
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B54AA/0B997FD4ACFD11F1BA5A56E13611F970/6B8CDE00AD8311F1BD3BEF4C6311F970.roa
File: 6B8CDE00AD8311F1BD3BEF4C6311F970.roa (raw, json)
Hash identifier: Xk34jMLA9RbZ2gRnU7+OBryJYCQuz2GD+FIkP6ye+HM=
Subject key identifier: 64:19:11:08:28:F6:A7:8D:8A:3B:35:AE:5F:40:29:94:22:6F:8F:DE
Certificate issuer: /CN=A91B54AA/serialNumber=4D48414824D3EB16082644865ED3667200EFA249
Certificate serial: 08
Authority key identifier: 4D:48:41:48:24:D3:EB:16:08:26:44:86:5E:D3:66:72:00:EF:A2:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUhBSCTT6xYIJkSGXtNmcgDvokk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B54AA/0B997FD4ACFD11F1BA5A56E13611F970/6B8CDE00AD8311F1BD3BEF4C6311F970.roa
Signing time: Sat 12 Sep 2026 04:08:15 +0000
ROA not before: Sat 12 Sep 2026 04:08:15 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 152645
IP address blocks: 103.138.238.0/24 maxlen: 24
202.1.4.0/24 maxlen: 24
2401:89e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B54AA/0B997FD4ACFD11F1BA5A56E13611F970/TUhBSCTT6xYIJkSGXtNmcgDvokk.crl
rsync://rpki.apnic.net/member_repository/A91B54AA/0B997FD4ACFD11F1BA5A56E13611F970/TUhBSCTT6xYIJkSGXtNmcgDvokk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUhBSCTT6xYIJkSGXtNmcgDvokk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 09:49:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B54AA, serialNumber=4D48414824D3EB16082644865ED3667200EFA249
Validity
Not Before: Sep 12 04:08:15 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6aa4d02f-7a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:7e:51:05:16:e2:5a:ba:f3:29:d2:5c:79:
f4:d7:e0:8d:c1:51:8a:1d:1d:34:80:51:ec:11:92:
86:38:1d:3a:93:6a:41:45:17:ba:4f:09:3e:7b:55:
6e:2b:e5:26:a2:8d:38:97:f6:ba:a0:72:42:dc:8b:
ee:f5:1a:e3:51:f1:1a:96:40:f5:14:ae:94:ba:a4:
4c:bb:5d:d5:b8:a9:f7:3c:6b:9a:f8:f9:dc:df:d1:
81:10:1c:ca:c1:f0:3c:4d:b5:9b:aa:2c:94:32:ea:
e4:20:a8:f4:9f:10:4d:d9:2c:c2:c4:90:d4:db:8d:
4c:2d:1f:c0:2b:9c:22:2a:ee:3f:58:75:f4:05:00:
28:0e:9b:e1:0d:3a:21:76:0c:14:ba:de:97:b3:13:
64:94:97:ad:68:87:be:8a:74:eb:71:75:f3:ad:69:
64:26:11:59:30:aa:40:ad:a3:89:2c:92:dc:fc:87:
00:4d:d8:ad:45:ba:6b:5f:c2:4a:3e:7b:4b:4b:80:
7d:51:f9:57:e6:c6:24:ca:e9:e2:b2:18:e0:6c:91:
4c:57:26:7c:7d:4d:dd:9e:7a:f2:04:ac:dd:a8:13:
0c:c2:06:39:f9:14:b4:76:7d:c7:96:2a:d3:1d:c2:
4b:a2:43:a8:06:b5:b8:73:8b:d0:b6:92:28:06:26:
f0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:19:11:08:28:F6:A7:8D:8A:3B:35:AE:5F:40:29:94:22:6F:8F:DE
X509v3 Authority Key Identifier:
keyid:4D:48:41:48:24:D3:EB:16:08:26:44:86:5E:D3:66:72:00:EF:A2:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B54AA/0B997FD4ACFD11F1BA5A56E13611F970/TUhBSCTT6xYIJkSGXtNmcgDvokk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUhBSCTT6xYIJkSGXtNmcgDvokk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54AA/0B997FD4ACFD11F1BA5A56E13611F970/6B8CDE00AD8311F1BD3BEF4C6311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.238.0/24
202.1.4.0/24
IPv6:
2401:89e0::/32
Signature Algorithm: sha256WithRSAEncryption
84:fc:78:3f:ac:47:1f:7a:70:86:43:b8:f7:3c:91:ab:da:fe:
a0:26:72:3b:ec:d4:a1:e0:40:a2:88:3a:9c:51:f1:c1:fc:da:
28:0a:1d:b6:fa:9e:c3:59:08:a4:5f:79:a9:3b:3a:57:8c:96:
05:e0:92:e5:75:68:40:35:cd:cb:c1:34:04:74:ec:52:8c:45:
53:36:f8:5b:d9:df:78:af:67:66:dd:c0:a3:a2:38:8a:08:ea:
02:04:dc:54:2e:1c:52:c2:7c:f7:ec:4e:b0:07:ca:86:ed:2d:
26:66:b2:1d:86:5c:15:b5:9b:b1:c8:9a:40:e4:cf:92:96:a5:
8e:af:2e:56:20:8b:db:cc:be:62:8e:3b:60:c9:75:02:a7:9e:
dc:cd:72:05:48:02:00:d7:ea:4a:1d:bb:12:96:c5:52:5f:42:
8b:f1:56:d7:a7:dd:d5:85:45:c6:d5:d9:a3:08:ec:e6:3f:ed:
6a:63:68:ef:f3:88:77:d1:2c:d1:da:7f:f6:e8:ca:f1:0e:ac:
1b:9b:91:f7:9f:9f:42:e4:0e:6b:34:de:7a:c2:0e:10:07:87:
9c:6c:06:62:84:89:58:2e:c7:26:ac:0b:8c:82:8a:1f:7f:81:
c6:10:a6:3a:62:aa:59:eb:d2:37:82:e1:ca:2e:9a:e5:83:54:
0d:e8:d5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 04:59:35 2026 by rpki-client