
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/9FD3C6EC45EB11F1A29385B097833773.roa
File: 9FD3C6EC45EB11F1A29385B097833773.roa (raw, json)
Hash identifier: dExHyhgqfE8zJdmuf/00Aoqy7D6f+M0i059P4+A2NUw=
Subject key identifier: 65:B9:02:9A:73:C0:E5:EC:01:94:A2:E7:BD:E9:16:81:AD:81:6A:EB
Certificate issuer: /CN=A91A84E4/serialNumber=B9951714DA42AE01836F04421A3F7E5E0C1868F0
Certificate serial: 1B
Authority key identifier: B9:95:17:14:DA:42:AE:01:83:6F:04:42:1A:3F:7E:5E:0C:18:68:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uZUXFNpCrgGDbwRCGj9-XgwYaPA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/9FD3C6EC45EB11F1A29385B097833773.roa
Signing time: Sat 02 May 2026 05:56:13 +0000
ROA not before: Sat 02 May 2026 05:56:13 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 213840
IP address blocks: 103.104.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/uZUXFNpCrgGDbwRCGj9-XgwYaPA.crl
rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/uZUXFNpCrgGDbwRCGj9-XgwYaPA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uZUXFNpCrgGDbwRCGj9-XgwYaPA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:12:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A84E4, serialNumber=B9951714DA42AE01836F04421A3F7E5E0C1868F0
Validity
Not Before: May 2 05:56:13 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69f591fd-1a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:01:f6:66:22:d5:5f:8d:5e:90:69:c0:9e:a7:
45:9a:12:04:01:f5:b7:f0:7c:b7:3e:09:fe:37:42:
3a:58:d4:e7:57:da:60:f1:09:01:47:63:d7:57:27:
76:91:53:4a:07:62:39:e2:eb:7e:77:bd:24:01:15:
bc:0e:f6:25:a9:d0:46:df:db:4f:0f:a9:0e:c0:c5:
46:46:b4:14:94:3d:44:73:d9:8c:7a:67:72:7d:2f:
93:55:b4:18:64:15:31:a6:3e:84:0d:b3:bd:3d:97:
95:0f:e3:02:50:83:03:59:b0:2c:72:58:6e:13:3e:
32:78:1c:f0:16:db:5f:0b:f5:8c:64:72:07:c9:5e:
0e:f5:b1:04:0a:1d:a7:dd:0f:c5:e5:ab:fc:d5:fa:
8a:47:04:b4:2f:d5:ce:dc:8c:d6:08:ef:cf:38:62:
50:4a:68:7d:ce:a2:5f:d7:3f:39:fc:f1:e7:0f:f6:
9e:f9:d8:4d:02:eb:e5:b8:2c:f8:27:16:82:0b:42:
28:c8:33:fc:cc:97:16:0a:87:24:30:62:45:c6:1b:
d1:28:5e:38:c6:fd:3e:9a:0a:a3:f1:7e:6e:9d:93:
28:f6:cb:63:cd:d4:fe:be:64:40:f7:60:fc:b9:df:
80:c8:9d:0d:1a:0e:20:fc:2d:b5:6a:f2:05:c6:15:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B9:02:9A:73:C0:E5:EC:01:94:A2:E7:BD:E9:16:81:AD:81:6A:EB
X509v3 Authority Key Identifier:
keyid:B9:95:17:14:DA:42:AE:01:83:6F:04:42:1A:3F:7E:5E:0C:18:68:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/uZUXFNpCrgGDbwRCGj9-XgwYaPA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uZUXFNpCrgGDbwRCGj9-XgwYaPA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/9FD3C6EC45EB11F1A29385B097833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.104.104.0/22
Signature Algorithm: sha256WithRSAEncryption
54:48:7c:85:03:48:5f:2f:1f:eb:b8:9f:cf:12:f3:5b:57:6a:
9e:c3:51:ee:23:90:26:62:78:1c:c8:28:f4:ae:ea:95:ea:46:
98:6d:18:7f:31:4b:31:5b:d7:84:7e:2e:bd:ea:c1:65:c2:0e:
d5:9a:36:fc:c7:b7:27:b1:1b:9a:73:3f:12:4f:33:bb:2c:8b:
79:95:38:67:0b:82:9c:5f:70:36:5e:29:72:24:30:11:8a:67:
a8:a6:4f:31:5c:a4:fc:5d:1c:09:3d:d7:49:6f:94:bc:a7:5c:
ed:46:ce:e7:2b:0d:c8:4f:cb:69:51:67:61:1d:e6:02:90:9e:
cb:cc:63:bf:89:d3:54:35:f4:8b:f4:4d:8a:57:2b:df:a5:b9:
19:ef:9d:af:69:42:ef:96:d5:61:f2:b6:e4:63:e6:2d:96:9a:
ba:d7:3f:2b:6d:61:5f:51:c3:db:1e:a9:91:d4:bb:6a:94:fa:
00:f3:09:96:34:8a:70:91:6f:6c:7f:27:c9:a3:c3:cb:e4:94:
77:36:43:ef:8b:89:e1:2a:8c:e6:5d:02:44:88:4f:6f:c7:85:
81:5b:c3:2d:86:af:32:de:50:2e:c3:7a:18:ff:2b:8a:17:48:
6e:01:0e:03:62:41:e5:15:12:97:ad:93:68:bd:e8:a5:d5:54:
da:2f:2e:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 07:14:58 2026 by rpki-client