
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/97B81DD6BF9F11ECAB5B1239C4F9AE02.roa
File: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (raw, json)
Hash identifier: OhAzKBerxXTp038deHSgx6f20NkMAUKF1iAsoKTjbdA=
Subject key identifier: 31:60:94:30:15:3B:13:DB:59:46:D2:D2:B4:E7:45:26:E1:91:81:A0
Certificate issuer: /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
Certificate serial: 0437
Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/97B81DD6BF9F11ECAB5B1239C4F9AE02.roa
Signing time: Fri 11 Sep 2026 00:50:35 +0000
ROA not before: Fri 11 Sep 2026 00:50:35 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 55720
IP address blocks: 103.154.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl
rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1079 (0x437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9749, serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457
Validity
Not Before: Sep 11 00:50:35 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa3505b-16df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:0a:eb:d0:eb:49:38:5d:03:30:fe:49:a0:
9d:f9:e4:e2:60:93:1f:82:7a:75:6c:19:de:c2:79:
bf:8a:c0:2e:ab:93:d0:97:a1:3f:af:d7:22:71:b6:
25:29:42:ec:21:2b:2c:8a:06:6a:b4:a4:ce:d2:48:
e2:b4:d1:56:ca:7c:14:cd:80:08:dd:4f:92:3a:63:
e3:36:3f:d6:7b:b8:52:13:e5:bc:a3:be:e4:45:c9:
e5:60:e4:b2:2c:0d:e1:bb:c6:45:fc:a7:b2:68:6d:
66:6f:cf:5d:16:ef:35:cc:7a:7a:2d:4d:cc:43:d5:
96:76:12:3d:80:af:bb:e8:04:a6:1f:e0:28:c5:f8:
a5:4f:db:6d:ca:3e:15:54:cf:5b:0b:fd:6e:7f:7a:
4f:22:81:33:f1:ef:13:73:b9:85:99:76:82:15:27:
8f:8d:42:ea:e7:71:7e:c5:e1:69:c7:a4:89:18:8d:
e5:ef:4c:4d:98:67:46:90:e5:ca:2d:66:49:d4:cd:
5b:ff:47:e1:b2:af:00:3e:75:74:79:14:8f:3b:11:
74:89:dd:f8:fd:03:3c:42:1f:81:39:04:53:ba:ed:
e6:62:8b:4a:b8:d1:0f:47:02:2e:05:cf:ab:b5:e5:
d0:41:09:84:df:24:d1:7b:0f:da:65:ba:c8:ec:b3:
e0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:60:94:30:15:3B:13:DB:59:46:D2:D2:B4:E7:45:26:E1:91:81:A0
X509v3 Authority Key Identifier:
keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/97B81DD6BF9F11ECAB5B1239C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.154.232.0/24
Signature Algorithm: sha256WithRSAEncryption
66:54:7f:20:c2:bd:1f:27:4d:f9:2a:83:73:9d:66:36:d7:4f:
a7:ef:e5:72:38:4a:0e:52:e2:21:0e:fa:29:ca:d8:3c:ac:cb:
ba:b0:c7:a3:9c:a3:cc:4a:8a:9d:67:29:6f:43:69:2d:fe:7e:
82:59:77:38:9c:ef:b8:45:d8:2c:2d:19:e8:c2:5b:9c:78:f3:
61:cd:5e:b0:66:87:f0:83:e8:53:69:75:72:73:cb:84:b8:40:
29:55:79:f5:f3:36:da:df:c6:af:80:d2:c1:5e:8b:ef:d6:26:
ed:a9:e8:83:0b:d5:a6:a6:c9:2b:f8:38:15:40:6f:b4:6b:97:
54:36:52:47:b7:c1:79:c4:e0:ea:de:a4:5a:9d:35:9d:a1:b3:
89:89:e3:27:eb:9f:cb:c9:22:9e:ad:b6:e2:4f:20:d6:58:21:
66:97:70:e5:1a:36:61:ef:4e:dc:2a:ae:42:00:f4:87:3a:b1:
15:80:e2:43:c1:d7:46:f1:4b:35:ed:df:f6:45:4d:3e:86:bb:
c1:12:6f:3f:31:8f:2f:00:7d:ac:74:b8:63:b7:c7:fb:d0:9d:
bd:84:9f:9b:da:f9:52:81:ac:95:c4:16:76:78:6e:f4:b1:20:
fe:57:ac:62:da:08:45:3d:40:53:16:9b:a9:eb:70:60:ae:10:
cc:7e:9e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:43:42 2026 by rpki-client