
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/4FB0329A827311EBAB565A86C4F9AE02.roa
File: 4FB0329A827311EBAB565A86C4F9AE02.roa (raw, json)
Hash identifier: Dk/3Vvh7/c0Dg6EggN4L0LLNQkacjlVZcoivFwpQOUI=
Subject key identifier: 1A:25:D3:DA:30:16:09:8B:F7:09:F5:15:22:08:73:D8:1E:9D:EF:56
Certificate issuer: /CN=A91F6B3D/serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980
Certificate serial: 07DF
Authority key identifier: 7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/4FB0329A827311EBAB565A86C4F9AE02.roa
Signing time: Wed 02 Sep 2026 21:42:13 +0000
ROA not before: Wed 02 Sep 2026 21:42:13 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 134599
IP address blocks: 103.70.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl
rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:18:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2015 (0x7df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6B3D, serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980
Validity
Not Before: Sep 2 21:42:13 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a989835-73a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:55:fc:1a:9f:71:e4:57:cf:81:44:e4:0d:
83:ae:72:94:02:85:aa:e8:d0:59:09:c9:bb:1c:44:
2a:43:36:51:f7:25:ff:24:ba:0c:91:60:7e:4f:8d:
97:15:5b:e5:b0:70:c1:ae:8a:8c:4e:8a:d1:84:30:
76:12:f5:65:89:c5:ef:96:b7:4f:e7:9f:ee:cd:92:
f3:c7:03:e3:38:1f:1d:97:03:8b:e4:c2:46:81:c7:
ed:dd:5b:b7:96:c5:c8:62:cc:df:c6:0e:42:f0:78:
49:c9:b5:8e:8f:73:ab:54:eb:70:ef:f6:e4:c1:f0:
42:5f:96:c5:b5:5d:fa:cb:36:2b:c2:c1:ff:c8:73:
63:5a:69:83:17:ad:6d:5e:49:98:8f:5b:c9:1b:5d:
31:2e:d1:2b:39:5f:4c:6d:0a:66:f0:8a:e0:39:df:
03:f4:c0:4b:90:74:d7:f9:a0:22:f3:47:d2:9d:88:
66:9a:5d:1e:05:f0:d8:eb:6a:c2:e6:ce:b7:34:a6:
55:4d:67:4d:60:ec:13:cf:1e:02:ce:8d:0e:80:b7:
14:cc:2e:48:90:df:c1:66:b3:e4:d0:bc:20:20:bc:
1a:e9:8d:e2:43:4c:6c:8e:2e:fa:fd:c5:08:f6:66:
29:5b:20:6d:30:8e:c6:19:5b:79:33:19:66:d8:8d:
6b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:25:D3:DA:30:16:09:8B:F7:09:F5:15:22:08:73:D8:1E:9D:EF:56
X509v3 Authority Key Identifier:
keyid:7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/4FB0329A827311EBAB565A86C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.70.170.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:58:90:87:21:90:67:48:74:2a:6b:4f:25:91:6c:5e:5b:24:
08:1e:1b:5e:e9:87:d3:42:74:fb:49:e9:6d:c8:91:77:89:77:
09:5f:59:cd:c6:97:18:8e:7b:ac:c8:70:11:68:55:04:2c:04:
84:36:c8:b9:8e:c0:ed:86:65:8a:3d:b2:c1:61:34:e4:20:21:
9f:c5:12:48:12:2c:78:3c:35:62:f0:cf:b0:10:8e:9b:29:36:
29:86:bd:2a:35:83:48:22:21:22:8c:ba:a7:07:4a:c2:40:a7:
7f:ba:64:30:e1:af:9a:c6:c1:03:a6:53:5f:cc:87:d7:10:d3:
54:40:fe:41:51:46:20:e2:1e:75:87:36:d6:19:35:2b:2a:f8:
3e:68:92:96:08:9f:3f:4a:28:29:df:72:5f:2e:b7:6c:cc:61:
8c:d3:07:aa:66:7d:e2:af:99:29:a1:ec:65:7e:fe:41:b2:25:
f1:49:a0:4d:bf:06:50:05:a5:df:67:f4:0d:03:37:a0:ae:da:
9c:8f:7b:b9:f3:f4:85:e9:58:e9:8f:d6:85:2f:b6:01:7e:1a:
ce:26:0a:8c:d6:cb:e3:76:28:cc:50:40:97:f0:6c:5e:56:80:
31:3e:0d:c0:d6:d1:de:01:86:13:75:c3:61:44:ea:b3:50:2c:
3d:2e:2f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:43:04 2026 by rpki-client