
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/8F628C6C000E11F1B0B593243F6F56BC.roa
File: 8F628C6C000E11F1B0B593243F6F56BC.roa (raw, json)
Hash identifier: +uCC4RxvvM2jLwWeFZZmtoCiHRrr+bxpylbILtMobiQ=
Subject key identifier: DC:82:F7:CF:3C:13:0F:DC:92:9D:28:22:D6:15:2A:CC:F0:72:37:20
Certificate issuer: /CN=A91D6835/serialNumber=8A32FACA2B7A2A279BDDEDA94F588D00675D80A4
Certificate serial: 4B
Authority key identifier: 8A:32:FA:CA:2B:7A:2A:27:9B:DD:ED:A9:4F:58:8D:00:67:5D:80:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/8F628C6C000E11F1B0B593243F6F56BC.roa
Signing time: Thu 11 Jun 2026 11:41:17 +0000
ROA not before: Thu 11 Jun 2026 11:41:16 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 4686
IP address blocks: 103.58.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.crl
rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:28:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6835, serialNumber=8A32FACA2B7A2A279BDDEDA94F588D00675D80A4
Validity
Not Before: Jun 11 11:41:16 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a2a9edc-d9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:17:3f:4d:73:6c:47:a5:84:42:c1:16:e2:
24:57:c2:b2:9b:2a:89:db:9d:27:92:80:32:8d:77:
03:0d:23:32:d8:75:1d:b7:a5:bc:fd:80:be:c5:ac:
91:90:73:11:e4:e6:7d:3b:13:97:73:e0:2b:94:00:
b0:32:56:66:cb:ac:78:a8:a8:94:29:b0:d1:a9:a3:
db:8e:26:23:1c:25:a4:2e:1c:2b:3b:55:1e:bb:51:
3b:8b:c3:eb:65:cf:42:9e:ff:d0:af:3e:9c:58:1c:
08:cc:69:09:21:c9:72:9d:92:36:cc:a3:dd:06:36:
fb:84:c2:f2:71:3c:5d:7b:47:f4:36:75:fc:84:88:
90:4d:27:21:34:7c:4b:d0:25:e0:ed:e6:6e:12:d0:
65:2d:42:7b:0c:8e:dc:62:98:ae:0d:b1:5e:08:04:
4a:8f:05:3d:39:c5:12:4e:95:88:17:ad:df:72:75:
d1:47:c6:fc:40:79:5a:e5:6e:7c:5a:09:65:3b:2d:
a5:e3:76:87:16:3a:28:50:46:07:68:f1:40:86:e1:
13:4a:ee:61:17:dc:93:a1:fe:b4:bb:aa:fd:f1:0c:
13:c8:0d:1d:d4:65:8c:82:be:cc:03:38:61:df:69:
d9:a4:da:a3:76:f5:8a:2e:fd:09:77:81:fb:64:6d:
30:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:82:F7:CF:3C:13:0F:DC:92:9D:28:22:D6:15:2A:CC:F0:72:37:20
X509v3 Authority Key Identifier:
keyid:8A:32:FA:CA:2B:7A:2A:27:9B:DD:ED:A9:4F:58:8D:00:67:5D:80:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/8F628C6C000E11F1B0B593243F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.58.68.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:ef:3b:04:5c:dc:b4:5e:3c:96:79:06:6c:28:c4:a8:0c:10:
df:40:05:3e:d2:b1:60:6f:b3:26:d7:65:c8:a6:11:60:dc:f8:
4c:f6:68:fc:11:d2:18:81:21:55:f8:95:11:5f:50:c0:a6:57:
15:d3:4f:be:38:64:4f:1c:d7:f3:8d:32:0e:a2:20:94:73:69:
8b:a9:88:d0:50:94:73:b0:c3:89:de:82:01:79:06:c4:b0:ed:
12:e6:03:aa:8d:e5:aa:29:d0:1b:b3:28:8c:07:f8:50:32:d4:
1b:7c:3b:61:b7:25:c8:7e:5c:65:37:91:57:25:44:ad:68:1d:
3c:5a:8f:b0:46:45:6e:b8:65:63:14:01:04:56:54:79:c5:bd:
2e:f4:0e:60:b1:69:cd:9a:63:68:22:9b:a7:0a:c7:25:d6:68:
f2:94:93:4c:60:7e:30:4f:74:e8:dc:fd:cc:a2:b3:03:ff:c4:
b9:ae:38:c8:11:cc:18:f9:4d:d8:88:ad:a3:75:6b:7e:fa:ed:
b0:29:a2:25:a8:f7:90:9a:73:36:74:93:c0:2c:3a:77:db:57:
23:bd:fb:4f:7a:bc:de:1e:0c:5d:df:c4:1d:88:2d:90:f1:15:
d4:41:9f:f4:e9:62:81:21:6e:6d:f6:56:99:74:78:2e:8f:03:
c8:8c:fa:39
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
NjgzNTExMC8GA1UEBRMoOEEzMkZBQ0EyQjdBMkEyNzlCRERFREE5NEY1ODhEMDA2
NzVEODBBNDAeFw0yNjA2MTExMTQxMTZaFw0yNzA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMmE5ZWRjLWQ5YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/lRc/TXNsR6WEQsEW4iRXwrKbKonbnSeSgDKNdwMNIzLYdR23pbz9gL7FrJGQ
cxHk5n07E5dz4CuUALAyVmbLrHioqJQpsNGpo9uOJiMcJaQuHCs7VR67UTuLw+tl
z0Ke/9CvPpxYHAjMaQkhyXKdkjbMo90GNvuEwvJxPF17R/Q2dfyEiJBNJyE0fEvQ
JeDt5m4S0GUtQnsMjtximK4NsV4IBEqPBT05xRJOlYgXrd9yddFHxvxAeVrlbnxa
CWU7LaXjdocWOihQRgdo8UCG4RNK7mEX3JOh/rS7qv3xDBPIDR3UZYyCvswDOGHf
admk2qN29You/Ql3gftkbTAZAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU3IL3zzwT
D9ySnSgi1hUqzPByNyAwHwYDVR0jBBgwFoAUijL6yit6Kieb3e2pT1iNAGddgKQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2ODM1LzQ2NUNGNUEyMDAw
RTExRjFBNkIzMTQ4QjNFNkY1NkJDL2lqTDZ5aXQ2S2llYjNlMnBUMWlOQUdkZGdL
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaWpMNnlpdDZLaWViM2UycFQxaU5BR2RkZ0tRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NjgzNS80NjVDRjVBMjAwMEUxMUYxQTZCMzE0OEIzRTZGNTZCQy84RjYyOEM2QzAw
MEUxMUYxQjBCNTkzMjQzRjZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnOkQwDQYJKoZIhvcNAQELBQADggEBAFrvOwRc3LRePJZ5BmwoxKgM
EN9ABT7SsWBvsybXZcimEWDc+Ez2aPwR0hiBIVX4lRFfUMCmVxXTT744ZE8c1/ON
Mg6iIJRzaYupiNBQlHOww4neggF5BsSw7RLmA6qN5aop0BuzKIwH+FAy1Bt8O2G3
Jch+XGU3kVclRK1oHTxaj7BGRW64ZWMUAQRWVHnFvS70DmCxac2aY2gim6cKxyXW
aPKUk0xgfjBPdOjc/cyiswP/xLmuOMgRzBj5TdiIraN1a3767bApoiWo95CaczZ0
k8AsOnfbVyO9+096vN4eDF3fxB2ILZDxFdRBn/TpYoEhbm32Vpl0eC6PA8iM+jk=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:05:04 2026 by rpki-client