
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/CF4E04A6639A11F1BC9896E97047A888.roa
File: CF4E04A6639A11F1BC9896E97047A888.roa (raw, json)
Hash identifier: ypxX0jBaXkiCB0ETTMRiSUcoQBnGELanHxTUttpVceQ=
Subject key identifier: 8E:1A:B4:0A:12:A8:75:7F:65:1D:7F:AE:03:CE:20:64:5A:DE:4B:53
Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
Certificate serial: 1B32
Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/CF4E04A6639A11F1BC9896E97047A888.roa
Signing time: Thu 08 Oct 2026 16:29:22 +0000
ROA not before: Thu 08 Oct 2026 16:29:22 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 16509
IP address blocks: 103.241.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl
rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 16:18:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6962 (0x1b32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
Validity
Not Before: Oct 8 16:29:22 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac7c4e2-5149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5b:28:34:66:3a:ab:c3:6c:0e:b9:c4:49:5e:
da:d1:0b:8b:e3:11:92:24:2f:f4:5d:60:ae:65:d4:
ba:bf:0f:5e:f3:4d:5c:20:d9:a5:65:35:b5:7a:69:
35:9f:f0:21:35:58:9a:a2:17:15:f3:a5:78:9d:c5:
b9:f8:15:62:41:65:1b:b0:b2:55:97:3b:c4:7e:dc:
d1:8b:97:6b:2a:ca:4d:62:6b:f7:9e:ab:80:89:6a:
62:f8:5d:02:95:e2:9f:44:38:26:c8:fa:ba:34:46:
fe:df:4f:99:21:f0:5d:09:f8:83:a2:bc:b2:bd:0d:
f8:56:b4:dc:b1:46:59:7a:83:10:0d:dd:ca:e5:6b:
ea:52:4f:ac:78:ce:9e:24:f8:84:42:4e:61:5f:2f:
84:8d:64:78:43:c9:55:7a:b0:2b:e6:ba:82:7d:2e:
f1:f2:55:b6:7d:9d:d2:43:fb:13:44:c2:03:b0:3f:
87:95:49:2f:37:3c:7c:3a:96:67:db:22:5e:f6:75:
54:c5:77:67:4a:0d:b0:69:02:8b:15:95:cf:bb:08:
5f:b7:2a:0d:4e:8c:ac:a9:26:8a:32:6a:69:06:31:
ba:a9:ac:1d:4b:72:cf:1c:e3:ac:e9:e7:66:f0:91:
c7:c9:40:72:1a:46:8b:d8:57:20:99:e6:be:8b:07:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1A:B4:0A:12:A8:75:7F:65:1D:7F:AE:03:CE:20:64:5A:DE:4B:53
X509v3 Authority Key Identifier:
keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/CF4E04A6639A11F1BC9896E97047A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.241.87.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8b:43:f6:5d:0c:2b:f4:9a:c5:51:17:d3:a3:36:09:00:8c:
3b:4a:bd:3d:e2:50:03:fd:eb:04:1f:61:21:ab:02:af:56:54:
eb:20:cf:cd:ee:7d:b6:9b:38:83:1c:7e:c5:d3:3e:7b:07:ca:
26:82:ab:90:5d:f1:9a:2b:0b:1e:c2:39:52:3e:40:2d:0f:74:
f4:2b:b8:40:52:96:81:46:ca:72:ae:12:95:57:a6:01:ed:2c:
5b:3d:63:c0:c4:39:5e:18:f1:22:24:05:5b:bf:0a:ed:bf:ed:
c5:2e:7e:80:c7:e4:59:c2:31:6b:f5:ed:56:89:47:d9:c8:55:
6c:ba:b9:28:76:4d:31:91:27:23:36:9e:e3:e9:d9:20:cb:cc:
08:ad:7b:a8:bc:4d:34:6e:af:e8:27:33:6c:49:1a:44:24:4b:
20:2f:4d:e7:45:ab:b3:6f:45:21:0a:9d:84:5b:58:f5:7a:a3:
13:cf:ba:5b:23:83:08:de:5d:cc:32:99:ea:26:15:5c:6b:46:
39:bd:7b:8c:23:f1:a1:08:e0:db:55:5f:ed:1a:96:3d:bd:17:
0e:45:9d:46:1b:02:22:ab:a9:7c:85:0d:f8:03:94:b1:f5:2c:
e2:df:96:f0:cb:ff:2a:30:3f:75:1d:0b:15:27:57:39:e7:22:
ba:96:1c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 10:01:04 2026 by rpki-client