
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/ABA6DCF0030F11EFB12D8A18C4F9AE02.roa
File: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (raw, json)
Hash identifier: /BkRK1pd7XeoJPnuYhfXRxi+ZjaehytBLdeWASZ6S3g=
Subject key identifier: F6:5E:B3:96:BC:42:90:20:1F:7A:C5:41:BC:02:AD:A6:7B:94:2C:00
Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44
Certificate serial: 020F
Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/ABA6DCF0030F11EFB12D8A18C4F9AE02.roa
Signing time: Fri 05 Jun 2026 03:35:44 +0000
ROA not before: Fri 05 Jun 2026 03:35:44 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 151350
IP address blocks: 103.209.74.0/23 maxlen: 24
2401:2a0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl
rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:11:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44
Validity
Not Before: Jun 5 03:35:44 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a224410-f676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:23:15:95:61:9b:fa:84:da:c2:3c:aa:f3:78:
eb:11:c8:44:1e:e3:1a:8d:af:cc:0f:a8:87:e3:bf:
f5:f0:37:22:a8:20:0b:0b:83:a1:5c:9b:d9:a7:a2:
4a:c5:a3:3f:5a:2f:6f:05:68:aa:01:00:be:5b:ae:
a6:fc:cf:d3:29:fb:28:90:35:20:c7:99:07:1b:45:
37:f9:f7:51:45:6a:31:41:0c:d3:e4:6f:16:d6:31:
3d:33:0a:45:ad:b9:a9:af:66:dc:db:92:13:d5:04:
29:68:9b:c0:90:d7:24:5c:ef:5f:b6:a9:a4:3d:33:
a9:a5:67:6e:46:84:af:d7:a8:8a:a5:50:da:60:4f:
85:b5:5c:eb:bb:9f:55:6e:cf:e7:ce:45:f4:3d:70:
df:a3:3c:53:73:fe:b9:64:52:74:88:45:1a:97:7e:
76:4b:bd:8c:ba:2f:28:f7:df:d2:2a:d1:9e:ef:0e:
88:94:e9:03:d0:44:e1:ed:9d:01:d0:23:e3:40:a0:
2a:33:79:31:83:8c:f4:cb:f7:fe:77:1d:4c:eb:79:
cb:ba:da:99:5b:66:14:03:fd:c7:fc:4e:fb:d8:07:
9a:8c:94:e5:39:9c:ae:8e:7a:56:a4:14:cb:6f:3b:
2a:3f:fc:9f:a3:55:cf:6c:64:ca:42:c3:ac:75:fe:
a8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5E:B3:96:BC:42:90:20:1F:7A:C5:41:BC:02:AD:A6:7B:94:2C:00
X509v3 Authority Key Identifier:
keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/ABA6DCF0030F11EFB12D8A18C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.209.74.0/23
IPv6:
2401:2a0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
b4:42:78:7a:5c:bc:60:e7:5c:c7:20:84:1f:93:a2:e2:f1:3a:
e6:2a:7b:55:31:d9:90:84:53:bd:87:18:c3:fa:f2:1a:41:e1:
af:97:b4:28:31:ab:da:51:8c:51:dd:a1:01:8a:f1:4c:53:2c:
b1:15:85:00:78:7c:c9:d8:cf:fd:65:b4:e0:ad:0a:d4:ef:02:
a6:05:7e:74:2f:77:78:06:bf:73:58:f8:6a:91:39:c0:8e:fc:
a0:a3:35:08:6c:4f:1f:a0:34:a8:6e:6b:0e:75:46:c1:f1:1e:
bc:f5:5c:72:e6:f5:c0:62:62:7b:a4:0d:cb:f7:2e:57:68:00:
ad:93:97:b3:42:16:71:60:df:98:ea:7a:6c:73:1d:e3:55:26:
bf:93:d5:23:3a:71:7f:a8:f1:e3:51:34:68:83:86:89:da:a1:
6d:c5:a0:29:ef:b4:1c:ac:3f:2a:b8:e5:ed:10:00:1e:ed:40:
f7:37:db:8a:6d:11:84:b0:50:fb:26:a0:aa:5f:29:24:97:88:
62:fe:b7:5b:4d:66:1c:fc:14:5e:40:95:d0:dc:a0:da:d0:a1:
87:67:8c:02:1d:29:6b:b2:b4:d2:88:3b:9a:bd:b6:4a:bb:3f:
2c:d5:f7:f5:f5:c3:f5:cc:3e:69:0f:42:51:a9:75:7d:5d:c7:
66:0e:b9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:42:17 2026 by rpki-client