
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa
File: F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa (raw, json)
Hash identifier: p/ajLhjfR7/sd63+KlmmSEwV5q6qTvLkZUOVfCuvC7s=
Subject key identifier: 80:94:8B:08:BD:13:82:6E:0E:3F:BE:0C:BE:7E:98:4C:72:D0:3F:B9
Certificate issuer: /CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5
Certificate serial: 020D
Authority key identifier: 25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa
Signing time: Thu 23 Jul 2026 04:30:21 +0000
ROA not before: Thu 23 Jul 2026 04:30:21 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 151355
IP address blocks: 103.209.212.0/24 maxlen: 24
103.209.213.0/24 maxlen: 24
2001:df2:7f40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl
rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3F79, serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5
Validity
Not Before: Jul 23 04:30:21 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a6198dd-383c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:b5:34:29:2f:17:7b:a9:71:dd:b0:fe:7e:
ad:68:fc:1d:32:32:1b:fa:a9:61:a2:f7:3a:0b:85:
64:9b:50:dc:84:f6:46:dc:66:57:38:55:27:7b:57:
57:82:fe:59:2a:41:d7:40:f6:bb:da:19:f1:d2:6b:
2e:d3:a6:81:8e:b6:30:cf:b0:99:79:d6:d2:24:f5:
7c:45:ef:36:2d:11:f7:a9:7c:24:3e:99:72:00:a2:
b5:cc:d0:2d:6b:aa:01:20:2a:f0:25:8f:f5:60:65:
79:6f:85:c0:b7:10:d4:ba:e0:85:e7:56:10:cb:42:
09:2a:6e:3a:f1:87:13:ed:08:79:89:e4:d2:1a:86:
95:4d:61:44:bd:3f:d5:fd:27:21:9f:db:b9:3b:db:
00:84:4c:6b:b6:97:bd:15:80:19:33:88:7a:77:87:
e5:6d:36:2f:50:53:76:d5:37:20:c9:82:aa:83:ee:
38:9b:e3:2e:86:b9:05:83:2b:77:3b:fb:8c:fd:df:
85:34:1c:3e:f9:2a:d5:f3:18:4f:02:38:34:a2:3b:
16:23:af:b8:7a:7e:fb:7b:32:9a:96:34:2e:6f:ac:
12:51:09:ac:06:7e:3a:bf:f9:31:b2:6c:2c:34:aa:
bd:cd:0a:b1:83:0e:eb:46:0c:36:49:23:19:95:b5:
a0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:94:8B:08:BD:13:82:6E:0E:3F:BE:0C:BE:7E:98:4C:72:D0:3F:B9
X509v3 Authority Key Identifier:
keyid:25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.209.212.0/23
IPv6:
2001:df2:7f40::/48
Signature Algorithm: sha256WithRSAEncryption
09:ce:2f:34:1d:18:1b:31:ae:ef:a0:a7:fe:55:51:bb:cd:7c:
99:e2:b2:78:76:8c:76:97:12:19:50:94:50:22:c1:64:ef:3f:
91:85:97:1a:47:fe:fe:41:69:e2:0b:77:63:c5:b8:26:d7:cb:
3d:fd:4d:38:f3:e0:e3:f3:75:39:e9:c6:9d:ac:ce:88:ab:1a:
c3:8d:fb:b0:3b:2f:66:9a:f4:63:ba:41:a2:15:c7:19:6e:ed:
bf:fc:b2:3e:1f:41:30:ee:8e:5c:55:80:a4:c6:65:9c:62:b0:
2c:1e:d6:8c:01:64:dc:84:8e:01:8a:3a:01:ed:33:80:5e:f3:
a9:a3:8c:73:ce:17:8c:d5:92:43:11:7c:15:2e:5e:bd:50:76:
93:25:14:0f:86:0d:fc:b7:c7:b3:b1:e8:7f:93:e5:62:2e:9f:
5c:ea:9a:d7:65:10:72:88:50:0c:67:ba:cb:6a:7f:ec:f0:c8:
91:8b:92:9d:4e:ea:e1:23:06:a0:b2:9c:43:d7:40:ad:c0:90:
c2:9d:7d:03:7e:fc:68:d7:e3:25:83:ba:9c:0e:75:8f:f7:a1:
9e:2c:ce:57:64:e3:6e:90:63:48:e8:73:21:93:5a:58:3b:21:
ad:9f:7b:2f:e7:6f:e5:32:66:c3:10:2d:26:79:c6:76:e5:eb:
cc:83:eb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:18:27 2026 by rpki-client