
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/0CC86DF4FB5311F09CD98C1F476F56BC.roa
File: 0CC86DF4FB5311F09CD98C1F476F56BC.roa (raw, json)
Hash identifier: b8nFndVC5ELHm6DiQIfUcSpA0YNOVb75TThfR/hUaSA=
Subject key identifier: 3B:AB:4C:6C:DD:CD:47:9D:A9:FB:20:4E:0D:83:3E:B4:48:49:C2:14
Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Certificate serial: 0471
Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/0CC86DF4FB5311F09CD98C1F476F56BC.roa
Signing time: Fri 03 Apr 2026 00:32:58 +0000
ROA not before: Fri 03 Apr 2026 00:32:58 +0000
ROA not after: Sat 01 Aug 2026 00:00:00 +0000
asID: 59371
IP address blocks: 103.84.45.0/24 maxlen: 24
103.84.46.0/24 maxlen: 24
103.84.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:08:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1137 (0x471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Validity
Not Before: Apr 3 00:32:58 2026 GMT
Not After : Aug 1 00:00:00 2026 GMT
Subject: CN=69cf0aba-7656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:64:ab:09:3e:78:33:6c:7d:c9:3d:77:a7:
5e:d4:e9:3b:fe:a5:f6:86:06:6d:15:20:4d:33:eb:
c6:5e:4b:7e:42:eb:45:ac:aa:6b:6a:04:64:2e:fe:
46:e4:0f:ec:17:9e:80:0c:f4:f7:ad:2b:0c:5e:6e:
3b:de:57:c7:2c:b8:e1:34:ac:56:9c:40:a6:04:7d:
1e:1e:16:36:c6:5a:af:21:79:5f:ae:5f:e7:8c:ab:
bb:33:41:5a:86:10:03:d2:f3:a9:d4:00:e2:c7:e5:
e7:5d:07:c6:a4:c4:8f:22:b2:9b:22:cb:89:16:e9:
33:7e:7f:ab:f3:be:1f:2b:a2:3a:c2:aa:f4:a3:5a:
d2:b5:1a:ec:b9:7f:ce:be:f1:72:06:cb:fe:f3:ef:
7f:5d:09:15:f3:f1:8c:63:70:06:18:90:02:9d:6e:
fd:26:f0:89:d1:f5:55:f0:f7:e6:cb:12:0b:1d:21:
a5:8b:67:ba:69:fe:2d:52:16:1a:10:15:b0:c1:0d:
f2:35:b2:e6:46:a8:a6:7e:4c:c0:63:b2:a4:60:b5:
9a:f5:51:98:5a:c7:ba:fb:e8:de:4f:bd:de:8d:a3:
f7:82:a2:b8:f5:73:e8:d8:09:a1:85:55:b3:34:5d:
fe:14:29:2d:70:8d:2b:79:2a:53:e3:6a:9b:b3:3f:
3a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AB:4C:6C:DD:CD:47:9D:A9:FB:20:4E:0D:83:3E:B4:48:49:C2:14
X509v3 Authority Key Identifier:
keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/0CC86DF4FB5311F09CD98C1F476F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.84.45.0-103.84.47.255
Signature Algorithm: sha256WithRSAEncryption
03:50:39:12:d6:e7:27:aa:1b:7d:0a:3e:52:ed:30:68:c7:2c:
76:38:9f:06:00:a0:8a:4a:94:66:ec:e7:54:ef:38:9d:85:97:
ee:07:08:8e:11:de:cc:64:c0:61:cf:c8:c2:af:5c:89:57:c9:
3e:8e:48:17:2d:01:6f:86:dd:90:61:b4:d6:7e:aa:c6:11:4d:
51:5f:9e:32:1f:87:9a:79:86:e2:24:c1:31:41:16:f2:8e:e5:
e1:51:4d:8d:09:0a:d6:97:b8:15:46:98:f6:28:2f:e8:07:72:
d8:12:df:df:a6:3b:c3:29:aa:8d:3a:f3:db:d3:28:b5:fb:38:
ac:0b:af:ad:e1:f0:71:62:7c:3b:db:2b:a9:f7:c8:c8:11:11:
b2:49:75:96:4b:f9:db:45:90:c5:82:45:58:6d:72:c7:92:59:
f9:eb:0b:ff:16:87:a6:27:04:66:be:06:47:ec:07:00:c6:dd:
3b:17:b5:4d:2d:86:ca:3b:a6:cd:80:1f:f0:c7:98:a0:60:23:
b9:9b:96:3d:04:41:a8:5f:3a:b6:c6:7b:ff:c4:19:d1:cb:61:
87:29:31:cf:17:be:45:62:39:1a:6f:ea:9e:77:d3:de:b4:96:
cd:21:f5:44:2e:50:59:de:07:d4:00:5a:18:9b:a5:fe:46:7b:
fd:57:14:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:38:41 2026 by rpki-client