
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/DF72CB82640811F1A119CBC19847A888.roa
File: DF72CB82640811F1A119CBC19847A888.roa (raw, json)
Hash identifier: cEvyr/Gl0yrys7VxpYexlrU+a3/SL1hP/5swCnKr6iM=
Subject key identifier: 23:EA:3F:16:6F:73:60:CF:E4:1F:1C:05:FF:E4:41:5E:1A:62:31:37
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 0A37
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/DF72CB82640811F1A119CBC19847A888.roa
Signing time: Tue 09 Jun 2026 13:41:10 +0000
ROA not before: Tue 09 Jun 2026 13:41:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 103.112.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2615 (0xa37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: Jun 9 13:41:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a2817f6-4822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:f2:b3:27:7f:03:9f:e2:04:df:1d:64:b1:
69:a2:43:ca:9a:06:f0:51:ba:05:77:e6:9e:33:15:
70:4c:05:be:7d:f5:d8:2d:17:65:04:4f:b4:0a:65:
4a:c6:73:b0:26:91:37:8d:dc:44:2c:29:d1:5e:f2:
e6:6d:20:f3:7a:79:39:b7:74:eb:a0:92:16:fe:e9:
92:48:24:f3:9e:5d:d4:39:2b:30:08:c6:20:f0:82:
53:54:a9:ba:1c:42:ef:98:b2:49:da:20:15:19:3f:
8d:00:4f:c6:c4:ee:a3:8b:40:bd:38:6c:c0:31:a6:
33:bd:42:c1:32:fe:62:11:fd:1e:e0:9b:e8:2e:9d:
66:0d:25:b4:d0:ca:ba:25:79:2f:a2:54:bd:0b:2f:
f7:75:20:7e:9a:ca:9e:9d:b0:04:84:ed:e9:91:92:
81:66:e7:b2:40:9a:1f:fe:38:c6:4a:bb:b9:38:99:
4c:4c:d2:db:d6:15:58:7c:fc:0a:e4:a8:80:e2:68:
e1:a8:08:14:e7:68:f1:a3:27:28:22:27:9f:7d:53:
de:ae:52:63:87:bb:33:e7:6f:94:91:b6:5e:4e:c0:
14:f9:a2:e3:41:a2:1e:bf:1f:3d:81:4b:9e:90:20:
d8:47:10:39:c9:ce:75:5a:99:3f:23:e8:27:37:15:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EA:3F:16:6F:73:60:CF:E4:1F:1C:05:FF:E4:41:5E:1A:62:31:37
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/DF72CB82640811F1A119CBC19847A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.112.3.0/24
Signature Algorithm: sha256WithRSAEncryption
93:77:17:7c:f0:46:66:d0:56:3f:0b:a8:7b:47:e8:ee:d1:8a:
f9:94:64:80:2d:72:73:82:45:32:3c:99:f5:75:25:47:ff:62:
3c:5d:3b:5b:a7:1b:de:23:71:02:e4:a3:1a:02:ad:09:b3:6f:
b3:79:ac:78:62:18:55:ee:10:ed:21:08:9a:cf:47:c4:e6:83:
93:77:2f:a5:b4:53:b7:cc:3e:ad:ce:d2:2c:1b:67:b2:47:db:
f1:d1:53:c7:78:bf:8c:13:c0:35:4f:a6:34:85:f1:8a:63:1c:
2f:a1:cf:d4:27:9f:aa:4f:54:c6:60:4c:2f:0b:43:f8:13:4a:
1d:9f:c2:cf:b3:2a:07:2d:95:27:fd:86:d2:44:fe:06:b7:a7:
b3:59:8a:00:ec:61:a4:3c:53:7e:6e:f6:64:43:60:ca:df:fc:
58:36:21:44:c7:cd:d6:df:68:d3:8d:c9:01:85:45:00:57:b3:
ac:57:ae:2a:96:bb:96:9a:46:17:e0:01:c0:8f:65:37:c0:a7:
be:6e:51:13:3e:9f:c5:6e:bb:07:e0:b8:29:23:8f:af:e6:d5:
f9:5b:de:58:26:4e:04:c7:78:e6:0a:c9:45:10:ed:4c:05:52:
0f:7a:ff:a1:c7:96:39:d8:03:09:67:1a:4e:73:ab:5c:ed:39:
f9:fb:c2:3e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzhGMjcxMTAvBgNVBAUTKEQxQTM2Q0Q4RUQyMzU1MDgyNzYxQTNEQjEzRUREMzBE
RkRBMkNGRDAwHhcNMjYwNjA5MTM0MTEwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTI4MTdmNi00ODIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs1fysyd/A5/iBN8dZLFpokPKmgbwUboFd+aeMxVwTAW+ffXYLRdlBE+0CmVK
xnOwJpE3jdxELCnRXvLmbSDzenk5t3TroJIW/umSSCTznl3UOSswCMYg8IJTVKm6
HELvmLJJ2iAVGT+NAE/GxO6ji0C9OGzAMaYzvULBMv5iEf0e4JvoLp1mDSW00Mq6
JXkvolS9Cy/3dSB+msqenbAEhO3pkZKBZueyQJof/jjGSru5OJlMTNLb1hVYfPwK
5KiA4mjhqAgU52jxoycoIieffVPerlJjh7sz52+UkbZeTsAU+aLjQaIevx89gUue
kCDYRxA5yc51Wpk/I+gnNxUWbwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCPqPxZv
c2DP5B8cBf/kQV4aYjE3MB8GA1UdIwQYMBaAFNGjbNjtI1UIJ2Gj2xPt0w39os/Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEYyNy83RjUyMjlBOEIw
OTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZRZ25ZYVBiRS0zVERmMml6
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBhTnMyTzBqVlFnbllhUGJFLTNURGYyaXo5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzhGMjcvN0Y1MjI5QThCMDkyMTFFQUI1REJFQzU4QzRGOUFFMDIvREY3MkNCODI2
NDA4MTFGMUExMTlDQkMxOTg0N0E4ODgucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ3ADMA0GCSqGSIb3DQEBCwUAA4IBAQCTdxd88EZm0FY/C6h7R+ju
0Yr5lGSALXJzgkUyPJn1dSVH/2I8XTtbpxveI3EC5KMaAq0Js2+zeax4YhhV7hDt
IQiaz0fE5oOTdy+ltFO3zD6tztIsG2eyR9vx0VPHeL+ME8A1T6Y0hfGKYxwvoc/U
J5+qT1TGYEwvC0P4E0odn8LPsyoHLZUn/YbSRP4Gt6ezWYoA7GGkPFN+bvZkQ2DK
3/xYNiFEx83W32jTjckBhUUAV7OsV64qlruWmkYX4AHAj2U3wKe+blETPp/FbrsH
4LgpI4+v5tX5W95YJk4Ex3jmCslFEO1MBVIPev+hx5Y52AMJZxpOc6tc7Tn5+8I+
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:29 2026 by rpki-client