
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/8D04AAF04F7711F18A6088C5CB833773.roa
File: 8D04AAF04F7711F18A6088C5CB833773.roa (raw, json)
Hash identifier: XjXcCi2v5LhOi6H+CcgSm46oBwz6y5FjSkvJ1fRJvEg=
Subject key identifier: FE:F1:5E:C8:9E:67:E7:DA:D9:4F:88:85:5F:0E:96:AD:59:16:30:1D
Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD
Certificate serial: 0240
Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/8D04AAF04F7711F18A6088C5CB833773.roa
Signing time: Thu 14 May 2026 09:31:23 +0000
ROA not before: Thu 14 May 2026 09:31:23 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132169
IP address blocks: 103.219.224.0/24 maxlen: 24
103.219.225.0/24 maxlen: 24
2401:a20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl
rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD
Validity
Not Before: May 14 09:31:23 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6a05966a-c93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:89:ce:1d:c6:db:38:02:a6:f1:e5:28:09:
10:1d:67:45:24:65:d5:8a:20:0a:ea:b1:ce:c6:10:
95:4e:7f:72:2c:05:6d:9d:d8:df:df:2d:f3:49:5b:
3f:86:80:4a:0b:cd:1e:28:75:1c:db:20:4d:4c:01:
79:14:43:91:63:4f:b9:e3:38:3c:b6:ad:7a:18:2e:
87:88:fd:e7:1a:b8:32:e2:92:26:52:c2:f8:20:91:
7e:18:04:21:b8:ea:74:d1:11:82:a2:d8:d8:29:b7:
39:9a:c3:90:0e:2a:55:eb:65:fc:42:6b:31:b6:b3:
5d:4c:d5:03:56:8c:a2:48:b8:f1:6f:10:4c:e4:13:
5b:71:bb:e2:a2:d9:13:f6:85:2d:bf:9c:09:5d:df:
64:c6:11:46:96:30:67:77:3b:be:ba:e0:f9:9f:56:
62:24:37:df:64:09:bf:00:97:70:fe:fe:47:ce:e1:
70:93:35:cd:66:03:23:a2:16:07:83:03:ff:86:60:
04:bb:c3:02:6a:58:3f:bd:e2:49:ed:fe:6f:45:8c:
5d:ad:82:df:31:76:9b:97:1c:02:17:75:91:37:df:
27:74:51:ed:3a:c8:3f:f8:fc:cc:99:78:40:65:d8:
6f:63:4b:12:1a:a4:0f:4b:30:37:c9:f3:1b:67:13:
e2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F1:5E:C8:9E:67:E7:DA:D9:4F:88:85:5F:0E:96:AD:59:16:30:1D
X509v3 Authority Key Identifier:
keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/8D04AAF04F7711F18A6088C5CB833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.219.224.0/23
IPv6:
2401:a20::/32
Signature Algorithm: sha256WithRSAEncryption
b4:f9:2c:17:f1:a2:0e:76:c0:c7:05:9c:9d:e9:1c:cd:7b:4f:
3a:03:ab:ab:2b:3c:dc:d0:66:58:0b:89:57:6e:2f:c8:fa:b5:
c8:e9:f0:d5:98:b9:c0:60:17:6d:be:83:51:09:78:e4:fb:1b:
6a:3f:50:54:5d:37:fd:cb:11:00:bc:40:ad:52:a4:11:72:63:
ea:8b:69:f1:2f:0f:d6:ec:75:94:d4:5a:18:5e:e7:e3:f1:2c:
aa:59:51:a4:22:08:93:15:b2:72:30:5b:5e:e1:8c:5f:bd:7d:
ac:5b:64:24:84:98:cb:52:2c:88:9d:34:7a:2a:29:bd:e2:01:
87:07:32:33:f2:c2:16:b8:ea:37:28:17:75:3c:d4:21:69:d3:
6e:f0:44:66:d8:62:b9:b7:da:c3:a6:f9:7c:27:47:ec:6e:bd:
29:56:56:7d:b3:fb:6a:9f:18:7e:2e:14:2f:0a:2d:63:b0:2c:
90:eb:62:e3:96:a6:88:97:d4:f7:53:a3:e4:9e:3f:e0:11:19:
f3:15:9a:a5:1e:dc:22:3d:db:59:a6:e8:90:8f:c0:b2:be:af:
b6:63:b0:3f:18:f8:aa:bb:3c:4a:78:3f:41:5a:43:ea:b0:f5:
fe:20:18:19:7a:88:58:c3:7a:ab:5b:52:8d:07:4b:5d:93:31:
63:b5:5d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:00:28 2026 by rpki-client