
$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/D0BC8E28C4B511EA8323912BC4F9AE02.roa
File: D0BC8E28C4B511EA8323912BC4F9AE02.roa (raw, json)
Hash identifier: CR2jSan4WVvbilZ1W676Y7qalg7FKVHGW317Tr8xfUU=
Subject key identifier: 5E:51:5B:96:94:65:D5:55:03:75:83:13:60:BA:EB:AE:D8:35:FE:87
Certificate issuer: /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
Certificate serial: 0952
Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/D0BC8E28C4B511EA8323912BC4F9AE02.roa
Signing time: Sat 18 Jul 2026 21:21:31 +0000
ROA not before: Sat 18 Jul 2026 21:21:31 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 131475
IP address blocks: 103.31.24.0/23 maxlen: 24
2001:df0:425::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl
rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2386 (0x952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
Validity
Not Before: Jul 18 21:21:31 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5bee5b-44f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:7a:85:e3:29:fe:85:f2:44:b9:4c:bc:0f:
a3:75:55:06:6d:7f:fb:d5:10:57:ba:ba:10:bd:af:
72:c0:8b:e6:af:91:3f:d5:9b:07:c6:fe:97:3d:19:
b0:7e:00:45:f1:af:e7:fe:be:f9:8e:fd:3d:0b:30:
a0:d6:a6:57:cf:8e:06:03:94:ce:c0:8a:01:5c:2e:
c9:e1:ed:78:c6:36:8f:55:3d:b5:81:e5:ef:4b:e1:
27:92:de:fd:98:f0:70:76:0e:fc:49:a2:10:c8:1b:
25:64:b7:04:d6:36:06:90:c3:7a:db:87:58:fa:9e:
95:d9:00:65:b2:2d:20:12:6b:ac:ac:85:b3:f6:03:
01:28:3e:a4:c1:1b:a0:cf:d3:4d:50:0c:f7:f5:46:
a2:6c:30:24:92:26:2e:33:fc:90:9e:70:ae:a8:98:
56:87:4b:da:09:22:61:39:71:0e:d3:cf:0d:87:f1:
34:7b:5d:55:56:6a:af:b6:f8:73:0b:bb:27:b4:20:
c0:87:60:ed:5d:ab:8c:d7:75:8e:08:c1:71:e3:3c:
5b:db:f6:0e:1e:c0:23:13:cb:22:76:eb:b6:07:14:
ca:c4:07:4b:eb:50:3f:9c:6e:77:37:b0:6d:f9:bd:
f2:de:14:76:19:ec:64:40:25:37:2a:f1:a2:7a:9c:
23:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:51:5B:96:94:65:D5:55:03:75:83:13:60:BA:EB:AE:D8:35:FE:87
X509v3 Authority Key Identifier:
keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/D0BC8E28C4B511EA8323912BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.31.24.0/23
IPv6:
2001:df0:425::/48
Signature Algorithm: sha256WithRSAEncryption
9b:f6:26:7b:86:92:75:2c:d7:f2:1e:fc:94:44:6a:e2:1f:7c:
c5:c7:8e:66:b3:fd:30:50:80:82:78:c6:6f:41:ba:30:d0:eb:
35:b3:d3:f4:57:5c:a2:71:84:be:7c:94:e3:17:49:b0:75:4c:
ab:b5:2e:70:49:7e:c6:a9:08:ad:9e:81:ce:9e:4d:75:af:41:
76:30:45:2c:06:3f:c2:e3:7e:e2:03:6c:45:4f:e3:db:4b:ad:
f5:8c:4d:b9:93:fb:f2:c0:ab:f1:03:38:49:1c:da:e8:ce:e7:
c4:ae:32:4f:28:0c:2c:39:c7:ae:7d:85:3b:e6:aa:2f:9e:bb:
36:aa:33:82:aa:03:28:93:0d:ed:8a:68:41:79:23:75:f3:7f:
84:61:09:77:0d:fb:72:c2:cb:0c:41:6e:95:ec:62:46:74:c0:
b7:aa:9d:e9:7f:ad:f9:e9:19:1e:71:8d:c7:55:f7:cf:f6:fd:
61:61:1d:1e:3e:f1:a5:4b:70:63:eb:8e:7a:75:61:50:9d:d8:
db:a9:05:2c:c4:ed:09:e3:da:41:ae:af:5a:2e:4a:ee:08:66:
31:50:7d:69:21:f5:68:da:7c:96:73:50:0e:7d:58:ff:3d:d2:
b7:23:cc:4b:9c:69:c7:99:0b:28:ca:9a:25:ca:65:49:cc:a8:
4b:5a:b4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:40:23 2026 by rpki-client