
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/8B37D2C40D2511EFA2E4D985C4F9AE02.roa
File: 8B37D2C40D2511EFA2E4D985C4F9AE02.roa (raw, json)
Hash identifier: Nnnq4X2pr12xKRIifzfba52zTnL3E4FSIZx5q2aHomI=
Subject key identifier: 58:CE:E0:68:A2:D5:C7:5D:94:B2:6A:2C:33:54:6C:E4:35:97:E4:27
Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47
Certificate serial: 0BE2
Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/8B37D2C40D2511EFA2E4D985C4F9AE02.roa
Signing time: Tue 28 Apr 2026 19:25:10 +0000
ROA not before: Tue 28 Apr 2026 19:25:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134204
IP address blocks: 103.211.28.0/22 maxlen: 22
103.211.28.0/24 maxlen: 24
103.211.29.0/24 maxlen: 24
103.211.30.0/24 maxlen: 24
103.211.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl
rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3042 (0xbe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A06F2, serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47
Validity
Not Before: Apr 28 19:25:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f10996-aac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:31:00:61:8b:75:21:a0:15:8b:71:12:85:
3d:a7:7d:d0:9b:50:87:bd:73:b4:12:4c:ea:90:2f:
67:cd:7a:71:98:71:d9:3a:48:5d:30:e7:a1:17:ae:
02:b0:a1:78:8e:7c:af:4b:ca:c8:da:8f:0b:9a:0e:
e1:9d:e2:e2:80:84:57:15:fc:d6:b0:2a:85:c2:b7:
8c:ec:93:ec:79:4b:d2:26:92:42:fb:3f:8f:c1:b8:
e6:1d:e7:b8:de:5d:a7:d2:b8:39:b8:ed:02:f7:e4:
ff:15:8a:3b:05:87:ab:8a:0c:45:34:91:62:bc:cb:
d0:94:17:ed:ac:c4:20:8f:a9:04:ad:05:f9:dd:c3:
f0:96:4c:6c:0d:d6:d6:5c:1b:00:7c:05:6c:65:2a:
8d:33:ba:f1:9c:66:fb:d7:47:09:f2:1e:54:4b:a4:
f8:ff:ca:17:eb:17:09:34:65:66:cd:ac:69:36:af:
d4:79:c3:0c:49:38:fc:0a:1d:55:0e:ad:65:79:e6:
0e:7d:e8:51:0d:d0:9c:44:b4:ca:12:11:48:bd:e9:
de:d0:cc:9c:58:80:6d:07:57:85:19:a3:74:96:ce:
74:aa:79:3b:be:b3:39:41:72:73:c0:68:a0:4e:31:
f6:59:af:58:cb:bf:53:fe:27:a4:dc:8f:7f:19:64:
55:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CE:E0:68:A2:D5:C7:5D:94:B2:6A:2C:33:54:6C:E4:35:97:E4:27
X509v3 Authority Key Identifier:
keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/8B37D2C40D2511EFA2E4D985C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.211.28.0/22
Signature Algorithm: sha256WithRSAEncryption
75:b6:27:04:fc:fb:0a:49:a9:10:9b:04:7e:61:db:31:df:fc:
a0:5e:35:26:58:a6:df:30:a8:56:0b:25:67:4b:f5:2d:0f:5d:
e6:04:ce:37:67:dc:46:a3:09:fc:0d:f6:ca:f8:75:c4:c8:c4:
2c:29:a4:3c:30:69:56:bc:14:06:7f:68:f2:f9:10:b9:c2:6a:
eb:2b:85:eb:56:91:3a:00:a3:33:a1:c3:d5:20:eb:69:6a:e7:
0f:88:68:36:e0:57:0d:61:47:33:25:b6:bb:b4:0a:85:09:ce:
ae:12:ae:ed:4f:a2:6b:92:d9:91:7e:38:b6:3f:6f:da:97:54:
38:d8:1f:8c:13:c7:48:8c:1e:5b:b1:c5:2c:5e:80:b7:b4:d9:
2b:4e:6a:50:53:34:0a:ad:f0:69:f5:fa:71:28:af:58:2f:0e:
71:fb:27:60:fc:ac:7f:6f:80:d3:00:87:d1:a3:aa:3b:65:7b:
bd:4d:92:fb:0b:62:32:1d:1a:e4:2c:ba:d2:5d:dd:b7:a9:db:
13:94:a9:71:0e:98:39:3f:fa:ab:d9:cc:b5:6e:3a:7f:bd:7b:
fe:ed:3a:21:32:21:d0:9c:ca:df:5e:75:22:76:4e:6e:c8:18:
83:14:2f:51:6d:68:bd:16:06:5c:23:e2:1b:f5:4a:c6:33:ff:
1d:a5:24:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:12 2026 by rpki-client