
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/F547BE4253EA11F08B05D02EC4F9AE02.roa
File: F547BE4253EA11F08B05D02EC4F9AE02.roa (raw, json)
Hash identifier: aB93Fkooc5xfwz7ats42i1ahre7sd4cQ605Ubo23aE4=
Subject key identifier: DE:DA:3C:6B:A4:B7:CB:40:0B:AB:6F:32:07:07:B0:B0:7E:0A:4B:2D
Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial: 09A6
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/F547BE4253EA11F08B05D02EC4F9AE02.roa
Signing time: Fri 12 Jun 2026 20:23:56 +0000
ROA not before: Fri 12 Jun 2026 20:23:56 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 138997
IP address blocks: 103.138.72.0/22 maxlen: 22
103.138.72.0/23 maxlen: 24
103.138.74.0/23 maxlen: 24
2404:c140::/32 maxlen: 32
2404:c140:155::/48 maxlen: 48
2404:c140:156::/48 maxlen: 48
2404:c140:157::/48 maxlen: 48
2404:c140:220::/48 maxlen: 48
2404:c140:221::/48 maxlen: 48
2404:c140:224::/48 maxlen: 48
2404:c140:225::/48 maxlen: 48
2404:c140:230::/47 maxlen: 48
2404:c140:1f00::/40 maxlen: 48
2404:c140:2000::/40 maxlen: 48
2404:c140:2100::/40 maxlen: 48
2404:c140:2200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2470 (0x9a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Validity
Not Before: Jun 12 20:23:56 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2c6adc-aa93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:55:62:91:9c:ba:8b:42:3a:a6:b4:46:00:74:
e1:09:de:24:47:58:b4:b4:58:be:20:ca:15:7b:ac:
80:9c:81:1a:08:69:b7:a9:7d:8b:09:3a:83:1b:97:
09:c0:34:e3:5f:5a:51:03:10:7b:31:67:a3:0b:08:
44:39:76:4b:c2:28:20:02:8b:0d:b1:a2:49:98:97:
c2:88:5c:db:cd:eb:fc:be:96:cf:bb:4a:8a:f2:c1:
fc:bb:62:10:e2:54:79:fb:c3:d9:03:64:b8:19:0a:
f7:12:6f:a4:85:61:94:f8:2f:4f:7e:1c:95:e0:50:
65:92:3f:39:83:c7:65:f2:18:1a:ad:c9:32:42:3e:
de:81:0d:53:1a:39:24:89:41:65:31:44:ed:68:89:
4f:55:bd:b2:58:72:4f:f7:bc:23:e5:59:2d:ca:7b:
c0:44:b2:d1:95:9e:91:67:77:8c:76:95:5e:69:c6:
c5:9c:ce:8a:73:7a:39:cc:54:89:a4:5d:a1:10:d0:
8f:44:b8:fc:f2:ed:12:e9:ee:7c:b7:6c:be:4e:41:
02:8b:99:e3:e4:64:b1:f1:bb:4c:33:e4:15:6e:95:
fd:83:80:22:62:96:a7:15:75:7e:e6:5c:b3:c7:b9:
dc:b0:ac:df:a4:2e:0a:4c:d5:53:19:b5:82:73:aa:
a5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DA:3C:6B:A4:B7:CB:40:0B:AB:6F:32:07:07:B0:B0:7E:0A:4B:2D
X509v3 Authority Key Identifier:
keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/F547BE4253EA11F08B05D02EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.72.0/22
IPv6:
2404:c140::/32
Signature Algorithm: sha256WithRSAEncryption
72:5d:b6:d6:25:df:75:ee:07:48:ee:69:24:9c:d5:aa:8b:d1:
13:38:3f:00:61:f2:e1:0a:a0:82:9f:58:a6:5f:7c:5b:af:7f:
18:2b:1a:bd:99:db:fd:be:41:2b:78:38:11:62:fe:7c:ec:d2:
dd:a6:8e:f5:52:10:41:16:33:47:5d:13:df:5b:dc:f1:39:8a:
9a:5a:4d:e9:ea:5a:8b:5f:a7:d1:25:b9:ff:62:9b:e4:2d:c0:
4f:2d:7d:39:4b:13:b5:91:60:13:4d:c2:58:22:ab:c0:55:48:
48:35:db:90:47:3f:8e:96:b1:5e:bb:73:b0:c5:09:90:fd:01:
24:3b:18:e9:6b:69:b5:eb:48:54:c4:87:f9:b7:d0:21:c5:25:
3d:2a:fc:06:52:29:fc:5b:11:0f:5d:62:c5:03:38:87:c8:e2:
d7:26:22:b2:02:d0:d2:aa:9e:10:9a:30:1b:91:8d:0d:af:c7:
fa:b3:99:a1:91:7e:e9:b2:64:0e:a8:e7:96:e4:45:7c:82:6c:
0e:09:d4:19:e3:ba:73:43:86:aa:19:92:eb:0f:d1:ee:66:b7:
af:22:9f:d4:2e:d9:df:db:ed:fa:cf:d9:77:47:7a:ae:49:ce:
91:f1:14:7a:dc:05:f3:08:d3:9b:b5:db:58:98:df:7f:c6:e3:
eb:5a:19:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:04 2026 by rpki-client