
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/F77C1438964111EDAAB8E74AC4F9AE02.roa
File: F77C1438964111EDAAB8E74AC4F9AE02.roa (raw, json)
Hash identifier: iNoqSRT8zGT4sQQ17Q3E6C4knP5LZOO3EPDDr7aFmYo=
Subject key identifier: D9:60:1B:16:20:9E:C9:0C:6B:9B:5E:39:7C:D1:C3:D1:84:74:01:0A
Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196
Certificate serial: 0282
Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/F77C1438964111EDAAB8E74AC4F9AE02.roa
Signing time: Sun 31 May 2026 02:32:31 +0000
ROA not before: Sun 31 May 2026 02:32:31 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 149777
IP address blocks: 103.186.50.0/23 maxlen: 23
103.186.50.0/24 maxlen: 24
103.186.51.0/24 maxlen: 24
2400:6e20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl
rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196
Validity
Not Before: May 31 02:32:31 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a1b9dbf-d336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:64:9d:6f:d2:c1:d2:d8:a8:cb:af:01:a1:
39:f4:bf:56:57:93:01:51:c8:09:24:01:0c:94:f0:
07:ed:9e:a2:2a:22:0a:ad:2e:4d:a2:3e:b0:a8:06:
d3:5f:f6:e6:d3:41:16:22:69:ea:9e:2b:ad:f0:f4:
0c:f7:e9:9f:01:93:a6:6f:95:77:f1:f3:3c:8e:de:
f5:f5:e6:12:12:3e:eb:2a:d7:96:38:5a:b9:ba:c9:
ca:f5:56:51:49:04:15:e2:ef:fd:ad:e8:58:97:2a:
cb:45:30:27:83:7e:7e:96:17:0f:d3:f7:cf:9b:7c:
c2:7e:b7:d5:62:38:d2:89:17:77:9d:04:cc:dc:5e:
af:4c:4b:68:4c:3b:54:8f:15:30:a6:67:30:9c:87:
03:f6:8b:9e:74:22:e1:7c:98:e2:21:6c:41:87:bc:
d1:4d:01:0e:e9:ee:cc:1f:1e:67:60:98:a9:e7:e2:
cf:06:74:e3:c7:88:99:a8:8a:3b:62:b5:14:25:4e:
14:5b:ce:6b:56:c4:f9:15:2d:05:b3:35:04:2e:7f:
f6:d7:e1:36:56:12:3f:c0:03:b9:d5:8a:45:9e:9f:
58:cd:03:61:31:d0:f6:26:8f:bb:68:e1:3d:90:c9:
3f:45:44:a3:4d:15:76:b7:d9:2b:62:21:cb:a2:e1:
35:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:60:1B:16:20:9E:C9:0C:6B:9B:5E:39:7C:D1:C3:D1:84:74:01:0A
X509v3 Authority Key Identifier:
keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/F77C1438964111EDAAB8E74AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.50.0/23
IPv6:
2400:6e20::/32
Signature Algorithm: sha256WithRSAEncryption
17:b5:d2:60:f5:4d:57:da:55:dc:60:14:28:5d:05:3f:a4:0b:
8b:fe:02:3b:92:59:e2:97:df:e4:7f:eb:0f:66:46:83:58:9c:
ce:2f:43:31:e7:3d:d1:f3:19:bb:f6:15:dd:15:5d:11:8e:03:
59:63:2d:63:2e:39:71:67:55:14:e4:94:72:33:a0:2d:12:8a:
c2:d3:43:84:8b:ae:28:ce:32:6c:5d:9c:58:60:37:a4:67:74:
d6:63:75:b3:bf:80:de:20:cd:31:f1:f2:65:cf:8b:d1:81:06:
d3:03:8d:9d:c7:e2:33:71:c7:74:d1:ac:4c:fe:93:9a:fe:93:
85:6f:96:dc:a9:2a:a6:aa:11:09:d6:4b:fd:2a:f5:98:b7:29:
82:a0:57:ab:83:0c:bf:79:18:09:fb:c2:67:ff:1f:23:bd:93:
47:6c:29:f3:1a:08:f6:2c:db:71:cf:3c:57:1e:47:bb:22:99:
74:91:d9:42:68:89:a6:10:e0:85:bd:d1:73:7e:90:97:0f:82:
bd:14:94:49:79:0a:2c:01:5b:00:68:0b:8d:12:91:2e:d1:d9:
6b:b4:6e:f1:e7:75:06:68:a1:ff:b3:85:f8:f4:44:ab:3f:40:
48:43:ed:44:c8:63:09:07:5c:bd:e8:0d:ac:fd:4d:20:c1:c7:
a7:bf:76:84
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG
ODRCNDExOTYwHhcNMjYwNTMxMDIzMjMxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFiOWRiZi1kMzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqgJknW/SwdLYqMuvAaE59L9WV5MBUcgJJAEMlPAH7Z6iKiIKrS5Noj6wqAbT
X/bm00EWImnqniut8PQM9+mfAZOmb5V38fM8jt719eYSEj7rKteWOFq5usnK9VZR
SQQV4u/9rehYlyrLRTAng35+lhcP0/fPm3zCfrfVYjjSiRd3nQTM3F6vTEtoTDtU
jxUwpmcwnIcD9ouedCLhfJjiIWxBh7zRTQEO6e7MHx5nYJip5+LPBnTjx4iZqIo7
YrUUJU4UW85rVsT5FS0FszUELn/21+E2VhI/wAO51YpFnp9YzQNhMdD2Jo+7aOE9
kMk/RUSjTRV2t9krYiHLouE13QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFNlgGxYg
nskMa5teOXzRw9GEdAEKMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2
M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF
WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0NDREQvRjNCQkU3NkU5NjNEMTFFREJFM0ZEMDFBQzRGOUFFMDIvRjc3QzE0Mzg5
NjQxMTFFREFBQjhFNzRBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ7oyMA0EAgACMAcDBQAkAG4gMA0GCSqGSIb3DQEBCwUAA4IBAQAX
tdJg9U1X2lXcYBQoXQU/pAuL/gI7klnil9/kf+sPZkaDWJzOL0Mx5z3R8xm79hXd
FV0RjgNZYy1jLjlxZ1UU5JRyM6AtEorC00OEi64ozjJsXZxYYDekZ3TWY3Wzv4De
IM0x8fJlz4vRgQbTA42dx+Izccd00axM/pOa/pOFb5bcqSqmqhEJ1kv9KvWYtymC
oFergwy/eRgJ+8Jn/x8jvZNHbCnzGgj2LNtxzzxXHke7Ipl0kdlCaImmEOCFvdFz
fpCXD4K9FJRJeQosAVsAaAuNEpEu0dlrtG7x53UGaKH/s4X49ESrP0BIQ+1EyGMJ
B1y96A2s/U0gwcenv3aE
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:27:25 2026 by rpki-client