
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/0CCA4B88A67511F191E1E1506911F970.roa
File: 0CCA4B88A67511F191E1E1506911F970.roa (raw, json)
Hash identifier: XF70YQhWM3VNFRQ+EjNwyyEzBoLxvSZ0qS2KtFBCq40=
Subject key identifier: 2A:5F:F9:09:4A:56:59:F9:4C:10:D9:10:AF:38:F3:22:6D:1E:72:8E
Certificate issuer: /CN=A91BD68B/serialNumber=45BB197DEB9361598115653F97089E6A7F62BF9A
Certificate serial: 1CE0
Authority key identifier: 45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/0CCA4B88A67511F191E1E1506911F970.roa
Signing time: Sat 19 Sep 2026 02:58:23 +0000
ROA not before: Sat 19 Sep 2026 02:58:23 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 136049
IP address blocks: 103.80.220.0/24 maxlen: 24
103.80.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.crl
rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:08:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7392 (0x1ce0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD68B, serialNumber=45BB197DEB9361598115653F97089E6A7F62BF9A
Validity
Not Before: Sep 19 02:58:23 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6aadfa4e-a32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1f:f2:57:40:80:f7:10:d4:7e:45:b0:a0:ba:
a8:3f:66:d1:b8:46:25:e8:69:28:05:80:26:c6:3b:
d6:53:ee:b1:a8:5e:84:68:98:87:d7:ff:f2:d0:76:
fa:c5:32:2b:64:fe:65:fc:6b:6a:11:ea:cb:de:06:
5b:6c:13:7f:8f:a9:d9:ae:22:51:cd:1a:a6:25:31:
2c:a7:3f:2e:37:bd:5f:96:79:74:49:c7:a7:8c:a7:
08:e4:a1:5e:c8:03:ea:b4:7e:68:8b:81:7c:cf:51:
a6:d9:d5:f5:87:57:c1:f6:4f:5d:84:58:05:76:e0:
44:d9:19:df:fb:16:9a:ea:fc:5a:ca:3d:3b:74:e2:
6c:21:54:05:28:47:da:7c:f3:0c:05:4d:2d:3c:1a:
73:de:dc:12:01:ed:01:71:e2:2e:e2:55:29:b4:57:
52:4b:b4:5d:c5:1a:bb:12:9d:f2:d5:b1:00:97:9b:
92:37:f6:6f:72:63:6e:63:74:da:8f:e3:2c:ee:ec:
31:e4:5e:dd:ed:0a:f2:7f:b6:84:c5:25:d9:83:f9:
78:79:6f:bc:4b:22:28:3d:9e:e4:8d:b4:4e:00:2f:
83:71:75:78:2a:64:db:e9:89:0c:2f:c9:e8:16:17:
30:c4:85:3d:df:7a:2f:27:da:69:09:45:4e:40:a1:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5F:F9:09:4A:56:59:F9:4C:10:D9:10:AF:38:F3:22:6D:1E:72:8E
X509v3 Authority Key Identifier:
keyid:45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/0CCA4B88A67511F191E1E1506911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.80.220.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:c1:1c:2d:7d:26:d8:e4:a1:7d:be:72:72:a5:d6:a8:7d:2f:
d0:80:0b:10:05:8d:b5:0d:6e:ea:53:cb:78:1c:eb:55:70:49:
68:30:4b:a9:9b:6a:eb:ba:1f:bc:81:cf:42:42:02:22:e7:b5:
3a:84:2f:c0:af:a2:a3:7f:8b:1b:e5:2c:fb:40:bf:4b:55:f9:
9c:02:89:3a:f7:26:b7:52:5e:32:a5:f4:df:4a:4d:2a:f2:6e:
39:c3:8a:d6:6b:32:95:37:ce:1c:cc:8a:fe:16:80:4a:50:c6:
a3:63:6d:75:36:da:a9:aa:b6:81:dd:38:b3:18:09:96:85:d0:
fd:2d:e4:9b:1a:e3:a1:0a:98:40:b2:9e:16:bf:20:05:1e:83:
81:3c:6e:ed:79:c8:d4:e2:4c:72:d8:13:4c:10:9d:26:3b:79:
f1:6f:42:2a:2a:91:e8:0b:28:84:f1:cc:85:9c:91:5c:9e:e4:
8d:84:21:5a:86:13:06:08:64:42:32:c2:0e:68:7d:6b:33:ba:
18:66:91:1f:d8:fc:df:4a:f0:86:5a:2e:c7:67:9a:aa:cf:f8:
79:5f:ab:28:1f:9d:50:73:2e:5c:34:90:fc:24:fa:57:30:88:
53:d7:7c:00:ef:af:9e:01:2e:25:e6:27:53:05:42:ee:3f:72:
34:9e:49:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:17:41 2026 by rpki-client