
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/9CA45412A6AB11F0AA6B453DC4F9AE02.roa
File: 9CA45412A6AB11F0AA6B453DC4F9AE02.roa (raw, json)
Hash identifier: Fr+3c6RpSKSYZINS3tB5kOz0vDzbNjiqKIyeQ9IGWSA=
Subject key identifier: B1:31:DA:D2:BE:59:7A:9E:FF:83:C2:38:03:88:49:76:E0:36:4F:81
Certificate issuer: /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3
Certificate serial: 0765
Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/9CA45412A6AB11F0AA6B453DC4F9AE02.roa
Signing time: Sat 30 May 2026 13:27:21 +0000
ROA not before: Sat 30 May 2026 13:27:21 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 134781
IP address blocks: 103.124.236.0/22 maxlen: 24
2405:16c0::/32 maxlen: 32
2405:16c0::/34 maxlen: 34
2405:16c0::/48 maxlen: 48
2405:16c0:4000::/34 maxlen: 34
2405:16c0:4000::/48 maxlen: 48
2405:16c0:4001::/48 maxlen: 48
2405:16c0:4002::/48 maxlen: 48
2405:16c0:4003::/48 maxlen: 48
2405:16c0:4004::/48 maxlen: 48
2405:16c0:4005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl
rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1893 (0x765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5A9F, serialNumber=95025628F14341046146AC20BA324614461A9CC3
Validity
Not Before: May 30 13:27:21 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a1ae5b8-73b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:5b:ef:fd:2c:d2:af:8c:1b:ef:0f:e4:c8:
fd:23:9e:7a:04:9b:19:a9:b1:0d:8e:0a:ba:a3:c1:
88:be:0b:25:9b:8b:0f:aa:58:27:04:18:40:b6:f7:
fe:f7:cd:b2:68:e6:80:d0:1e:7f:0b:6a:62:c4:de:
10:a6:8a:6a:86:83:0d:66:f7:4d:15:07:16:c9:05:
90:31:15:66:10:a8:36:0e:a6:5c:f5:bd:fc:f8:e1:
18:ce:21:ff:75:5c:76:68:c9:1d:1f:50:13:1c:1d:
84:52:6c:a1:38:cb:25:0d:b1:ff:e4:4d:4e:e0:3c:
08:98:4a:8e:5c:09:24:65:0f:dc:09:4b:e4:ee:91:
31:f9:e8:27:f7:1f:92:4c:f0:4a:40:ae:1e:f7:d5:
db:d2:d3:f6:2d:b6:53:4c:2d:d1:0c:f1:12:52:a5:
34:76:2d:e2:5a:e6:4c:46:0d:b3:60:8d:b9:0c:04:
e6:0e:d1:d6:5d:b9:39:37:d7:b7:b7:80:8e:32:02:
69:34:8f:5e:15:b4:b5:05:ff:c5:d9:cd:92:53:90:
20:3c:58:db:58:95:52:bc:9b:03:89:7e:fe:eb:40:
5d:fa:46:e4:81:59:9f:de:cf:aa:97:dc:74:57:be:
bf:fa:a6:65:00:ae:a6:f7:05:17:5b:b7:1a:64:28:
a2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:31:DA:D2:BE:59:7A:9E:FF:83:C2:38:03:88:49:76:E0:36:4F:81
X509v3 Authority Key Identifier:
keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/9CA45412A6AB11F0AA6B453DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.124.236.0/22
IPv6:
2405:16c0::/32
Signature Algorithm: sha256WithRSAEncryption
1b:9a:76:39:75:6c:e5:6e:80:2e:62:33:86:e9:33:2b:a5:e7:
0f:c9:76:29:ae:b6:6b:df:0a:7f:12:e6:1f:4d:24:96:e6:d9:
99:59:d3:13:e1:08:20:3e:b0:44:77:78:f3:ab:c1:2f:c0:21:
8a:7b:b8:2c:24:49:3b:72:9e:c4:7b:05:c9:06:2d:6f:14:75:
ac:11:be:20:e2:4d:51:22:d8:fb:d5:ea:02:3d:16:9c:bb:7b:
31:40:66:6c:7f:83:e1:33:cc:1b:0d:65:f4:1b:6f:d1:ba:bd:
5c:62:31:a4:bd:4e:ba:3b:15:94:e6:a9:8a:60:21:f8:56:c0:
a5:18:14:71:48:af:dc:f9:b1:7b:2e:58:2a:50:de:50:8a:9b:
df:63:4f:d0:6f:60:54:4e:1d:9e:68:f2:69:75:b4:44:d8:28:
61:28:74:bc:bf:3e:67:4e:bf:37:84:3a:07:42:71:17:90:06:
3c:df:70:db:8c:12:ee:7c:c1:8c:49:d9:bf:08:56:67:45:34:
b9:b7:61:e6:a5:02:b8:f2:6c:61:a6:c2:b1:ce:87:40:17:d1:
ac:30:2d:e1:63:7a:86:d9:88:76:5d:e9:5a:40:e2:db:c1:d4:
2c:48:f0:ab:e4:1e:96:c0:01:e2:ab:12:e7:ca:bc:99:c9:b7:
cc:50:69:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:01:52 2026 by rpki-client