
$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa
File: 7338235CC06011EE882BC34AC4F9AE02.roa (raw, json)
Hash identifier: Aeg61XcuOkOdleV15Q4+Qk8RtuldUKElhU+Yjo/HRrk=
Subject key identifier: 0F:CF:E8:F9:59:70:FD:46:FC:13:84:BC:40:2F:0C:04:0D:E9:9A:72
Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial: 1600
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa
Signing time: Fri 10 Jul 2026 17:17:46 +0000
ROA not before: Fri 10 Jul 2026 17:17:46 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 135106
IP address blocks: 103.209.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:53:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5632 (0x1600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Validity
Not Before: Jul 10 17:17:46 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a51293a-2f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:6f:63:05:4f:76:86:d5:0f:80:4d:0c:50:
5c:83:e9:20:39:97:82:ed:b2:59:f7:e2:1e:07:ad:
49:af:67:68:5b:cc:5a:e5:a8:39:b0:47:23:de:0b:
e5:ae:3e:f0:76:d4:fd:41:ce:6d:de:ef:23:1d:12:
6c:46:e6:f2:ff:fc:6d:fc:30:d7:ca:d5:ab:13:05:
8f:d7:db:cd:2e:5d:d3:13:0f:50:84:8b:b1:5d:ed:
4c:6c:19:7e:6d:12:01:f0:44:2b:46:bc:77:f2:a2:
3a:2a:8a:0d:a6:96:52:d4:2d:01:76:34:5f:ad:1e:
a9:b7:ce:2d:38:9c:f1:b0:74:4b:cc:06:43:34:b4:
8d:b9:58:49:89:c1:a2:f3:5b:57:a8:c5:b5:c5:65:
26:db:32:1a:aa:9b:65:01:1b:f4:c6:c6:25:ea:8b:
fa:4a:17:b3:dd:58:41:d5:60:7c:b7:37:78:35:ba:
71:6e:a2:b7:a1:aa:57:3d:4f:40:31:e1:b8:a2:57:
af:f3:94:68:9f:55:0a:40:4a:f6:3d:89:30:ca:d1:
6a:2d:82:f5:33:14:01:99:38:6b:d4:b6:98:8a:de:
49:2b:36:c2:26:17:be:1b:b4:ae:08:d3:7b:12:51:
d9:88:b5:30:9f:4a:82:4e:22:a2:c6:09:5d:01:e9:
c0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CF:E8:F9:59:70:FD:46:FC:13:84:BC:40:2F:0C:04:0D:E9:9A:72
X509v3 Authority Key Identifier:
keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.209.124.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d9:9b:e1:86:03:b9:a7:d3:4d:0c:e6:d7:e4:94:90:cf:c4:
82:48:b9:bc:0a:e8:24:72:37:9e:60:65:96:7c:77:12:9b:e2:
ff:9c:f8:1c:7a:66:99:96:44:f0:ce:d4:cd:23:9c:83:8a:13:
25:6f:b9:12:4d:a7:0d:68:69:a0:cd:38:3c:d1:0d:a7:b8:20:
ec:4a:bf:f6:cb:45:e8:33:cc:09:8a:06:c0:6a:77:80:f4:43:
70:3c:85:58:8d:15:a5:30:20:15:65:61:57:af:a3:16:35:7e:
bf:51:dd:b5:10:f6:bd:95:e8:42:7c:de:17:99:6e:d5:c1:25:
60:dc:1f:65:e7:e6:16:fc:33:dc:ce:ef:6c:82:60:87:2c:b8:
ff:3a:3a:16:7b:03:0a:37:09:c5:14:f8:54:b6:c4:0e:c9:c0:
35:a8:5a:de:ea:70:06:ad:a7:5d:fc:f5:15:f4:cf:18:c2:7c:
99:cb:52:12:16:cb:c7:23:dd:b8:53:23:33:14:5e:e8:60:64:
1d:98:d3:ad:13:7b:be:2b:c5:81:af:e5:c9:31:5c:1f:44:94:
9a:bf:9b:8b:79:8d:9a:9c:7f:07:c0:e3:34:97:8d:0f:90:e7:
29:b2:22:a9:d2:07:9a:e5:e4:30:10:88:7e:1f:14:a3:04:75:
03:b6:b0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:21 2026 by rpki-client