
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/88F562E83DAD11EFAA46E417C4F9AE02.roa
File: 88F562E83DAD11EFAA46E417C4F9AE02.roa (raw, json)
Hash identifier: jdv9aFQwiqYHiD+UTmhCieAj9Roy5CCX8WuHmncx1eQ=
Subject key identifier: 95:61:C5:60:E0:32:4A:CF:4D:30:69:69:5E:A5:50:98:B0:ED:6D:4E
Certificate issuer: /CN=A91AA618/serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43
Certificate serial: 018D
Authority key identifier: A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/88F562E83DAD11EFAA46E417C4F9AE02.roa
Signing time: Thu 23 Jul 2026 06:32:30 +0000
ROA not before: Thu 23 Jul 2026 06:32:30 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 137209
IP address blocks: 103.104.232.0/22 maxlen: 22
2402:1dc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl
rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:32:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA618, serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43
Validity
Not Before: Jul 23 06:32:30 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a61b57e-b0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:1f:84:33:94:32:7e:13:e5:56:dd:d0:82:
19:9f:ea:7b:2f:ac:66:98:af:24:10:69:e0:27:11:
4c:b6:4f:b6:ba:59:06:9a:c8:2d:da:e3:13:43:4f:
50:b3:7c:f0:7a:87:de:ea:ba:7b:3d:1a:da:81:0e:
5e:38:a7:17:cc:b1:2a:2d:b3:4b:08:e2:3c:13:03:
4c:95:a2:65:c9:eb:ea:05:69:bd:19:f8:0b:29:ad:
44:b9:e3:30:73:e1:d5:c8:30:05:00:41:05:8c:f3:
61:db:96:df:a2:1c:43:fa:b7:29:7e:81:9c:8c:04:
b5:c7:fd:e7:12:c1:3a:e7:51:e5:ad:27:6b:87:21:
84:ac:21:92:28:8c:76:3b:c9:85:a1:8e:ac:b1:ef:
aa:18:d0:46:91:20:64:50:f1:0d:a8:ec:6a:62:75:
f6:66:cd:6d:0c:0f:c4:5e:12:54:45:d3:65:1c:21:
a2:0c:52:f5:27:24:f3:8c:0d:bc:93:c2:f2:48:52:
4f:d7:cc:dc:ca:51:b1:02:1b:a2:9b:40:ff:9a:b2:
36:41:ff:78:e4:25:e1:a2:47:a5:7a:67:0e:a9:b5:
5e:d3:83:b2:5d:00:62:0d:53:1b:a7:3f:0e:24:3d:
b8:76:73:52:2c:a1:89:31:e0:00:1d:b6:0b:8a:ec:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:61:C5:60:E0:32:4A:CF:4D:30:69:69:5E:A5:50:98:B0:ED:6D:4E
X509v3 Authority Key Identifier:
keyid:A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/88F562E83DAD11EFAA46E417C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.104.232.0/22
IPv6:
2402:1dc0::/32
Signature Algorithm: sha256WithRSAEncryption
05:9b:13:f9:b4:2e:be:64:18:be:da:30:a5:83:21:f4:24:49:
0a:4c:bd:ff:e4:90:55:54:fe:71:e4:e9:b8:f0:0b:db:52:a8:
83:f6:63:50:6f:9a:a0:e6:dc:79:4a:3d:d4:7a:c2:4f:56:2e:
50:02:08:c5:68:64:7c:c6:5e:3e:4d:28:db:2b:de:ef:7b:f7:
d7:42:de:bb:7d:f3:80:19:b4:89:9a:78:6a:c5:ac:92:6d:14:
ff:e3:92:1e:6c:e1:04:71:f9:f8:9d:ed:32:a8:94:bc:7a:4b:
ed:37:11:e6:43:31:3b:c3:32:79:4a:b6:97:91:37:07:c1:c1:
e7:fa:9e:49:dc:51:d7:65:a4:d7:47:11:24:f6:17:23:9a:1d:
9c:1e:e9:18:f8:47:9d:8d:b3:f0:22:74:6e:23:2b:c1:d7:88:
7c:d2:46:0a:6f:d6:30:a2:cf:92:d6:43:c6:fa:5a:65:e3:a4:
df:cf:cc:74:41:35:ff:b3:de:83:4a:49:cd:54:14:d6:21:16:
3d:96:ae:cd:8d:6c:c8:1d:30:f9:91:17:e6:f8:6f:84:c2:65:
51:93:61:40:90:5c:f7:0a:cd:18:6d:a5:a7:ec:01:53:95:d9:
ec:05:d8:0b:b7:de:bf:ca:ac:ee:7a:47:e1:36:6f:e3:6a:da:
1d:1e:3a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:43:24 2026 by rpki-client