
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/E983DB547CB711F0AC8F9D6EC4F9AE02.roa
File: E983DB547CB711F0AC8F9D6EC4F9AE02.roa (raw, json)
Hash identifier: VRMri+JmyP84ggb4uS0Bz/xwX6nfPL1abCeEWonYac4=
Subject key identifier: AF:BA:D0:8C:A5:8E:99:C1:0C:F7:E8:C4:5A:82:5E:23:AF:1B:C2:51
Certificate issuer: /CN=A91C7409/serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
Certificate serial: 98
Authority key identifier: 52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/E983DB547CB711F0AC8F9D6EC4F9AE02.roa
Signing time: Fri 05 Jun 2026 08:39:28 +0000
ROA not before: Fri 05 Jun 2026 08:39:28 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 58634
IP address blocks: 103.2.192.0/24 maxlen: 24
103.2.193.0/24 maxlen: 24
103.2.194.0/24 maxlen: 24
103.2.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl
rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 09:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7409, serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
Validity
Not Before: Jun 5 08:39:28 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a228b40-d985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ba:7c:f4:09:17:32:7f:a5:1c:0b:f7:57:ed:
a3:58:e9:6e:80:af:a6:8a:5d:8d:85:a3:bb:19:95:
77:de:a1:e6:a9:60:4b:b6:60:54:ce:ae:16:9a:af:
7e:28:53:bc:8e:7c:83:1a:9f:20:3b:51:bf:f3:9a:
e0:e9:a6:e1:19:62:d2:45:0e:11:7b:29:df:fc:5b:
d9:99:a8:b5:be:ac:19:09:20:63:7d:2b:fe:ad:0e:
ea:4a:da:3b:72:08:c2:2e:4b:66:48:b7:de:f3:31:
4e:7b:5e:14:0b:2c:fd:52:27:37:fe:65:56:12:63:
e1:79:81:4c:5a:55:e1:0b:87:c1:5d:ef:9e:31:a8:
47:ea:61:d2:3a:a1:b2:1e:fd:b5:3b:6b:a0:a4:8f:
eb:43:0e:26:40:75:5a:56:4c:53:26:08:42:3d:bc:
23:a0:15:30:4e:ff:ab:26:7b:ea:86:9a:ff:65:24:
94:13:82:5a:7b:ef:64:72:c1:1f:6c:13:f6:1c:80:
b0:f3:c4:47:43:85:8c:5a:51:37:80:ec:74:ba:fb:
74:3a:9d:c5:de:c5:06:29:2b:8c:ec:ab:c2:79:1f:
bf:d0:29:a0:de:8f:a9:bc:6b:da:ff:e5:37:35:df:
0a:f9:3e:be:9c:e9:99:cf:25:3b:eb:50:da:3b:16:
b1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BA:D0:8C:A5:8E:99:C1:0C:F7:E8:C4:5A:82:5E:23:AF:1B:C2:51
X509v3 Authority Key Identifier:
keyid:52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/E983DB547CB711F0AC8F9D6EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.2.192.0/22
Signature Algorithm: sha256WithRSAEncryption
08:d6:90:33:01:48:96:08:e1:06:d5:72:f5:e0:86:7d:de:62:
bd:70:df:49:57:8b:ba:da:3c:a7:84:ed:59:e0:03:cc:a3:51:
12:9d:ed:82:8d:70:ac:54:92:8a:da:c8:4a:d9:9d:93:f0:02:
43:5e:23:ad:ad:7f:86:25:f4:fb:8d:31:0b:62:25:8f:91:5a:
0f:71:2f:28:45:e5:52:b4:6a:f2:a2:f4:65:98:2d:96:8b:1a:
d6:90:76:16:2e:f2:79:44:de:4a:9f:46:f4:5d:24:9a:7f:ce:
1d:e5:33:ea:36:6e:bd:ee:c1:94:56:fb:af:18:5b:48:f8:11:
07:14:32:b2:37:e8:ad:31:0f:d4:bf:24:87:dc:26:c6:0d:11:
29:a3:ce:11:e2:2b:54:5b:25:db:95:74:dc:8d:38:1e:b6:b5:
1a:aa:d7:53:fe:45:16:4d:69:2a:ec:ae:a6:ea:4d:01:6d:bd:
29:fe:c5:3e:46:37:8a:86:0f:31:7a:51:b0:69:cb:0f:a8:21:
84:dc:cd:78:a7:ad:a7:0d:b9:5b:27:da:c5:f0:51:fd:8c:72:
ac:28:8d:79:44:ad:00:d6:ed:b1:12:02:e9:d3:1d:31:74:c5:
ec:26:f5:77:f3:9b:9a:26:62:29:aa:6b:2b:6b:f7:72:33:e6:
85:e7:d0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:28:14 2026 by rpki-client