
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/8FADE73CA49B11EEB19E774BC4F9AE02.roa
File: 8FADE73CA49B11EEB19E774BC4F9AE02.roa (raw, json)
Hash identifier: cE48WGS9kboOii2J8VTr2sUZ9DzkZ2EoWEhl3gouzMU=
Subject key identifier: 98:40:5E:B4:19:91:45:81:EB:C8:6D:7C:4B:7B:BA:99:BC:48:C0:43
Certificate issuer: /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
Certificate serial: 08F9
Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/8FADE73CA49B11EEB19E774BC4F9AE02.roa
Signing time: Thu 04 Jun 2026 20:27:00 +0000
ROA not before: Thu 04 Jun 2026 20:27:00 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 9541
IP address blocks: 103.139.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl
rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:22:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2297 (0x8f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
Validity
Not Before: Jun 4 20:27:00 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a21df94-99b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:ea:1a:eb:3a:d8:84:81:8b:5f:59:13:7c:
2a:9d:59:d2:20:a0:4a:d1:2d:7e:50:9d:08:c8:05:
fb:17:e0:84:5d:29:97:5b:53:bc:93:9a:c5:d7:96:
63:83:21:ec:9f:29:52:77:e0:8a:3e:ed:34:0f:ed:
05:77:03:22:af:ea:d2:37:66:a3:52:07:36:98:2b:
f7:11:d8:c3:cc:38:e2:ee:50:0f:37:53:a9:06:73:
22:7b:7b:4e:15:1b:02:2e:ff:9f:1b:55:57:66:80:
4e:76:34:b2:83:e3:39:21:29:33:77:3e:08:53:d7:
c7:7a:e9:19:66:fe:ae:b8:54:e6:79:41:95:9c:57:
2e:c4:83:9d:98:20:ef:e6:ec:f9:88:e2:0d:74:9b:
94:23:00:db:04:3f:f4:1e:a0:c1:56:f1:76:ec:d8:
39:15:5c:b7:f7:fe:12:2c:c7:49:85:04:d7:f4:80:
f9:78:75:99:ef:91:5a:db:ab:2c:ca:b7:cf:ab:5f:
87:66:a2:f1:0c:c1:ce:42:ec:07:f3:db:3b:2b:27:
b5:6b:92:e9:49:84:f2:19:85:15:ea:17:3d:5e:ea:
44:a2:d1:76:3b:f5:66:97:f6:61:9e:87:08:40:db:
dd:d4:31:9f:29:90:f8:8a:c3:7f:f4:45:91:bc:aa:
b1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:40:5E:B4:19:91:45:81:EB:C8:6D:7C:4B:7B:BA:99:BC:48:C0:43
X509v3 Authority Key Identifier:
keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/8FADE73CA49B11EEB19E774BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.139.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:65:87:7a:59:67:87:83:dd:30:c3:f4:3d:88:e6:6c:5a:7b:
ec:8f:cc:a1:83:ae:83:be:63:a4:73:aa:0a:b1:1e:33:2a:93:
7a:57:fd:71:78:56:af:de:15:d2:5d:aa:1f:ac:17:84:db:21:
cd:29:92:3c:23:93:b8:c4:80:e1:03:21:70:9c:25:6f:3a:98:
76:38:df:59:8d:7f:cc:25:5f:6c:ff:9b:d1:5f:dd:7f:35:c3:
36:a4:6e:9c:23:f6:c3:b0:68:e1:83:b0:a2:8e:4e:82:23:1e:
87:86:04:70:b2:bd:a1:0e:25:de:68:95:16:a5:d4:0c:8e:89:
a6:6c:b3:e7:55:44:5f:24:81:46:1b:34:56:67:30:7c:b5:50:
40:00:96:bb:10:56:d2:51:bc:4b:d2:75:42:3c:8a:11:92:11:
b9:9b:29:6e:40:9e:6c:0b:ef:7a:62:01:de:0e:ee:dd:1d:9e:
ea:1b:1e:79:43:a3:e0:98:bb:47:19:46:6b:bd:af:f1:bd:1b:
21:47:64:62:6c:01:e3:ee:d5:49:5e:55:89:2c:5b:b3:fa:b4:
dd:ac:1d:03:91:31:7d:40:31:cb:0e:5b:1f:4b:f7:1b:76:aa:
e8:ae:ca:65:34:83:a7:79:74:51:fe:26:20:36:9e:77:da:8f:
eb:57:24:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:49 2026 by rpki-client