
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/23EE2B76F2F111ED91F08A4FC4F9AE02.roa
File: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (raw, json)
Hash identifier: PazBjpuTUYfOjYTbepeHU2eyo87WfnISzDamrpY/9jU=
Subject key identifier: D9:70:48:1B:B2:CC:D7:15:8D:B0:5E:C4:AA:2F:92:54:72:A1:B0:BF
Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
Certificate serial: 0249
Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/23EE2B76F2F111ED91F08A4FC4F9AE02.roa
Signing time: Fri 05 Jun 2026 03:32:14 +0000
ROA not before: Fri 05 Jun 2026 03:32:14 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 148968
IP address blocks: 103.254.231.0/24 maxlen: 24
2001:df2:6d40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl
rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:28:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 585 (0x249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
Validity
Not Before: Jun 5 03:32:14 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a22433e-1f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:3d:0a:41:cc:d5:f5:a5:74:b6:87:b9:6f:
d1:c7:60:e0:a9:59:2c:13:83:a9:cc:0c:bf:ed:4f:
30:d7:1f:65:f4:55:76:9c:1c:63:ee:79:42:ff:ea:
52:c1:8c:41:8d:d2:6c:af:57:a8:54:1d:eb:d8:8b:
c6:ff:56:aa:3a:90:57:52:f2:50:0a:62:0c:79:dc:
4a:df:b8:9a:7a:b5:8c:0c:ee:b8:7d:43:86:92:54:
c8:74:53:ae:49:fe:e4:f7:76:3f:06:fd:9c:28:47:
b0:db:bf:cf:cc:ad:7d:48:c9:70:18:46:2f:f1:8e:
7f:3e:e8:d6:a4:ff:f8:cb:78:48:0a:68:34:78:16:
56:00:2b:74:1c:da:8a:c7:0e:14:dd:fb:d3:30:56:
06:a7:55:8d:79:32:4e:01:eb:f1:53:b7:67:c6:b9:
cc:13:04:fb:24:c5:c3:f7:0b:6e:18:4b:e8:61:31:
74:04:d4:5b:30:48:a3:83:47:a7:d0:0b:15:f7:69:
16:2e:5d:b5:79:07:1e:ea:6b:6b:c6:46:ad:4b:de:
24:ad:ae:c0:bb:17:7c:40:21:38:99:48:bc:15:e0:
4e:df:94:bb:79:bb:c7:c7:44:ef:8d:1c:37:cd:c9:
18:05:49:06:00:d1:6c:6a:65:1c:64:fd:7b:98:1e:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:70:48:1B:B2:CC:D7:15:8D:B0:5E:C4:AA:2F:92:54:72:A1:B0:BF
X509v3 Authority Key Identifier:
keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/23EE2B76F2F111ED91F08A4FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.254.231.0/24
IPv6:
2001:df2:6d40::/48
Signature Algorithm: sha256WithRSAEncryption
06:55:85:05:61:3a:a2:b8:9b:a4:cc:20:64:73:38:36:14:ad:
de:7c:d3:02:74:db:7c:36:57:71:85:57:b8:16:19:83:67:ca:
57:61:57:df:bf:5b:6c:8f:9f:d1:3a:c3:30:ac:cb:19:43:19:
d5:93:23:96:26:62:87:dc:ac:76:dd:f5:8c:71:1c:15:ec:0d:
40:0b:54:77:4a:03:2d:ef:9f:9d:87:9e:b2:71:ae:84:d7:36:
b4:ec:c2:ed:d7:d0:cc:0b:15:4a:b0:64:b9:4a:bc:62:ba:95:
27:8a:29:3c:0e:7e:9b:d0:16:46:ce:1a:95:4c:b4:9d:a4:ae:
8b:ea:f7:8c:bc:a3:86:5a:e0:f1:23:81:d6:f9:c5:9b:21:3d:
e0:40:bc:66:bc:36:a7:97:bc:24:21:f3:2f:45:a7:39:31:55:
9d:a7:0e:5b:9b:09:da:15:ab:52:2f:0b:a9:dc:78:06:68:a8:
e3:05:c6:a2:e3:6d:30:3e:9e:6e:0b:31:85:44:49:64:67:60:
cf:dc:05:b6:a5:09:bb:69:8a:e6:ac:cf:dd:a8:ce:d3:6e:c7:
a3:b0:5b:5c:3d:5a:78:97:0b:21:48:0d:b7:68:54:6c:98:14:
70:6e:96:d2:5d:16:46:e0:ad:6f:96:b3:fa:6e:af:1c:a8:35:
2a:3e:fe:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:30:55 2026 by rpki-client