
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/08DCBB24DC8011F0AB4C816E3A6F56BC.roa
File: 08DCBB24DC8011F0AB4C816E3A6F56BC.roa (raw, json)
Hash identifier: qPTI/BGOaPiA+Ijb2fpDa3jM09PINNTUUy/wyXi8Tlc=
Subject key identifier: CD:85:5C:18:26:70:F5:BB:02:74:9C:38:C9:DE:D6:C3:4E:A1:48:F8
Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Certificate serial: 1357
Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/08DCBB24DC8011F0AB4C816E3A6F56BC.roa
Signing time: Tue 26 May 2026 17:25:49 +0000
ROA not before: Tue 26 May 2026 17:25:49 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 63930
IP address blocks: 45.119.203.0/24 maxlen: 24
103.60.10.0/24 maxlen: 24
119.161.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4951 (0x1357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Validity
Not Before: May 26 17:25:49 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a15d79d-9c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:f5:6f:8c:71:a3:a5:cf:03:09:15:5e:b1:
db:fa:b9:be:a0:91:2e:d7:53:61:20:5f:e1:c0:2c:
43:ad:0a:9a:34:66:2c:81:2a:39:f3:b9:a8:05:ef:
3b:af:8d:4e:d4:4e:5a:65:74:f4:40:84:f9:01:8a:
49:8a:e0:d9:f8:44:e1:5d:dd:44:db:b2:02:bf:16:
9d:eb:0a:96:32:95:d7:e4:b4:50:d7:0b:d4:f3:5f:
03:b0:85:db:58:af:b1:c4:0f:35:d4:59:bd:c2:3d:
31:d1:65:09:4b:c8:8f:be:6f:0d:68:d2:2c:96:22:
74:33:d5:fa:8e:12:70:e5:2f:bf:3f:52:5b:4e:db:
8c:63:31:21:0b:fc:a7:45:2f:e4:dd:39:20:9f:6e:
a7:17:3b:35:6f:54:5c:f7:94:4a:81:6b:cc:1a:82:
54:dc:ba:a2:25:00:56:51:98:36:80:68:24:19:2a:
e4:10:d4:69:e1:a4:f4:6e:09:68:70:3f:9f:e1:3e:
91:75:46:f5:93:b1:e7:15:3f:75:cd:25:fa:61:cd:
5d:a5:ce:cf:a1:81:25:1b:73:44:e6:57:01:a0:26:
74:1b:ea:af:9b:ec:fe:a9:c1:21:72:4f:3d:56:4d:
68:4e:99:28:1d:a8:1a:5e:74:4b:11:81:70:a5:52:
cd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:85:5C:18:26:70:F5:BB:02:74:9C:38:C9:DE:D6:C3:4E:A1:48:F8
X509v3 Authority Key Identifier:
keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/08DCBB24DC8011F0AB4C816E3A6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
45.119.203.0/24
103.60.10.0/24
119.161.100.0/24
Signature Algorithm: sha256WithRSAEncryption
14:1e:5d:2c:b3:49:4c:3f:d8:21:b9:f6:43:d7:75:f0:52:33:
39:42:18:52:47:9e:9d:14:73:09:2a:c3:59:f9:91:58:d8:81:
28:7d:1a:d9:3d:4e:67:92:c6:1e:7c:dc:e1:36:d6:b8:f2:f1:
ae:62:37:91:93:bf:9d:2c:11:1f:e4:c0:69:68:03:45:29:8e:
55:4a:cc:79:42:9c:20:1e:0e:19:40:38:71:25:84:8e:36:be:
bb:8a:3f:79:b3:d4:46:a6:e2:d1:49:ae:86:ad:55:af:89:48:
9e:98:0e:b4:8b:bc:04:07:d8:de:2f:06:1b:02:8f:68:7f:17:
fd:22:52:6e:b0:ac:6b:3d:3e:3e:88:41:81:c5:13:6b:f2:a5:
2d:fa:ff:0a:eb:0d:ff:fd:2b:9e:5c:bd:ab:02:8f:2c:00:8e:
bd:8a:c3:21:10:76:1b:33:58:ce:a0:c1:54:8e:02:19:05:22:
3f:85:d9:13:aa:42:da:d4:88:a7:a2:8e:b4:4a:bd:37:8f:42:
9b:70:51:b8:6f:d4:36:70:7d:48:79:b6:b7:00:ef:45:ca:05:
ec:0e:d0:a6:81:7f:5c:4e:be:b8:dd:b1:6f:b5:89:d8:bf:2e:
05:d2:b8:b0:71:39:b1:5b:27:3d:a5:08:75:49:c5:66:a0:10:
a2:dd:f4:ba
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICE1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB
RkNDNTI4NTkwHhcNMjYwNTI2MTcyNTQ5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE1ZDc5ZC05Yzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArh71b4xxo6XPAwkVXrHb+rm+oJEu11NhIF/hwCxDrQqaNGYsgSo587moBe87
r41O1E5aZXT0QIT5AYpJiuDZ+EThXd1E27ICvxad6wqWMpXX5LRQ1wvU818DsIXb
WK+xxA811Fm9wj0x0WUJS8iPvm8NaNIsliJ0M9X6jhJw5S+/P1JbTtuMYzEhC/yn
RS/k3Tkgn26nFzs1b1Rc95RKgWvMGoJU3LqiJQBWUZg2gGgkGSrkENRp4aT0bglo
cD+f4T6RdUb1k7HnFT91zSX6Yc1dpc7PoYElG3NE5lcBoCZ0G+qvm+z+qcEhck89
Vk1oTpkoHagaXnRLEYFwpVLN6QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFM2FXBgm
cPW7AnScOMne1sNOoUj4MB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz
ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL
RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkZFNkEvMUQ2NDMyOEVEMzg3MTFFOEJENzA3NTVDQzRGOUFFMDIvMDhEQ0JCMjRE
QzgwMTFGMEFCNEM4MTZFM0E2RjU2QkMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQALXfLAwQAZzwKAwQAd6FkMA0GCSqGSIb3DQEBCwUAA4IBAQAUHl0s
s0lMP9ghufZD13XwUjM5QhhSR56dFHMJKsNZ+ZFY2IEofRrZPU5nksYefNzhNta4
8vGuYjeRk7+dLBEf5MBpaANFKY5VSsx5QpwgHg4ZQDhxJYSONr67ij95s9RGpuLR
Sa6GrVWviUiemA60i7wEB9jeLwYbAo9ofxf9IlJusKxrPT4+iEGBxRNr8qUt+v8K
6w3//SueXL2rAo8sAI69isMhEHYbM1jOoMFUjgIZBSI/hdkTqkLa1Iinoo60Sr03
j0KbcFG4b9Q2cH1Ieba3AO9FygXsDtCmgX9cTr643bFvtYnYvy4F0riwcTmxWyc9
pQh1ScVmoBCi3fS6
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:15:08 2026 by rpki-client