
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/2E6E6386D21E11F0B5C0A977C4F9AE02.roa
File: 2E6E6386D21E11F0B5C0A977C4F9AE02.roa (raw, json)
Hash identifier: nTtKzX6nzx2xavwKMXRS2HOpDCquUtryYE0DdxLYbWk=
Subject key identifier: 74:92:C5:AF:07:E0:B5:E3:74:31:65:8F:5C:67:D6:87:89:38:0D:22
Certificate issuer: /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Certificate serial: 1086
Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/2E6E6386D21E11F0B5C0A977C4F9AE02.roa
Signing time: Thu 04 Jun 2026 18:20:58 +0000
ROA not before: Thu 04 Jun 2026 18:20:58 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 133752
IP address blocks: 103.138.32.0/24 maxlen: 24
2404:bb40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4230 (0x1086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Validity
Not Before: Jun 4 18:20:58 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a21c20a-bc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:c0:e6:8e:96:81:5a:68:92:e8:1e:16:6f:
e5:49:6e:46:ab:94:b5:9c:c3:95:3b:af:fb:f5:89:
fe:37:c1:7f:46:21:81:f2:77:33:f9:13:66:93:49:
57:8b:f1:bc:3d:f5:93:29:4c:89:a0:a9:26:2d:50:
70:94:b5:e5:16:59:aa:7f:50:de:3b:23:09:22:14:
08:16:08:50:7f:cf:0a:3f:17:3b:0b:17:e0:b8:7b:
3e:11:47:db:37:8f:07:bf:48:e0:ff:0f:d0:97:04:
59:69:29:10:9e:e6:8f:f8:2e:a2:1f:f5:6a:bf:29:
14:e2:63:09:cf:b1:a6:e5:dd:ba:05:cb:7e:29:33:
47:c5:ca:de:27:47:7e:d3:1f:dd:a0:12:cb:12:0a:
a2:28:8d:22:fa:c5:b4:0f:e1:27:e4:a9:c2:11:4e:
b3:1f:a1:c1:4b:6f:cd:91:2f:99:d2:c7:d8:f3:d1:
e4:4c:e5:92:91:dd:cb:79:37:fb:77:24:c5:e2:37:
90:3f:9b:83:5b:4f:1e:38:83:53:ca:4a:c4:c2:9a:
e8:07:cc:bc:44:93:c5:3a:1a:45:b5:47:25:d6:11:
19:41:88:8e:f4:5e:4a:5f:62:0e:fe:18:c0:b3:6e:
16:d5:dd:78:2d:61:ab:c7:e1:01:a5:ef:ec:e3:1a:
91:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:92:C5:AF:07:E0:B5:E3:74:31:65:8F:5C:67:D6:87:89:38:0D:22
X509v3 Authority Key Identifier:
keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/2E6E6386D21E11F0B5C0A977C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.32.0/24
IPv6:
2404:bb40::/32
Signature Algorithm: sha256WithRSAEncryption
1c:2a:77:7b:9c:f9:9f:4a:bc:62:38:37:27:08:65:04:a2:e3:
5c:30:86:1c:84:2d:72:41:89:2e:60:c0:aa:32:9b:23:63:4d:
9e:d3:e6:79:aa:ea:01:c5:eb:33:d6:84:f8:3b:8f:ae:6f:01:
7f:89:8c:75:30:13:76:5c:b2:26:a0:28:d7:43:0e:44:70:6e:
5d:81:99:84:7b:19:bc:aa:7c:a8:ad:b5:ce:87:87:97:12:a0:
7a:03:f8:81:6b:4d:b8:0a:0d:ca:d1:df:bb:39:71:7b:cb:38:
37:5e:32:ed:bf:29:17:03:8a:ea:2e:f3:c4:64:15:3e:65:38:
55:43:cc:d0:5a:8e:04:a7:3a:de:13:be:a6:33:d4:58:01:e5:
6a:b3:cf:a7:b6:92:05:2c:00:71:97:ec:c7:d7:c0:41:85:69:
17:d2:6c:6b:e4:f6:ef:40:4f:ae:01:68:5c:63:fb:83:ab:82:
d8:a4:f7:94:18:fc:26:93:b6:f7:1a:6d:23:cc:d0:34:b5:67:
3a:61:1e:91:d8:14:5e:38:00:94:45:a3:26:90:92:a1:a8:df:
86:c5:a9:e1:34:6e:9d:d3:27:7a:c2:41:d2:37:c1:77:14:7c:
46:d5:36:7e:06:0f:86:ca:eb:da:f1:1d:a6:f0:6b:b8:55:7b:
a6:c1:9b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:28:09 2026 by rpki-client