
$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/8F7DDD8889B811EE9E7ABE26C4F9AE02.roa
File: 8F7DDD8889B811EE9E7ABE26C4F9AE02.roa (raw, json)
Hash identifier: 2cFCTlNDIlFSidle/7a/SIVrcL9hkecXR8zTHPDN7pw=
Subject key identifier: 3F:B4:94:1F:F3:5D:44:2A:FD:89:C3:60:5E:89:98:40:ED:55:E1:03
Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
Certificate serial: 0E8B
Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/8F7DDD8889B811EE9E7ABE26C4F9AE02.roa
Signing time: Mon 06 Jul 2026 19:18:55 +0000
ROA not before: Mon 06 Jul 2026 19:18:55 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 103.38.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl
rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3723 (0xe8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
Validity
Not Before: Jul 6 19:18:55 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a4bff9f-2871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:4b:90:94:7a:9a:aa:50:85:c4:bd:75:40:
92:10:77:f4:02:97:b6:bb:eb:c6:09:f9:23:b7:54:
25:e1:c5:8d:d9:5a:0d:8c:83:f2:a3:26:b9:c1:e2:
16:5b:32:58:43:25:61:36:1a:69:9a:69:20:8e:e7:
29:ab:51:6b:60:34:8e:a1:d7:7a:a6:fd:23:31:4d:
05:0f:0c:d2:a4:71:07:bf:be:b7:e1:70:b7:bc:2d:
6d:aa:98:51:3c:55:6d:97:09:f1:e6:2f:57:e4:a4:
19:8c:3f:cf:f6:17:fb:df:38:e3:05:b2:56:9a:b9:
1f:0b:e6:8a:18:1d:d7:9e:b3:e2:28:d4:18:0d:31:
86:b3:d8:a4:16:07:d4:ff:b9:80:5c:2d:1a:ea:64:
99:73:c6:98:21:b4:43:7c:b7:02:3a:8c:95:f0:d6:
ff:ca:b8:9d:3a:d5:51:89:75:fa:3b:c6:a2:3c:4f:
7c:af:c2:fd:5b:7e:49:01:25:43:9f:1d:a3:91:0c:
40:83:eb:84:ee:11:d3:6f:ae:ea:95:0b:f6:fb:5c:
8a:6f:c3:21:2b:32:29:14:17:4f:28:29:32:b4:8b:
eb:e6:20:bc:4a:e9:41:51:fd:0a:c6:7c:fb:71:02:
7e:79:ee:d2:c1:82:d7:d1:b7:43:16:0e:33:8a:37:
c3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B4:94:1F:F3:5D:44:2A:FD:89:C3:60:5E:89:98:40:ED:55:E1:03
X509v3 Authority Key Identifier:
keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/8F7DDD8889B811EE9E7ABE26C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.38.255.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:56:5f:27:37:34:55:6b:1f:bb:14:d9:8d:f5:74:67:dc:44:
6d:fb:d4:99:bf:7d:71:25:5c:97:cb:03:d0:05:9a:8d:eb:cd:
3f:2f:e7:d5:c0:57:c9:6f:42:3b:98:4b:e7:0f:dc:d2:e5:58:
e6:a5:5b:4e:96:f0:4c:83:20:26:da:b9:5b:72:89:09:95:89:
41:1c:5d:8b:67:3a:dd:c4:55:3e:11:7b:12:6e:a3:f6:9b:db:
1a:a0:a5:cb:6a:d7:d6:e5:a8:88:14:26:57:e1:52:c7:bc:0c:
e0:7a:8b:d1:5b:4c:7e:cf:62:d3:19:09:03:c6:34:82:30:32:
11:8f:0e:ef:e6:5e:25:36:98:23:7d:fd:cc:38:fc:6f:e6:cd:
a8:e1:aa:05:ed:ad:de:74:ea:a7:0d:85:53:31:c3:ca:64:77:
aa:85:41:e9:c0:55:b8:63:47:c5:42:38:e2:2f:6b:87:7d:ea:
c3:f7:90:c8:9f:1f:52:1f:1e:4d:98:94:73:b2:d4:dc:1f:6f:
6b:74:f1:23:ef:2b:6a:ef:13:cd:c9:44:6f:70:a8:2b:10:3b:
2c:d3:54:c0:a4:01:a7:90:36:db:52:b9:41:fc:4f:13:9d:c4:
79:4f:50:39:cc:11:2f:7e:f6:1f:e0:ca:fc:7d:1d:5c:0e:9c:
e5:94:21:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:32 2026 by rpki-client