
$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/39397B6C69BE11EFA850E254C4F9AE02.roa
File: 39397B6C69BE11EFA850E254C4F9AE02.roa (raw, json)
Hash identifier: Rnz7YdmM/dFUbfVZUB1hF2F9t7TaIkBVLBwLs6I5YcM=
Subject key identifier: 9E:5A:EE:29:6F:92:F4:70:EF:8F:E0:C3:BE:31:3A:CD:A2:70:66:CB
Certificate issuer: /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Certificate serial: 066D
Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/39397B6C69BE11EFA850E254C4F9AE02.roa
Signing time: Fri 10 Jul 2026 23:24:33 +0000
ROA not before: Fri 10 Jul 2026 23:24:33 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 131341
IP address blocks: 103.69.124.0/22 maxlen: 22
103.69.124.0/23 maxlen: 24
103.69.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1645 (0x66d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF
Validity
Not Before: Jul 10 23:24:33 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a517f31-49dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:81:f8:7b:9f:e7:1e:d0:fa:ed:66:3c:7d:
a0:e6:05:22:15:dc:ad:ab:31:e9:13:63:68:33:53:
fc:f7:ee:d2:2b:4e:f7:52:03:09:d2:2b:f4:e4:fb:
32:33:d4:5b:90:47:35:67:22:f0:ec:1e:7a:9a:4c:
bd:74:fc:8b:84:67:7a:b6:f7:fd:83:8c:9d:e6:34:
ea:59:8d:a6:12:ef:6a:21:4b:18:06:fd:30:05:af:
f3:e5:ef:12:ff:9b:c4:bc:0c:7f:52:a8:7e:45:9d:
ce:72:46:3a:91:82:d9:14:d0:32:64:dc:81:51:14:
56:8f:5e:e9:73:43:b3:38:29:14:15:05:37:06:2e:
4c:6d:6c:7f:e1:e0:32:f4:bd:2c:21:6f:8e:89:04:
c7:40:92:26:16:8e:13:f7:e0:65:ca:7d:95:5a:4c:
f5:d1:28:61:e3:29:76:04:ae:5a:06:37:5e:5a:12:
1f:58:7b:fb:19:1e:57:55:10:71:1e:6c:a2:6d:83:
c9:aa:e3:9b:d8:62:5c:b6:36:50:dc:fb:17:e3:07:
98:2a:b1:61:59:17:50:58:8a:b7:32:56:15:16:9d:
99:45:90:46:a4:ba:47:21:4d:1e:b6:b8:e3:97:9e:
ec:15:7f:51:88:e8:c7:f0:29:cb:0e:3a:c8:e8:0e:
ae:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5A:EE:29:6F:92:F4:70:EF:8F:E0:C3:BE:31:3A:CD:A2:70:66:CB
X509v3 Authority Key Identifier:
keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/39397B6C69BE11EFA850E254C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.124.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:56:77:a8:1f:fe:14:84:39:75:de:42:4d:56:4f:ce:7c:9f:
b7:fb:79:bd:f9:63:2c:19:45:76:8c:a4:30:cd:ed:67:be:85:
fa:4c:db:6f:a2:7c:c0:73:44:84:e7:f6:34:e9:c9:c9:75:aa:
ea:e4:97:19:73:2a:56:e8:db:33:66:95:a4:58:f4:2b:e9:5e:
34:fb:00:ba:24:ea:eb:0d:07:ca:81:72:50:9d:02:1c:a1:21:
ec:41:b3:23:45:40:88:00:b0:34:f0:0d:bd:d5:e8:3f:9e:4d:
0e:af:70:e6:a4:27:18:a3:6e:ae:36:98:35:c4:f0:7f:1f:f6:
0f:a3:b3:60:10:3a:0a:be:3b:77:4b:bd:9f:15:0d:fe:63:08:
3b:83:06:0e:2b:40:1f:6f:86:58:c5:92:87:c2:9c:ac:e2:3e:
ec:55:cb:80:e9:c8:8e:cb:06:9b:62:3a:b2:67:2a:63:d6:f5:
56:5f:68:0a:a3:a8:f0:2c:9d:a2:76:48:b2:63:01:9c:55:e8:
81:0d:77:24:4e:6b:3c:e2:12:9f:df:a3:14:1c:0b:7e:f7:05:
dc:b7:85:a1:40:ff:4c:ed:2b:cf:2b:92:54:32:f9:bb:d8:9c:
6a:a4:3b:26:56:a2:6c:93:dc:76:45:76:ea:02:43:5c:0c:3c:
7a:f1:ac:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:32 2026 by rpki-client