
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/1BFCE1E0554F11E8A5C82D57C4F9AE02.roa
File: 1BFCE1E0554F11E8A5C82D57C4F9AE02.roa (raw, json)
Hash identifier: UmzGmppb257k2JbUqMz2WDLUUiEnpITDN/OCKDDsHYU=
Subject key identifier: E5:B3:B2:EB:9C:F8:D5:C1:76:B4:72:39:CE:77:91:78:37:47:C8:10
Certificate issuer: /CN=A91D599B/serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC
Certificate serial: 15AA
Authority key identifier: FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/1BFCE1E0554F11E8A5C82D57C4F9AE02.roa
Signing time: Thu 04 Jun 2026 17:20:31 +0000
ROA not before: Thu 04 Jun 2026 17:20:31 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 2635
IP address blocks: 103.115.8.0/22 maxlen: 24
2402:dac0::/32 maxlen: 32
2402:dac0::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl
rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5546 (0x15aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D599B, serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC
Validity
Not Before: Jun 4 17:20:31 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a21b3de-a300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:38:f2:3b:15:9b:ae:9f:c4:f6:9b:4e:d8:
f9:a3:e8:a7:8e:38:f3:7c:10:8f:cf:15:bc:65:61:
d5:1d:35:2f:65:89:19:6f:1c:14:8b:1b:11:08:2e:
94:98:c1:e8:13:04:ae:8e:9d:52:60:4e:4a:7f:17:
13:20:37:9a:b2:fe:fc:a2:1f:da:2e:1b:19:d8:25:
15:c5:df:57:38:f5:95:cf:dd:95:6c:b3:cf:8a:4e:
f4:d6:38:1b:73:62:62:d9:a4:59:34:4f:4a:f3:ba:
e2:a4:a0:a2:da:b3:e0:34:3e:04:97:b0:72:e6:33:
2d:d5:56:d6:10:34:5b:82:81:4e:1c:7b:06:05:0e:
97:77:d8:a8:3f:81:bf:53:94:62:ce:5a:da:c1:af:
7f:98:70:01:2d:66:d2:08:95:b0:34:77:a2:f1:ae:
97:9e:19:1f:be:02:0a:56:27:7d:4e:c6:04:eb:ad:
46:4b:bd:7c:cd:a0:78:68:ed:62:5b:c7:8a:5d:7c:
ed:ad:d8:c8:cb:12:ea:81:8a:14:ea:3b:19:16:88:
95:49:3e:31:c1:14:8b:03:08:7c:fe:df:3c:05:36:
98:94:82:4b:26:ed:29:fb:9c:5d:48:d8:a7:e3:f4:
3c:c9:e4:9e:4f:07:87:20:d0:94:4b:ab:30:9d:9b:
4b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B3:B2:EB:9C:F8:D5:C1:76:B4:72:39:CE:77:91:78:37:47:C8:10
X509v3 Authority Key Identifier:
keyid:FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/1BFCE1E0554F11E8A5C82D57C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.115.8.0/22
IPv6:
2402:dac0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:39:36:fd:d9:05:27:27:2d:d7:1b:3d:24:36:82:c2:32:17:
25:8b:74:2a:b8:43:40:25:e9:9f:90:97:a3:54:88:3c:1b:47:
c9:d8:c4:0c:11:69:9d:0c:d5:00:f6:17:7e:5b:ba:53:09:ee:
56:c6:3c:bb:9d:15:8d:5f:19:8d:6d:4f:96:e1:7a:b8:eb:66:
e2:d8:eb:e8:33:0e:29:25:47:d8:f3:0d:d8:2b:9a:37:8e:69:
44:7d:6a:a4:ab:6a:68:29:14:58:5a:a6:ae:1e:eb:45:60:ec:
10:cc:72:65:52:0e:62:0b:df:d7:04:44:1d:73:12:7c:fb:cd:
06:d6:df:fa:e0:3f:a9:42:cb:80:f1:70:c7:8e:1b:f1:94:52:
47:09:a2:ec:1e:08:86:4d:6b:72:49:3a:b0:ff:70:8e:a4:61:
a5:11:16:97:bb:23:02:c5:24:74:84:68:8c:7d:51:89:c6:08:
b4:30:9d:e1:5e:85:b7:61:fd:a6:d1:a6:09:ed:45:90:94:dc:
0e:54:5d:3e:eb:be:73:e6:16:d3:a3:3b:52:ae:47:58:ae:16:
03:38:56:92:0d:28:ea:6a:c2:61:de:7e:e6:38:0b:a1:26:36:
b5:5c:ac:20:17:8a:65:66:e8:80:64:c2:8e:7a:ba:25:34:8c:
9c:04:d6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:09:51 2026 by rpki-client