
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/E8F4B2C48A0911ED8FCEE137C4F9AE02.roa
File: E8F4B2C48A0911ED8FCEE137C4F9AE02.roa (raw, json)
Hash identifier: w4+i2AFQCp0fSfDJ3CNv6OBjIpm8hWm9Zpmlr/vwCHc=
Subject key identifier: 8D:BB:83:90:19:C2:9F:D4:D1:FA:EC:C4:D8:C8:57:C9:96:57:FE:87
Certificate issuer: /CN=A91E6C2D/serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946
Certificate serial: 0297
Authority key identifier: 8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/E8F4B2C48A0911ED8FCEE137C4F9AE02.roa
Signing time: Tue 09 Jun 2026 02:32:04 +0000
ROA not before: Tue 09 Jun 2026 02:32:04 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 150701
IP address blocks: 103.61.18.0/23 maxlen: 23
103.61.18.0/24 maxlen: 24
103.61.19.0/24 maxlen: 24
2001:df1:c0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl
rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:58:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663 (0x297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6C2D, serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946
Validity
Not Before: Jun 9 02:32:04 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a277b24-bbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:01:4b:08:8c:4b:a0:8f:3b:61:b8:2e:ab:
8b:c9:79:e8:b9:8b:d6:2c:d1:9a:ec:8a:2e:1f:95:
3f:49:52:0d:67:71:a2:66:4b:e2:59:fc:d3:c7:cb:
fa:65:73:1c:9a:62:86:f0:b3:bb:3f:4e:13:c1:45:
86:84:65:38:db:84:51:28:93:37:2f:af:f8:3d:39:
b5:19:2a:ef:a0:70:04:e4:41:ac:5b:32:fb:50:24:
33:b5:a0:8c:4a:9f:9e:f1:e9:d9:12:77:62:b9:9e:
fa:aa:7f:85:4b:e5:c1:eb:24:16:13:8e:82:98:a0:
ef:80:e8:44:35:95:31:da:37:be:57:09:66:b7:14:
9d:6c:2a:5c:25:ae:35:b1:2c:bc:3e:c0:5f:ef:02:
27:15:e4:68:2c:01:8c:c3:93:6a:16:73:0f:9a:b3:
b8:91:e6:bf:56:a2:d1:ec:3d:f7:2b:ab:e4:e1:ce:
bf:90:74:55:82:58:d7:54:91:b1:33:75:e8:74:95:
33:0a:60:04:ee:98:fc:84:1f:56:c2:79:2b:c1:2d:
9a:9c:45:56:3e:22:a4:f7:cc:b7:f1:73:a8:0d:d5:
78:75:b2:99:56:25:43:64:ca:bd:eb:05:3f:f7:9d:
c5:06:35:33:ab:40:ec:a3:f0:32:e9:a8:4e:30:0c:
92:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BB:83:90:19:C2:9F:D4:D1:FA:EC:C4:D8:C8:57:C9:96:57:FE:87
X509v3 Authority Key Identifier:
keyid:8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/E8F4B2C48A0911ED8FCEE137C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.61.18.0/23
IPv6:
2001:df1:c0c0::/48
Signature Algorithm: sha256WithRSAEncryption
32:f8:04:a9:67:b7:52:33:66:d6:70:e3:11:70:53:af:9c:06:
3b:a4:5c:81:08:60:9b:f9:2f:ae:34:19:6f:38:01:51:f7:23:
64:e1:60:e5:37:55:83:7c:83:53:ab:fb:bd:a9:ef:f1:7b:07:
81:e9:9c:90:b6:e9:06:ad:15:04:cd:62:b1:51:32:b1:63:fd:
d5:f4:86:b6:77:21:9c:e0:85:8f:c7:1f:de:11:c2:71:7e:71:
9e:45:04:0e:96:1a:36:dc:07:0b:5c:36:09:85:a6:06:9b:c4:
c7:71:00:8c:2e:88:94:df:b9:98:03:22:66:d0:27:20:cb:83:
22:ce:7a:39:04:66:1b:ae:85:69:1b:3e:f4:bf:a2:3d:06:67:
b9:be:fc:d4:58:eb:19:46:de:e4:0b:40:1b:a1:81:c6:51:b3:
55:f2:ac:53:9e:19:94:31:2e:20:3e:58:4e:1d:a1:6e:11:a4:
6e:b2:ea:5f:d8:d3:21:03:1b:29:89:c2:e7:1e:b1:2c:e5:16:
90:35:b4:e0:19:4a:43:21:ee:85:fd:6e:32:3a:8a:b4:05:87:
3d:44:b4:f1:80:f3:19:8b:3c:fd:6a:bb:32:9f:43:f5:03:86:
27:6b:e2:00:ce:c4:49:09:23:48:31:03:39:82:5b:f0:5f:02:
82:8e:db:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:17:56 2026 by rpki-client