
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8E54/DA805FB0414211F18F1478B7C4833773/CF9FB88A47A911F18E8066B9A7833773.roa
File: CF9FB88A47A911F18E8066B9A7833773.roa (raw, json)
Hash identifier: HF0d2lda9wp6iMYhcSHsyNjUyVPs7Elpjku5OYERxlA=
Subject key identifier: A9:A7:91:71:DA:F4:43:3D:40:AF:C3:59:72:68:F5:A6:3B:E6:A5:0D
Certificate issuer: /CN=A91D8E54/serialNumber=B49AE45A64C15DF6EC9CD4BDE93BC09CCC854AA9
Certificate serial: 12
Authority key identifier: B4:9A:E4:5A:64:C1:5D:F6:EC:9C:D4:BD:E9:3B:C0:9C:CC:85:4A:A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJrkWmTBXfbsnNS96TvAnMyFSqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8E54/DA805FB0414211F18F1478B7C4833773/CF9FB88A47A911F18E8066B9A7833773.roa
Signing time: Fri 15 May 2026 09:45:59 +0000
ROA not before: Fri 15 May 2026 09:45:59 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 151347
IP address blocks: 103.206.18.0/23 maxlen: 24
2401:1a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8E54/DA805FB0414211F18F1478B7C4833773/tJrkWmTBXfbsnNS96TvAnMyFSqk.crl
rsync://rpki.apnic.net/member_repository/A91D8E54/DA805FB0414211F18F1478B7C4833773/tJrkWmTBXfbsnNS96TvAnMyFSqk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJrkWmTBXfbsnNS96TvAnMyFSqk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8E54, serialNumber=B49AE45A64C15DF6EC9CD4BDE93BC09CCC854AA9
Validity
Not Before: May 15 09:45:59 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a06eb56-0b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:71:b4:62:22:7a:c6:7c:ba:4b:e4:1a:20:
f4:94:3f:5b:4b:1b:9e:82:7f:c9:de:30:bf:d1:7b:
2e:80:83:53:e1:48:9c:06:aa:a1:92:9a:de:6c:8b:
8b:61:f8:ce:c3:32:68:28:c3:a9:dc:6e:e1:0c:f1:
63:7e:99:9c:d5:5f:17:f0:83:c3:0b:bc:db:82:80:
e6:fa:0e:91:d1:2e:b3:b5:b3:4b:2e:7a:96:c2:9a:
8d:dc:0c:30:8f:22:7a:a4:a9:49:a3:26:93:6d:6f:
88:e5:a0:21:b8:2a:58:80:e3:40:25:af:1c:4c:1a:
0d:54:46:df:d4:63:8e:ec:8c:78:68:6b:e5:ba:32:
54:89:f9:44:d0:75:45:e9:7c:04:27:b6:15:fd:03:
6d:3a:2d:f5:13:01:ae:18:1f:9b:94:9d:90:43:87:
16:66:9a:89:42:fd:70:be:b9:e3:59:10:de:d0:cd:
a7:60:04:9d:d5:24:88:ed:b0:42:e7:1a:01:59:96:
ba:29:22:c7:2a:dc:95:b2:0d:6d:5a:c2:e5:61:1c:
b7:67:5c:81:51:85:1f:b2:8b:24:47:aa:90:e4:78:
a0:39:f8:e5:d0:7a:5c:d7:aa:45:7a:f5:c1:e3:ab:
25:bd:40:94:36:a0:f7:ab:5b:64:e8:9d:cd:93:04:
02:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A7:91:71:DA:F4:43:3D:40:AF:C3:59:72:68:F5:A6:3B:E6:A5:0D
X509v3 Authority Key Identifier:
keyid:B4:9A:E4:5A:64:C1:5D:F6:EC:9C:D4:BD:E9:3B:C0:9C:CC:85:4A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8E54/DA805FB0414211F18F1478B7C4833773/tJrkWmTBXfbsnNS96TvAnMyFSqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJrkWmTBXfbsnNS96TvAnMyFSqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8E54/DA805FB0414211F18F1478B7C4833773/CF9FB88A47A911F18E8066B9A7833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.206.18.0/23
IPv6:
2401:1a0::/32
Signature Algorithm: sha256WithRSAEncryption
39:7a:b7:4d:b7:f2:f6:40:f4:07:e4:21:00:2f:e2:b7:ce:a5:
8b:e9:36:06:76:e4:6a:80:c2:3b:0f:5e:66:2f:4a:5a:3c:2b:
a8:fd:0f:99:f2:2a:30:55:b2:d8:01:db:91:19:40:a7:60:44:
79:b7:d7:5e:0e:73:39:bb:ad:7e:55:26:01:56:d8:4c:6e:cb:
84:3d:55:ac:3b:0b:d6:2d:67:1c:aa:ac:67:6d:1d:4c:de:ba:
3d:23:88:98:c1:ae:63:f0:37:e5:de:ec:47:24:fc:59:48:46:
bf:14:6b:eb:7f:0f:c8:54:6f:a2:88:84:22:02:b7:11:1c:0e:
51:22:ff:bd:23:94:15:92:f6:b6:31:52:c6:3e:09:19:d0:ce:
70:b5:5a:a5:2f:7f:a5:05:36:9d:f4:c1:9c:5e:8d:4b:8a:d3:
9a:61:ae:25:94:63:d7:97:88:60:20:4b:13:cb:02:40:ea:ad:
56:bf:3e:d0:20:d0:9e:ba:9f:d5:64:c1:9b:ef:05:92:33:09:
71:0b:2c:07:db:50:c9:c8:6c:6f:ec:12:16:31:ae:75:65:56:
ac:32:9a:19:d0:72:5f:08:8e:e2:b4:c0:ed:87:a5:b4:76:43:
fe:0f:c8:a9:3b:a5:08:d8:d5:f4:9b:96:6e:21:b0:34:44:ae:
5f:55:c9:0a
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
OEU1NDExMC8GA1UEBRMoQjQ5QUU0NUE2NEMxNURGNkVDOUNENEJERTkzQkMwOUND
Qzg1NEFBOTAeFw0yNjA1MTUwOTQ1NTlaFw0yNzA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMDZlYjU2LTBiNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxVHG0YiJ6xny6S+QaIPSUP1tLG56Cf8neML/Rey6Ag1PhSJwGqqGSmt5si4th
+M7DMmgow6ncbuEM8WN+mZzVXxfwg8MLvNuCgOb6DpHRLrO1s0suepbCmo3cDDCP
InqkqUmjJpNtb4jloCG4KliA40AlrxxMGg1URt/UY47sjHhoa+W6MlSJ+UTQdUXp
fAQnthX9A206LfUTAa4YH5uUnZBDhxZmmolC/XC+ueNZEN7QzadgBJ3VJIjtsELn
GgFZlropIscq3JWyDW1awuVhHLdnXIFRhR+yiyRHqpDkeKA5+OXQelzXqkV69cHj
qyW9QJQ2oPerW2Tonc2TBALDAgMBAAGjggJvMIICazAdBgNVHQ4EFgQUqaeRcdr0
Qz1Ar8NZcmj1pjvmpQ0wHwYDVR0jBBgwFoAUtJrkWmTBXfbsnNS96TvAnMyFSqkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4RTU0L0RBODA1RkIwNDE0
MjExRjE4RjE0NzhCN0M0ODMzNzczL3RKcmtXbVRCWGZic25OUzk2VHZBbk15RlNx
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdEpya1dtVEJYZmJzbk5TOTZUdkFuTXlGU3FrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OEU1NC9EQTgwNUZCMDQxNDIxMUYxOEYxNDc4QjdDNDgzMzc3My9DRjlGQjg4QTQ3
QTkxMUYxOEU4MDY2QjlBNzgzMzc3My5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBAFnzhIwDQQCAAIwBwMFACQBAaAwDQYJKoZIhvcNAQELBQADggEBADl6
t0238vZA9AfkIQAv4rfOpYvpNgZ25GqAwjsPXmYvSlo8K6j9D5nyKjBVstgB25EZ
QKdgRHm3114Oczm7rX5VJgFW2Exuy4Q9Vaw7C9YtZxyqrGdtHUzeuj0jiJjBrmPw
N+Xe7Eck/FlIRr8Ua+t/D8hUb6KIhCICtxEcDlEi/70jlBWS9rYxUsY+CRnQznC1
WqUvf6UFNp30wZxejUuK05phriWUY9eXiGAgSxPLAkDqrVa/PtAg0J66n9VkwZvv
BZIzCXELLAfbUMnIbG/sEhYxrnVlVqwymhnQcl8IjuK0wO2HpbR2Q/4PyKk7pQjY
1fSblm4hsDRErl9VyQo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:32:40 2026 by rpki-client