
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/7AFB859484C711EF9740BE81C4F9AE02.roa
File: 7AFB859484C711EF9740BE81C4F9AE02.roa (raw, json)
Hash identifier: x8sZ4QxQXhvPiVMJ2oKAKBGtbntHbWyBpumXqbB9h14=
Subject key identifier: 4C:8E:BA:AD:A2:FC:E8:BE:10:C3:E0:7B:48:57:92:AB:7C:AC:34:93
Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial: 067B
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/7AFB859484C711EF9740BE81C4F9AE02.roa
Signing time: Sun 14 Jun 2026 23:26:30 +0000
ROA not before: Sun 14 Jun 2026 23:26:30 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 55933
IP address blocks: 103.214.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1659 (0x67b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Validity
Not Before: Jun 14 23:26:30 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2f38a6-8802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:67:5e:5b:61:9e:ad:bd:99:59:4d:59:fb:
1a:80:93:12:10:a6:da:a3:f4:2a:90:ed:71:51:8a:
f6:a8:77:95:1c:f6:af:d1:79:02:e0:6b:5d:51:67:
1b:a7:72:18:7f:ba:84:56:36:40:08:80:b1:1b:81:
69:be:69:5e:16:f2:db:4c:95:7d:57:39:f2:35:a3:
da:87:a1:a8:98:e2:4c:3d:d6:7b:18:0b:2e:d5:51:
96:47:d6:fc:70:2f:8f:87:89:1c:b7:91:d6:83:21:
2c:ed:f6:fb:69:58:0f:0b:3a:ee:52:5f:72:85:59:
f5:99:5b:f7:d5:84:c1:0b:e9:ee:47:3e:e9:89:61:
4f:e0:c1:ae:a2:0e:0f:93:65:c6:34:e2:28:d7:f0:
d8:30:c0:5d:1d:31:8f:2e:75:7c:af:fd:ac:1e:d9:
9f:7d:5f:a2:1a:79:69:d3:45:0b:7e:ee:f2:54:c3:
fd:e2:60:79:7f:0a:63:b7:7f:d9:1c:c5:4b:f0:bd:
0e:65:9e:e1:a5:3e:a4:4b:56:6a:35:9a:00:79:79:
9f:0a:89:47:1a:2c:a9:c0:f9:c0:ab:43:30:bf:7d:
ce:0c:bf:05:f3:98:3f:a4:07:03:62:23:23:c8:5b:
2d:87:19:c6:8f:4d:49:2e:34:a5:b3:2f:29:be:32:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8E:BA:AD:A2:FC:E8:BE:10:C3:E0:7B:48:57:92:AB:7C:AC:34:93
X509v3 Authority Key Identifier:
keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/7AFB859484C711EF9740BE81C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.214.172.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:a7:1e:a4:d3:72:f6:3b:51:3f:5f:95:03:69:d9:f5:fc:3e:
12:40:65:19:c1:4f:2a:68:73:7d:8a:a0:96:6c:eb:2b:09:10:
5c:50:e5:f3:9f:3d:d0:60:53:a4:51:6c:39:a7:ec:b7:98:a6:
bf:b2:8c:c8:c8:37:42:89:c8:6d:f6:a6:68:d2:d2:1e:4f:d9:
8c:ba:72:70:da:f3:9c:0c:00:61:1a:11:5a:82:ba:15:3d:62:
76:00:92:06:71:e0:c8:f0:38:31:18:13:81:dd:4a:e5:c8:5c:
28:f2:8b:fd:36:bf:d1:48:c8:ba:f5:16:e7:30:47:be:20:0f:
9c:17:25:89:91:0f:f6:e4:8e:7c:41:b9:db:fa:4e:25:da:55:
12:7a:12:ea:1e:28:fb:be:83:4d:87:da:d9:e5:dc:6e:51:08:
c8:d5:02:8f:9b:cf:98:22:41:59:8d:ef:13:e5:23:2b:ac:5d:
1b:b1:8c:bc:5a:b1:ce:3e:4b:22:3e:bc:b5:69:72:8f:f1:0f:
fb:86:11:5c:dc:44:a6:27:fa:b4:f4:96:b9:fa:89:c2:69:35:
e5:19:27:c9:7d:52:b7:d3:59:f5:12:52:a8:47:b8:27:a7:ec:
44:d6:e7:c2:ba:9c:62:24:f3:05:b6:4e:90:38:af:28:37:93:
9f:a8:9e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:08 2026 by rpki-client