
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/F87AC94C35BB11EDB0314E29C4F9AE02.roa
File: F87AC94C35BB11EDB0314E29C4F9AE02.roa (raw, json)
Hash identifier: pPiTdxcTSKQC9bLQgoFkEVRy/4ESB7z1gzijBfyBjgI=
Subject key identifier: D4:BA:93:75:E3:EF:1B:9C:DB:3A:8D:4C:76:BE:66:B3:E0:62:FC:35
Certificate issuer: /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB
Certificate serial: 0912
Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/F87AC94C35BB11EDB0314E29C4F9AE02.roa
Signing time: Sun 31 May 2026 18:03:58 +0000
ROA not before: Sun 31 May 2026 18:03:58 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 137498
IP address blocks: 103.110.216.0/22 maxlen: 22
103.110.216.0/24 maxlen: 24
103.110.217.0/24 maxlen: 24
103.110.218.0/24 maxlen: 24
103.110.219.0/24 maxlen: 24
2402:9040::/32 maxlen: 32
2402:9040::/36 maxlen: 36
2402:9040:1000::/36 maxlen: 36
2402:9040:2000::/36 maxlen: 36
2402:9040:3000::/36 maxlen: 36
2402:9040:4000::/36 maxlen: 36
2402:9040:5000::/36 maxlen: 36
2402:9040:6000::/36 maxlen: 36
2402:9040:7000::/36 maxlen: 36
2402:9040:8000::/36 maxlen: 36
2402:9040:9000::/36 maxlen: 36
2402:9040:a000::/36 maxlen: 36
2402:9040:b000::/36 maxlen: 36
2402:9040:c000::/36 maxlen: 36
2402:9040:d000::/36 maxlen: 36
2402:9040:e000::/36 maxlen: 36
2402:9040:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl
rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2322 (0x912)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F71E8, serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB
Validity
Not Before: May 31 18:03:58 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c780d-1c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:30:13:3e:96:13:08:72:14:73:63:99:9d:
ce:44:af:9b:49:d6:d9:85:95:62:c9:5e:ca:8a:2a:
a1:cd:94:96:ca:d9:f8:fb:c1:d1:8e:97:d1:e4:fb:
9f:74:1f:ed:1d:ad:e9:41:f5:ef:35:d7:59:a4:e4:
64:b4:51:a1:29:5e:65:fc:9b:02:03:92:99:c4:8a:
54:4e:73:f4:a4:f7:0f:be:0d:7b:92:5e:aa:75:6b:
9a:b0:f6:a7:fd:d0:ed:2e:c9:35:90:da:f7:3d:1e:
22:51:f1:c6:ac:08:50:1a:ac:63:a0:0e:e2:95:f2:
3c:9d:20:5a:d3:f9:31:f3:69:69:ad:21:de:69:4f:
3f:32:9c:cc:2c:1e:f5:0e:ce:b7:66:14:be:05:7e:
6b:17:81:11:c0:54:e6:a7:f9:46:9f:e9:67:72:23:
e6:a1:cc:ab:8c:71:2a:9c:f1:43:3d:fc:5d:91:02:
8d:36:19:c7:56:1f:31:f5:16:9c:3e:af:50:b1:86:
3c:b1:40:5d:66:82:ff:e6:35:34:70:32:cc:5c:40:
0c:6b:f9:49:31:4f:60:74:53:5b:b5:51:23:c7:29:
e5:e6:51:50:87:86:3c:a3:c0:93:b7:b7:f6:4e:cd:
0b:77:83:9f:37:22:06:60:9d:92:e7:dd:47:e6:d7:
86:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BA:93:75:E3:EF:1B:9C:DB:3A:8D:4C:76:BE:66:B3:E0:62:FC:35
X509v3 Authority Key Identifier:
keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/F87AC94C35BB11EDB0314E29C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.110.216.0/22
IPv6:
2402:9040::/32
Signature Algorithm: sha256WithRSAEncryption
b4:8f:6a:45:b7:09:cf:67:41:e5:08:26:7f:11:66:5a:6f:64:
5b:dd:63:c2:01:d0:87:d3:70:b9:74:89:6c:fa:9f:01:58:50:
10:25:fa:58:ee:e4:ba:14:28:dc:84:86:ca:a9:59:2c:c1:0d:
e2:c8:5b:83:cc:d1:33:11:c3:f1:70:9f:a3:98:ff:76:b5:01:
0d:b7:18:7e:11:b4:99:44:70:df:c2:8c:65:44:01:0a:66:90:
83:af:1a:9e:1c:7a:e6:f6:31:37:96:7b:c0:26:2c:7a:1e:39:
23:7c:64:09:0f:91:29:f4:7b:0a:19:26:7b:c1:05:6e:0e:27:
19:11:48:e8:f5:6a:a9:4d:b3:ab:55:00:3e:4a:ec:f9:88:59:
d1:81:c2:49:01:c2:2c:4e:72:81:22:d4:8f:d6:75:4b:7a:f8:
8e:89:02:37:36:1b:49:da:13:bc:16:d2:5e:2c:80:3f:68:d2:
8c:eb:1f:9a:7b:f2:5c:ee:54:8f:2b:01:84:e9:dc:c6:36:9a:
a0:ae:a4:e4:fb:6e:84:5b:77:2a:7d:e8:df:7e:5d:da:39:f2:
85:f4:40:29:e4:7a:5e:be:e9:f8:1e:9c:61:ce:fe:0b:96:0c:
8b:07:01:8c:98:2f:87:f8:45:4b:9c:34:ec:79:e1:32:6b:f6:
13:f7:99:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:09:55 2026 by rpki-client