
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/469C2676D76111EB97EB721DC4F9AE02.roa
File: 469C2676D76111EB97EB721DC4F9AE02.roa (raw, json)
Hash identifier: KZJqMSXjpce/PYO9PZaFTw1AjKkd0pgektz4tGJ/sxo=
Subject key identifier: 3D:F6:86:61:E3:F5:CF:8B:CB:20:3D:7F:A3:EA:FB:8D:BA:E6:DB:2F
Certificate issuer: /CN=A91D008B/serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C
Certificate serial: 0652
Authority key identifier: C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/469C2676D76111EB97EB721DC4F9AE02.roa
Signing time: Wed 10 Jun 2026 23:27:32 +0000
ROA not before: Wed 10 Jun 2026 23:27:32 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 142407
IP address blocks: 103.168.8.0/24 maxlen: 24
103.168.9.0/24 maxlen: 24
2407:7ac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl
rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1618 (0x652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D008B, serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C
Validity
Not Before: Jun 10 23:27:32 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a29f2e3-8ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:ae:0d:7a:4c:d7:16:6c:40:47:4e:3a:08:
f6:b2:3f:d9:2e:0c:da:dc:dd:a7:7b:fa:b8:64:f9:
b8:18:40:f3:3d:45:90:35:00:11:f1:01:10:9c:af:
de:67:b0:3d:fe:21:db:bb:4b:b0:15:cf:51:3e:1a:
3d:e7:8e:10:56:70:2c:fc:ef:57:8b:e5:b2:61:5e:
20:d5:78:72:b3:3a:12:b0:92:f0:3d:be:0b:7c:be:
0c:92:a4:4c:22:09:8c:5d:14:ae:68:de:ae:95:15:
64:57:3e:64:99:73:f1:09:46:cf:fd:20:a0:8b:5b:
91:30:f7:a2:d8:fc:39:43:e7:a1:32:ec:69:b1:c7:
36:ad:0a:61:41:7d:c4:a0:13:71:fe:cb:f4:e3:5e:
03:66:f7:1b:b5:b1:3c:d1:91:59:df:ee:d5:04:fa:
2b:c4:20:f8:a9:ed:0a:20:cf:30:27:0a:00:16:f4:
25:38:cd:88:dc:6b:16:17:00:43:80:71:47:76:75:
9e:6a:76:a2:fa:a1:cf:f8:25:c1:cd:09:48:85:7e:
69:37:b0:4e:45:e6:d8:68:42:d7:34:69:4f:53:3d:
7b:bf:fd:4d:09:08:fb:00:74:56:25:80:d2:a4:68:
40:3d:b2:71:b4:89:b5:e2:19:c9:21:a4:6a:27:ca:
09:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F6:86:61:E3:F5:CF:8B:CB:20:3D:7F:A3:EA:FB:8D:BA:E6:DB:2F
X509v3 Authority Key Identifier:
keyid:C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/469C2676D76111EB97EB721DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.8.0/23
IPv6:
2407:7ac0::/32
Signature Algorithm: sha256WithRSAEncryption
39:14:78:d7:c3:db:70:68:12:38:a7:4a:69:75:c9:8b:48:f8:
cf:69:b8:46:69:6b:b2:8f:9f:ee:f5:67:34:c7:72:d6:de:76:
20:e9:73:2a:60:34:9c:d5:8d:61:9c:a7:ba:7d:07:5b:cd:a9:
53:16:6c:d8:ac:39:e4:bc:b0:cb:9b:df:64:d0:61:d7:a6:56:
35:8d:9a:d9:bd:d8:a6:53:03:10:4a:b0:85:10:d8:9a:1c:e6:
ee:a1:b2:8e:64:1c:3f:1d:8c:ce:76:42:1a:92:c1:99:ae:af:
66:db:9b:96:1b:f3:75:7c:03:86:9d:42:53:6e:fc:7b:7c:84:
c2:28:a0:30:a3:7b:43:66:53:35:70:e2:87:62:f1:a9:1c:8e:
b0:20:2f:5d:84:b9:4d:6f:e2:41:cd:ee:dc:4e:f3:89:21:01:
c2:3a:29:0c:ad:4f:a3:be:fd:c1:fe:90:24:12:d7:f2:70:d4:
a5:1a:bc:52:50:c4:b3:2b:2b:a6:86:e5:c9:b3:8e:64:f2:ee:
f8:44:0c:6d:3b:e6:c7:da:77:bd:b6:a9:01:14:ea:28:27:4c:
3c:91:29:bb:82:85:f4:96:09:4f:af:42:fa:be:60:d6:54:2e:
06:16:59:41:cd:ac:d0:21:6e:73:51:03:d9:77:f7:48:aa:e3:
bd:3e:01:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:31:37 2026 by rpki-client