d6:0f:e6:d3:0a:70:32:33:33:fa:c2:3b:30:10:
39:05:fe:1c:6d:d6:b9:52:0d:e7:fb:78:6f:47:15:76:01:c3:
eb:9c:1d:66:30:de:c7:92:43:f2:72:24:b4:6a:9b:e2:9d:84:
52:a5:d0:2e:42:06:43:01:85:6f:1c:d0:87:5f:95:e4:40:a0:
76:1b:c4:d6:24:ae:6a:38:8d:a5:d3:b9:59:d5:fb:55:14:fb:
11:41:4f:bd:c2:cc:ef:8e:58:96:0b:11:db:ad:54:f0:38:67:
b7:fb:4a:2e:f7:e5:76:85:c9:73:b4:fe:15:1b:cc:d9:a9:0e:
60:f7:1b:35:84:aa:e5:7b:04:a9:fa:78:dd:4a:43:9a:e1:bd:
40:41:6f:a6:9c:d7:20:42:65:da:fb:4d:53:4d:d4:ff:96:96:
8b:75:34:41:cc:b5:e9:92:12:78:62:f0:a5:b4:5a:9f:0c:8b:
a0:54:67:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:02:55 2026 by rpki-client