
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/C9763EB431D811EE89285A41C4F9AE02.roa
File: C9763EB431D811EE89285A41C4F9AE02.roa (raw, json)
Hash identifier: 9qjTDIESmxEjzI0WcDUL/9pvn6/XAMgDdbhrxTlivHc=
Subject key identifier: 54:75:7C:DE:54:AB:48:54:DE:8C:96:CC:7F:D9:EB:D8:86:AF:D5:47
Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Certificate serial: 0244
Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/C9763EB431D811EE89285A41C4F9AE02.roa
Signing time: Fri 21 Aug 2026 02:53:12 +0000
ROA not before: Fri 21 Aug 2026 02:53:12 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135404
IP address blocks: 103.154.22.0/23 maxlen: 23
2406:5140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580 (0x244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Validity
Not Before: Aug 21 02:53:12 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a87bd98-39ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:14:b1:62:5f:17:1b:24:3a:e2:d1:1a:0a:
75:53:c1:bc:32:78:6d:06:25:64:fc:06:b2:d3:a2:
22:6e:62:a9:33:f0:ee:37:a8:c1:db:7d:d5:0f:5e:
07:5d:0f:35:23:42:ee:bd:03:bd:a6:75:78:19:01:
c7:46:20:50:b8:c1:a0:05:7d:d7:58:cd:5a:9c:5b:
07:d9:2b:78:7f:bb:52:cb:94:3e:37:e8:5a:b3:1f:
d3:b4:92:02:28:a1:c3:ad:26:59:7c:c2:87:e4:25:
19:d7:9b:8a:ef:af:ad:4f:b9:ad:e3:ef:b6:06:f8:
fa:b9:0d:bf:3b:9b:e2:5d:db:5c:01:c8:22:63:76:
b2:c7:b0:ed:f4:b2:4e:a0:d5:c6:49:80:b3:c0:89:
0c:60:2c:b6:c9:28:aa:fb:95:3c:94:c5:d3:49:3a:
75:54:24:86:38:dc:7b:56:b1:df:cf:9e:e0:8e:c8:
35:ce:56:ff:67:33:4d:8a:85:95:7c:8b:a3:34:c5:
54:2a:e1:52:19:21:c1:7b:0e:7f:13:a6:fa:8b:c6:
14:78:d2:6b:e4:3a:f6:2d:b3:10:f5:bb:c7:89:44:
02:11:79:43:1a:b4:14:01:51:56:43:58:ac:f7:2b:
6a:f6:6c:b8:e0:32:b3:b2:87:1d:6e:1a:60:64:39:
71:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:75:7C:DE:54:AB:48:54:DE:8C:96:CC:7F:D9:EB:D8:86:AF:D5:47
X509v3 Authority Key Identifier:
keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/C9763EB431D811EE89285A41C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.154.22.0/23
IPv6:
2406:5140::/32
Signature Algorithm: sha256WithRSAEncryption
18:4c:29:5f:72:79:ad:52:6b:49:5b:9a:42:dc:a6:55:b3:f8:
84:a9:0c:f3:6d:80:5b:a5:1b:cc:c3:67:cc:f2:90:f6:da:66:
0d:2e:32:c3:58:b0:99:e5:af:2d:4c:aa:70:77:e9:98:35:24:
8f:53:55:4f:c7:df:53:f9:f9:ee:97:47:33:31:3b:71:82:94:
fb:8e:cf:ee:e2:b0:5b:22:42:83:ce:ba:ca:4b:3c:a6:5b:d1:
73:cc:36:40:a0:7b:d9:27:6c:4c:1f:bf:51:f5:e0:04:0f:d3:
57:ea:bc:01:b4:25:62:3c:5d:1b:4b:be:7c:9f:7b:fd:43:6b:
04:ba:af:d0:5e:fc:a2:23:0b:3b:1e:01:5e:ea:d4:36:ba:92:
11:50:a3:ab:ba:bd:a0:7e:64:a4:9e:8f:2f:7e:d1:f0:d5:6d:
d4:d9:51:65:ec:ef:7e:97:85:12:9b:bc:4d:2f:bc:d3:8b:bb:
1d:17:83:68:59:62:3a:ce:9d:33:96:ed:e6:f8:45:d2:d0:9c:
4d:37:58:c8:d0:1d:4b:2e:1a:6c:7e:47:14:53:90:2a:68:84:
3b:71:aa:0d:44:3d:f7:de:cb:96:16:27:f1:7b:50:61:dc:b5:
b8:fd:60:85:30:05:2b:e1:c9:88:a7:d8:04:9d:b1:bc:5c:54:
82:bc:c8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:08:37 2026 by rpki-client