
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/97FE22F2DA4B11F0BA2C614F91D3641D.roa
File: 97FE22F2DA4B11F0BA2C614F91D3641D.roa (raw, json)
Hash identifier: wevBG0wx/RR5cJLa7ldnPoK/rlGc4xXyBB/69btBp6o=
Subject key identifier: 09:33:F1:53:5C:9C:E3:BF:78:53:13:62:A7:7C:55:1E:76:58:01:74
Certificate issuer: /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Certificate serial: 0344
Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/97FE22F2DA4B11F0BA2C614F91D3641D.roa
Signing time: Thu 11 Jun 2026 08:03:19 +0000
ROA not before: Thu 11 Jun 2026 08:03:19 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 138926
IP address blocks: 103.111.39.0/24 maxlen: 24
2402:3b60:2380::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 836 (0x344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C05AD, serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Validity
Not Before: Jun 11 08:03:19 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a2a6bc7-71ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f6:0b:e4:1e:bb:4b:6b:99:15:e3:05:c7:df:
6c:9f:fd:24:6a:07:62:ec:a2:3d:26:2b:72:1b:6a:
b3:e5:58:0f:92:cf:33:8a:23:17:90:71:35:e1:36:
6d:24:1e:11:c2:a2:aa:17:36:45:21:cd:aa:30:91:
4e:0f:0a:b4:14:1f:91:da:a0:40:94:c3:79:3b:30:
7b:3b:47:83:17:88:6e:00:1d:23:fd:d7:77:41:24:
73:5e:cc:d2:ad:8d:9d:21:6a:9a:cd:ec:06:fb:07:
e7:be:33:23:09:77:2a:eb:bc:89:2d:a9:13:5e:bf:
06:83:9f:72:bf:26:3f:74:0a:4d:17:8e:21:cb:bf:
bb:cc:5f:72:3a:ee:b7:3d:5e:78:47:c9:51:20:f9:
7e:12:fa:10:74:b8:d5:0b:b5:90:59:f7:9a:86:36:
54:97:50:3c:fc:a4:37:d6:63:79:de:82:2b:e0:91:
52:51:12:23:26:18:c9:b6:06:62:60:36:12:4a:1b:
94:69:51:6d:9c:83:4a:3e:59:0c:24:81:58:72:ad:
c8:83:cf:6a:e4:fe:a0:30:95:75:3a:f2:07:d1:2f:
b5:dd:b4:8e:d1:ce:a3:b6:af:77:a3:b5:aa:a3:d4:
dd:27:10:d0:bf:d1:48:e4:61:3a:bd:97:08:b6:07:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:33:F1:53:5C:9C:E3:BF:78:53:13:62:A7:7C:55:1E:76:58:01:74
X509v3 Authority Key Identifier:
keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/97FE22F2DA4B11F0BA2C614F91D3641D.roa
sbgp-ipAddrBlock: critical
IPv4:
103.111.39.0/24
IPv6:
2402:3b60:2380::/48
Signature Algorithm: sha256WithRSAEncryption
31:95:96:bd:e0:9a:36:e8:8b:dd:74:f8:fb:ee:34:e6:e0:81:
53:0a:e0:67:27:9c:66:a1:7e:6c:9a:b6:13:1e:7a:7e:4f:b6:
68:1a:b3:e8:ec:7f:2a:d9:d5:f4:fb:a3:c4:e9:13:27:37:6b:
3d:ed:da:79:22:0c:36:5c:88:ad:86:14:a3:2a:4c:b6:ae:99:
66:e2:b8:4b:15:57:ff:80:df:03:28:f2:f1:93:ea:af:9c:17:
0b:f3:76:2a:ac:c3:ce:c9:11:1b:2d:45:6f:a7:88:7a:87:7d:
a3:dd:54:e4:db:ac:38:14:52:b6:8e:eb:da:2c:a1:c9:c9:3f:
68:0b:42:ab:34:fe:53:dd:b4:50:a2:3f:37:00:6d:5c:ac:84:
9c:e8:4e:33:2d:82:cc:16:19:2f:bf:67:07:aa:db:1c:77:97:
22:39:60:e8:ad:39:0c:9a:af:e4:72:31:34:fb:a7:25:56:50:
48:98:8a:99:52:fa:d8:f3:bd:46:59:76:a5:de:25:6d:c1:49:
6e:46:90:6f:e4:25:ff:fd:13:bf:74:d4:4a:ab:e7:7e:80:fc:
d2:48:4a:32:f3:9c:aa:4f:2d:38:5d:cc:15:d9:77:de:3e:a5:
bf:7a:0a:8d:9f:c1:f0:d6:7b:0e:81:73:68:c2:d9:1a:df:36:
ad:1c:de:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:16:46 2026 by rpki-client