
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/CD9B103E08DD11ED830BEB5CC4F9AE02.roa
File: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (raw, json)
Hash identifier: yibM9eFv/XCYroEUGNzHi6qKtlLPUreKYT8VNZNC2sA=
Subject key identifier: FD:5F:A3:1C:B0:FE:73:63:B2:ED:CB:B2:2C:61:3E:16:81:9A:38:25
Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274
Certificate serial: 0356
Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/CD9B103E08DD11ED830BEB5CC4F9AE02.roa
Signing time: Sun 07 Jun 2026 01:30:36 +0000
ROA not before: Sun 07 Jun 2026 01:30:36 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 149984
IP address blocks: 103.189.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl
rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 854 (0x356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274
Validity
Not Before: Jun 7 01:30:36 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a24c9bc-3ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:1f:2e:ba:7e:9f:4f:fd:58:e3:bf:da:88:
d9:bf:83:95:45:4b:76:2a:aa:42:66:74:27:dc:f2:
3b:18:0c:df:78:48:f3:ce:b5:e1:98:6d:cb:b5:4d:
ae:38:a7:2d:9f:e8:6c:30:b5:aa:54:93:e6:3b:52:
87:e8:f4:36:d0:9e:f0:2a:6f:f7:a6:f3:b1:26:3d:
06:49:e5:06:47:05:76:e0:8d:98:ce:fd:a6:ba:32:
71:97:09:3e:c1:c6:12:0c:c0:71:62:65:37:66:f0:
2c:99:ae:d2:90:f9:37:1b:d9:e6:da:2c:5d:a0:e1:
9f:5f:26:b0:44:9e:f4:9c:b2:97:30:58:04:da:32:
1b:d2:86:a3:36:c5:b3:bd:ae:bf:6f:37:b6:d9:3e:
08:37:65:79:06:e7:d4:54:3d:39:8d:a5:62:0f:7e:
73:1a:98:db:08:01:7f:e9:25:15:0d:78:93:b4:84:
8a:b3:83:e1:7d:e2:c7:37:c3:df:a6:48:cc:fd:fe:
58:2c:44:b1:f1:80:23:cc:7a:ab:4f:9f:7c:94:0a:
55:b2:1f:40:a3:3a:00:ce:a2:1a:88:d0:21:97:3f:
e6:fa:a6:9d:50:3f:20:4f:fb:00:64:f6:32:ff:33:
b9:36:96:b3:a7:ff:b5:82:c1:60:10:5c:bb:6a:44:
0a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5F:A3:1C:B0:FE:73:63:B2:ED:CB:B2:2C:61:3E:16:81:9A:38:25
X509v3 Authority Key Identifier:
keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/CD9B103E08DD11ED830BEB5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.189.2.0/24
Signature Algorithm: sha256WithRSAEncryption
83:de:b8:14:51:38:1a:d9:fd:78:a1:39:e1:39:c7:25:1a:68:
ac:be:3c:b4:46:cb:63:20:e8:9e:09:1e:37:49:61:97:13:21:
9b:d5:f7:63:2a:09:0b:be:6b:88:49:9b:37:b3:ee:a2:aa:aa:
74:74:d5:0e:14:18:ff:61:4e:e7:3a:f0:c1:af:32:8a:f1:dc:
de:f2:73:21:72:9d:12:25:02:58:13:ee:f7:d7:ba:7f:da:e7:
20:4a:a8:cb:24:da:37:cb:ad:1e:dc:15:fa:24:27:dd:28:09:
26:3c:21:f7:7c:fc:3f:fe:6d:48:29:e7:10:e7:83:e4:ac:ca:
77:a1:e6:54:88:54:61:32:7e:cf:5e:79:57:42:99:6f:f1:6e:
7d:03:07:b5:fe:3f:91:75:e9:87:30:9d:23:28:4f:ca:e7:fe:
01:96:42:dd:1d:d4:2b:89:d0:2c:fe:a5:b0:07:73:18:16:34:
89:8a:72:87:db:ca:af:a5:b1:72:b7:b0:16:ad:1e:88:c9:b7:
17:d9:c3:2c:74:01:44:f5:07:a5:f2:d7:83:b4:d4:34:33:08:
f3:22:1c:13:a7:d1:ea:4f:7f:63:b4:5e:a9:f3:3e:c6:06:94:
6f:68:94:e5:25:b5:fd:3d:8f:a3:de:ce:a3:1a:f4:a0:53:eb:
91:24:8e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:22 2026 by rpki-client