
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/ED388A1840BB11E9A6718844C4F9AE02.roa
File: ED388A1840BB11E9A6718844C4F9AE02.roa (raw, json)
Hash identifier: 7EPo/flJodzTo6ZQPpsGfoF7ns5UVMsBGxpdCAuapx8=
Subject key identifier: AE:25:CF:6F:F9:33:50:EF:5B:F2:55:A9:48:B3:92:45:C9:76:72:68
Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Certificate serial: 1355
Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/ED388A1840BB11E9A6718844C4F9AE02.roa
Signing time: Tue 26 May 2026 17:25:45 +0000
ROA not before: Tue 26 May 2026 17:25:45 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 134451
IP address blocks: 103.60.9.0/24 maxlen: 24
2406:f400:120::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4949 (0x1355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Validity
Not Before: May 26 17:25:45 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a15d799-eb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:82:69:6b:8d:63:60:d6:1d:1f:89:fc:9f:
2b:82:7c:1a:0a:04:22:d1:12:54:51:24:a2:13:bb:
47:f6:e5:3f:5a:4b:d4:48:f4:12:54:fe:75:20:b0:
91:a1:f3:20:50:54:51:4c:6e:a3:c9:a0:59:82:2d:
03:0d:d9:94:e8:d0:49:0b:fd:b9:bb:a8:8a:65:c7:
53:5e:d3:b4:fc:a4:46:5e:ca:17:dd:be:42:da:81:
b2:57:ae:a5:3f:cf:9e:ee:8e:d0:cc:30:c6:1b:51:
88:d0:ce:60:7b:4d:f5:7c:fb:c4:58:05:07:df:72:
ae:7e:47:08:8b:62:78:67:ac:a8:0e:2f:ce:81:7f:
50:62:a2:1d:e0:80:d3:64:dc:c2:92:65:b7:2f:72:
00:4d:3b:4a:a9:9c:dc:17:76:3c:1a:d3:85:e3:32:
52:8f:6e:4a:f1:08:45:f4:9c:26:15:1f:14:b7:fc:
62:64:02:13:7d:33:a0:e8:ed:d7:6d:82:b0:03:48:
b1:10:c3:ea:e7:5a:58:b7:f7:49:fd:92:a9:4e:04:
92:ef:75:c9:af:49:9a:56:25:ef:da:a5:97:74:c2:
53:7f:bb:a2:c8:ce:4d:00:35:03:05:a2:5b:ad:33:
8d:61:bf:5f:ee:c0:25:19:bb:d5:9b:10:b8:5d:d5:
01:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:25:CF:6F:F9:33:50:EF:5B:F2:55:A9:48:B3:92:45:C9:76:72:68
X509v3 Authority Key Identifier:
keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/ED388A1840BB11E9A6718844C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.60.9.0/24
IPv6:
2406:f400:120::/44
Signature Algorithm: sha256WithRSAEncryption
0e:fd:d1:99:00:33:3d:98:a1:0f:3a:c2:2e:8f:27:2b:72:2c:
7f:ff:8d:c6:51:84:c1:83:16:13:e8:d1:c1:e7:29:b3:d0:a1:
73:de:12:08:4e:32:80:c3:49:34:37:61:44:fd:3c:86:40:3e:
69:95:4f:93:e7:1d:e1:c8:f1:05:20:d5:30:52:60:90:c9:26:
ca:75:d0:72:39:fb:42:48:db:5e:07:25:03:d6:c5:8e:cc:2a:
f3:28:95:78:07:8b:46:59:d6:2f:27:57:a1:1f:19:ee:48:2e:
7c:ea:8b:0e:ad:ce:7c:49:ab:be:71:51:0b:ea:64:dc:3b:5a:
df:73:55:c5:bf:26:b3:7c:77:ce:52:fe:5b:eb:14:81:01:d8:
d1:fb:3c:c9:40:b4:12:32:41:be:66:1f:6f:e3:42:26:60:d3:
3a:71:91:8d:33:25:c4:ad:2a:c3:fb:a4:d8:26:94:33:44:15:
4e:62:7f:3b:bf:62:b5:e9:51:49:8c:10:0c:0e:4e:b8:49:59:
15:97:58:22:9b:9c:ce:9d:e9:50:29:ea:72:ca:53:56:03:d5:
5d:3a:3f:a4:b8:e8:5d:ca:ed:17:23:56:ff:03:56:12:80:08:
a2:37:20:e0:12:b6:a4:0f:db:c4:87:4a:30:92:6f:dc:9a:e7:
89:42:02:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:08:43 2026 by rpki-client