
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/6C153768CE5511EB9DD80C30C4F9AE02.roa
File: 6C153768CE5511EB9DD80C30C4F9AE02.roa (raw, json)
Hash identifier: ZmHOd8xk6wRXLnwUjYLjV1O4C/0XpnWVR3Qg13Vt0IM=
Subject key identifier: AE:D8:45:D5:78:78:13:4A:88:80:A3:A7:EB:AB:C6:3F:5B:43:4E:A8
Certificate issuer: /CN=A91D8E2C/serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
Certificate serial: 0F1E
Authority key identifier: 96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/6C153768CE5511EB9DD80C30C4F9AE02.roa
Signing time: Fri 31 Jul 2026 18:35:03 +0000
ROA not before: Fri 31 Jul 2026 18:35:03 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 142423
IP address blocks: 103.139.208.0/23 maxlen: 23
103.139.208.0/24 maxlen: 24
103.139.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl
rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3870 (0xf1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8E2C, serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
Validity
Not Before: Jul 31 18:35:03 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a6cead6-aada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:fa:b8:d8:dd:f0:48:d5:a1:4e:1f:a0:f7:
74:7c:87:78:f6:70:ec:49:c7:ed:2f:c0:f7:66:59:
e2:7e:9c:01:7e:51:e1:e2:57:53:60:69:35:82:bc:
87:2f:e2:46:c9:ff:0a:3c:aa:d9:f5:09:cb:63:0b:
05:92:26:7d:51:64:6a:99:97:f5:b0:8a:94:26:d3:
66:df:e8:9b:92:99:5c:ad:74:bc:ff:98:be:b6:eb:
35:1d:db:e4:ff:3c:03:44:0c:31:bd:30:77:9e:45:
5a:54:64:94:3a:1f:8d:84:0b:5e:c0:93:34:c8:67:
f5:35:ce:9b:48:25:a0:49:aa:89:43:44:20:b2:7a:
c2:ec:50:3b:9b:98:12:2e:46:af:f2:14:2d:8a:eb:
39:45:13:e7:3e:b1:43:0d:89:ce:6d:08:a0:e6:12:
ac:68:d0:e7:77:0b:49:4f:5f:49:5c:a8:fa:f1:91:
1d:5d:d3:0d:60:a4:05:a8:15:fa:ba:c3:84:67:89:
d2:6b:40:1f:77:07:d2:f9:62:33:a5:5c:48:d3:5e:
69:09:0c:b7:53:da:cd:fa:c8:ad:e5:38:db:fc:ec:
d8:1b:29:dc:cb:cd:76:42:61:e5:80:44:cc:65:f6:
b1:40:63:90:15:08:9a:6b:e1:58:a1:93:66:fa:d5:
c9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D8:45:D5:78:78:13:4A:88:80:A3:A7:EB:AB:C6:3F:5B:43:4E:A8
X509v3 Authority Key Identifier:
keyid:96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/6C153768CE5511EB9DD80C30C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.139.208.0/23
Signature Algorithm: sha256WithRSAEncryption
97:19:7a:66:06:19:32:7c:7d:d6:e9:8a:87:9a:f3:fc:67:fb:
ed:e7:c0:8f:43:1d:5f:c2:f0:53:d7:4e:ac:c7:ee:a1:81:94:
11:90:33:a2:ca:66:19:bd:e4:6a:b2:5e:86:ff:6b:e6:e2:de:
f2:5a:1b:c2:9d:03:dc:c1:13:df:f1:d1:1b:36:24:e4:f8:4a:
e7:d4:d0:1c:f6:a5:c8:5d:f0:06:81:c5:8a:7a:66:ce:f2:06:
70:35:aa:06:3d:b2:59:27:59:45:e8:85:92:67:e3:30:55:9e:
24:59:1c:bf:0c:b7:ba:40:4d:b7:2d:73:47:0a:cf:e2:d5:3f:
13:42:d7:cf:c5:92:f3:e3:12:43:be:94:d1:d4:86:b9:90:bd:
f4:eb:93:cd:f2:79:71:1c:2e:4d:58:bb:0f:cd:44:43:cc:b6:
5c:87:25:b5:8c:9d:f5:c7:2b:3e:21:5a:9c:4b:8d:9b:dc:ba:
2a:81:aa:f3:c7:50:b4:95:15:92:c5:b7:0b:74:25:53:72:2e:
88:b8:37:7c:8d:5b:98:40:5f:c0:41:99:86:d7:f3:22:35:1b:
41:8a:ef:85:05:33:ea:d6:03:23:44:b5:cb:c4:9d:13:1d:55:
7a:c5:05:8a:4d:81:7d:85:72:d2:e8:22:02:3c:45:37:29:98:
25:39:51:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:57:29 2026 by rpki-client