
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/7588035C913E11EFB46E9A72C4F9AE02.roa
File: 7588035C913E11EFB46E9A72C4F9AE02.roa (raw, json)
Hash identifier: dL/U4UhMZabXz3OJx25MIDSywgaSKV+Fyuq3FcC4oxY=
Subject key identifier: CA:56:8A:23:A2:BE:38:FA:71:24:59:3A:00:F3:C0:64:69:87:75:02
Certificate issuer: /CN=A91FA562/serialNumber=340F813433719A760E3BFE21933687261179C327
Certificate serial: 0237
Authority key identifier: 34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/7588035C913E11EFB46E9A72C4F9AE02.roa
Signing time: Fri 05 Jun 2026 03:33:43 +0000
ROA not before: Fri 05 Jun 2026 03:33:43 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 58914
IP address blocks: 103.24.64.0/22 maxlen: 24
2406:b300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl
rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:38:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA562, serialNumber=340F813433719A760E3BFE21933687261179C327
Validity
Not Before: Jun 5 03:33:43 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a224396-9763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:89:ea:1d:a4:f4:7f:a0:a3:fb:98:26:8c:
0c:e3:43:d2:e2:4d:87:e8:75:b9:2e:45:b2:93:2e:
72:86:e2:84:72:b5:92:7a:b4:c4:97:09:d8:6b:f0:
5d:68:d2:14:0d:b2:1d:4a:43:39:d5:ee:a4:75:3c:
b8:bb:60:90:14:6f:81:70:d1:18:2a:9e:80:7e:96:
33:8d:5d:ff:b2:2b:f4:25:df:34:f1:1c:91:c7:5e:
d3:f5:a5:83:ab:03:1c:58:f0:ba:0a:0a:2f:f6:07:
bf:d1:26:55:da:b5:71:b0:2b:1e:e6:31:f6:1d:38:
22:86:c5:b1:b4:4f:79:df:1e:28:64:64:9a:4d:16:
fc:f9:41:a5:e0:cf:5f:5e:15:ba:23:00:67:82:f2:
44:f2:45:18:19:ad:96:36:85:73:40:72:1b:33:e8:
1b:bc:6b:80:05:04:b6:39:83:20:73:c0:2b:2e:7e:
7d:b3:1e:6b:a9:97:0d:04:40:02:0f:d9:e4:9e:ce:
21:0e:b8:cf:9e:52:7d:ad:db:12:2e:39:21:dd:c8:
5a:2b:11:a4:db:00:bf:ab:86:4e:af:49:07:c9:98:
40:e2:84:1d:d8:d7:06:d4:90:3b:2b:ff:d8:90:a0:
8c:75:db:40:02:9a:83:f6:86:0e:4a:ac:fd:11:d3:
c6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:56:8A:23:A2:BE:38:FA:71:24:59:3A:00:F3:C0:64:69:87:75:02
X509v3 Authority Key Identifier:
keyid:34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/7588035C913E11EFB46E9A72C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.24.64.0/22
IPv6:
2406:b300::/32
Signature Algorithm: sha256WithRSAEncryption
a4:a2:a3:d3:91:61:6d:60:d8:40:cd:1e:64:47:71:88:87:a1:
1a:6f:32:bb:12:23:bf:a6:a8:2f:ee:e6:72:32:73:ba:39:35:
51:45:d8:c6:7f:fb:ff:11:62:4d:9f:49:27:46:6a:db:4d:b4:
18:29:cb:97:de:09:7b:8c:c7:fd:74:ae:d7:6b:d4:95:2c:22:
eb:a3:12:47:69:4d:51:05:b3:7f:9d:a8:20:0f:d5:0b:d2:e4:
36:c4:0a:ca:95:26:0d:8a:e3:49:33:a7:3f:d0:c8:94:e3:1a:
9b:a9:71:a2:36:df:7d:3b:e2:eb:b9:37:c6:31:e2:a3:9a:38:
9f:0a:9a:bb:90:9b:78:d9:ea:64:c1:b5:82:84:22:af:99:37:
ea:ae:3a:05:6a:3c:a9:b7:2c:f5:c1:ed:b1:9a:4d:b5:80:f1:
2e:03:49:f1:f5:2c:71:1f:11:a8:e7:25:8f:44:6d:3c:57:06:
ad:03:65:a8:7d:d1:fe:4d:ea:b3:2b:b0:5a:7f:b3:6d:a6:fc:
b3:26:7c:6e:01:f2:2a:34:51:b3:a7:50:5f:91:09:53:4f:d7:
a6:c2:63:60:f5:3a:a8:bb:ed:9e:75:45:d7:10:79:a7:51:01:
99:8e:80:13:33:ee:72:cc:ab:90:61:76:75:96:81:c4:cc:09:
de:eb:97:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:31:19 2026 by rpki-client