
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/3285ADDAA9D911EF9F30DA47C4F9AE02.roa
File: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (raw, json)
Hash identifier: +Q5nKPGWk+p3UlgUq1iI8faQlTFhbbeU43G1My05KlM=
Subject key identifier: 05:BC:43:A1:FC:91:A2:15:36:99:10:28:23:2B:7A:8A:4D:3E:22:4F
Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33
Certificate serial: 01C8
Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/3285ADDAA9D911EF9F30DA47C4F9AE02.roa
Signing time: Thu 11 Jun 2026 06:41:40 +0000
ROA not before: Thu 11 Jun 2026 06:41:40 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 103.14.23.0/24 maxlen: 24
2001:df3:ad40::/48 maxlen: 48
2001:df3:ad41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl
rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33
Validity
Not Before: Jun 11 06:41:40 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2a58a4-9d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:7a:bf:2b:7a:69:16:69:fb:40:15:f2:aa:
c5:8c:b8:90:2e:5b:af:04:47:44:da:b1:2a:50:3c:
37:80:f7:0d:5c:13:6b:77:fc:3a:c4:ab:ba:bb:b8:
b8:4e:56:2d:5a:52:a6:e4:f4:47:ef:1d:5e:b5:4a:
08:62:2e:8c:f1:f7:31:88:a1:ea:c4:20:0d:b8:aa:
93:bb:e2:42:64:5a:3e:2d:3e:17:41:6b:dd:56:e1:
78:ca:48:ed:cb:50:08:87:46:39:de:bf:20:be:2e:
07:a0:8e:e9:67:71:35:8b:f8:b1:47:3b:22:72:52:
9a:ae:d6:49:cd:41:2a:f0:b9:ce:83:a2:ae:26:e6:
c2:72:1a:2d:84:81:85:81:bf:cc:59:b8:a2:bd:9d:
de:08:0c:44:38:91:82:9e:3e:62:3a:64:f9:87:7c:
05:4c:d8:5b:20:57:41:d1:ee:c7:09:ff:16:ff:07:
9e:64:c9:8e:65:33:b1:5c:b2:a1:8e:7b:52:90:90:
cc:5b:d0:c4:5f:6c:07:30:f2:4b:5c:d6:00:5d:89:
52:cc:a2:29:cc:e8:24:72:01:12:79:48:74:06:8b:
62:39:27:88:3f:fc:ba:fb:c6:00:4a:9b:10:58:11:
73:61:75:76:4b:cd:9b:d1:c2:d0:52:05:7d:79:b1:
07:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BC:43:A1:FC:91:A2:15:36:99:10:28:23:2B:7A:8A:4D:3E:22:4F
X509v3 Authority Key Identifier:
keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/3285ADDAA9D911EF9F30DA47C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.14.23.0/24
IPv6:
2001:df3:ad40::/47
Signature Algorithm: sha256WithRSAEncryption
ac:e4:6b:af:90:72:ba:e7:62:87:0f:4a:d6:d0:e5:2d:4b:03:
fd:71:15:2e:1a:0e:9d:77:3f:36:6f:f1:2f:36:0b:3b:79:4e:
ce:31:74:d7:1a:09:0d:9b:19:33:54:db:a1:8a:cd:0a:79:04:
8d:25:20:9b:fb:62:1d:09:b6:93:6e:f2:bb:f3:77:ee:b4:cb:
ac:32:fb:14:06:68:8e:9b:6d:7e:4c:38:c3:ff:38:52:0c:b8:
1e:56:9f:8c:69:a4:71:a9:7f:a7:39:b5:4c:18:44:22:92:f1:
52:e3:76:07:72:5f:41:1f:27:61:c5:e4:16:a6:ab:fe:a0:67:
e9:c6:09:ff:b3:3d:14:01:47:e7:f4:90:84:08:c1:23:84:55:
30:c0:de:98:97:65:0b:c2:55:35:e6:a5:66:2a:c4:c4:20:dc:
ab:fb:2c:f7:53:6f:25:cc:16:bc:36:52:93:3a:c4:1c:9b:91:
ad:b3:b1:b5:2a:45:e6:ec:f5:05:8b:a7:08:b2:2b:d7:24:a8:
c9:2e:62:fd:95:80:4c:6a:08:eb:f2:dd:17:ac:22:6c:5b:a4:
14:b3:43:12:85:24:91:9b:8e:01:4d:31:5e:f9:d6:97:14:fe:
c7:46:4a:63:12:68:14:ef:ef:59:02:05:79:5b:1a:06:09:ba:
e3:90:f2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:04:44 2026 by rpki-client