
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa
File: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (raw, json)
Hash identifier: V4nKUz61HSZwR/ee6VqkEGirGyb2lynLTCpeF4/ug/s=
Subject key identifier: C3:18:61:D4:5A:14:A4:DD:D3:DB:6A:BD:03:5B:33:2A:7A:8C:F2:00
Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Certificate serial: 028D
Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa
Signing time: Mon 03 Aug 2026 03:51:05 +0000
ROA not before: Mon 03 Aug 2026 03:51:05 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 133616
IP address blocks: 103.238.195.0/24 maxlen: 24
2001:df3:4300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 02:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 653 (0x28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Validity
Not Before: Aug 3 03:51:05 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a701029-aa51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:10:c4:f5:3a:f9:5b:d7:66:bb:36:db:fa:
b2:5b:88:aa:e7:f0:ff:b3:05:6b:a5:6d:e0:1a:08:
ec:a2:04:45:5c:e0:62:6a:92:73:16:34:cc:2d:6e:
a9:5c:06:47:d0:59:64:26:77:dd:e3:3f:0c:57:14:
45:94:b9:f3:08:1d:df:b1:1d:ff:99:6a:ac:e9:8a:
2b:5d:08:c8:78:01:cf:bc:0e:51:ed:ac:bd:dc:20:
1c:7d:e3:a2:19:79:e4:c4:f4:10:57:71:20:02:a2:
0e:37:1f:3d:18:6b:53:d8:42:0d:14:61:2f:13:8b:
66:a7:a7:40:f9:c0:8e:52:45:0d:9e:2b:c7:6a:5d:
22:92:d9:f4:14:8e:48:aa:f5:bd:55:87:a0:64:b1:
ee:ec:8a:c0:69:ca:51:21:a4:63:50:cb:80:24:43:
d3:87:7b:32:5d:9f:0a:4f:5b:25:b7:b2:41:76:fc:
00:a9:6a:5e:0f:6c:82:15:55:8f:51:63:b6:d2:4f:
9f:b8:0d:96:c4:73:cd:3b:c0:97:e7:39:5a:c5:2e:
d3:6c:b8:1e:78:08:e6:95:0d:59:99:8f:d0:2f:10:
fe:83:3d:39:f5:49:55:0c:42:8b:db:99:8c:32:55:
c9:6a:c2:f5:30:00:33:96:9f:41:31:2e:79:0a:96:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:18:61:D4:5A:14:A4:DD:D3:DB:6A:BD:03:5B:33:2A:7A:8C:F2:00
X509v3 Authority Key Identifier:
keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.238.195.0/24
IPv6:
2001:df3:4300::/48
Signature Algorithm: sha256WithRSAEncryption
46:1c:67:c5:ea:2f:e8:07:98:30:ba:23:e8:51:2d:21:8e:cb:
c5:c9:96:37:5e:7c:fc:28:bc:b2:78:4f:0a:24:49:fb:f5:b2:
1c:28:67:53:70:3d:8b:5f:fe:1b:41:c9:4a:30:17:65:19:40:
1a:4c:17:41:50:cf:79:59:de:b9:9c:19:e0:7b:48:70:5a:7c:
0c:86:9f:ae:57:57:75:0e:bd:9b:8c:f5:d6:2c:f1:d6:67:ee:
cb:77:09:72:0b:fd:b2:22:2d:fc:a1:91:04:37:6b:9d:8d:ed:
9c:6d:45:cb:81:f6:ab:9a:6b:2c:13:f7:8b:a6:15:33:da:c8:
67:c6:65:94:0d:2a:6a:97:8b:7c:43:ec:b6:65:2e:13:ba:92:
8b:67:07:5d:e4:cf:90:a9:af:43:65:fe:1f:b6:ad:7f:a9:36:
dd:a3:16:e7:2d:9d:cc:c8:00:1c:c0:dd:44:69:bd:46:8f:d2:
4e:5e:74:e4:c8:94:6a:c8:29:cb:3a:75:ff:28:da:cb:99:5c:
3a:5f:2c:78:20:24:1a:78:71:80:e2:b6:32:1f:43:64:13:7d:
d6:ed:89:ef:57:94:30:a8:0c:0c:ee:97:27:c3:e3:12:ab:24:
da:98:30:c5:e5:50:13:a9:dc:52:8d:da:86:90:bc:da:6c:3e:
ae:83:26:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:38:16 2026 by rpki-client