
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/685E441A69BC11EA97D4FE67C4F9AE02.roa
File: 685E441A69BC11EA97D4FE67C4F9AE02.roa (raw, json)
Hash identifier: wJpq8bC8UBkg1ljqnCV5dxMakrdHWzsQ+ZvTcUc6CV0=
Subject key identifier: 43:6D:CD:C1:1F:4D:CC:3F:6C:84:BE:54:69:A4:4A:05:83:D9:94:32
Certificate issuer: /CN=A91AB3E4/serialNumber=EAA792F968863C3FFB9EBD1671A06C145A1B2164
Certificate serial: 0B16
Authority key identifier: EA:A7:92:F9:68:86:3C:3F:FB:9E:BD:16:71:A0:6C:14:5A:1B:21:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/685E441A69BC11EA97D4FE67C4F9AE02.roa
Signing time: Tue 30 Jun 2026 20:23:29 +0000
ROA not before: Tue 30 Jun 2026 20:23:29 +0000
ROA not after: Fri 30 Oct 2026 00:00:00 +0000
asID: 58895
IP address blocks: 103.93.216.0/22 maxlen: 22
103.93.216.0/24 maxlen: 24
103.93.217.0/24 maxlen: 24
103.93.218.0/24 maxlen: 24
103.93.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl
rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:40:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2838 (0xb16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB3E4, serialNumber=EAA792F968863C3FFB9EBD1671A06C145A1B2164
Validity
Not Before: Jun 30 20:23:29 2026 GMT
Not After : Oct 30 00:00:00 2026 GMT
Subject: CN=6a4425c1-b772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:96:39:25:c1:68:4e:b7:9f:ed:c1:5c:79:
7e:b2:42:94:c5:13:0a:2a:b1:60:b1:8f:f3:97:f4:
67:1a:e5:20:15:d3:8f:57:8b:db:b9:e3:84:e9:b3:
27:49:21:3f:56:77:c5:59:b7:76:a6:40:8e:19:09:
2b:f0:87:7c:3d:71:61:ba:20:de:a8:48:7b:70:04:
56:1a:33:04:7c:87:23:f9:a8:ee:8a:f2:39:c1:5a:
15:a9:6f:a0:61:7c:75:7c:73:01:27:ed:8b:29:7a:
67:87:c4:f5:21:b5:97:77:e4:af:a9:8a:12:88:ee:
7e:e8:59:3a:f9:e3:09:62:bb:e5:06:a9:d9:d1:9b:
8b:64:ac:ff:02:24:e0:35:4f:fa:31:df:74:38:64:
7a:ee:29:79:30:d7:8f:9c:64:28:8e:a5:90:26:bd:
7c:de:06:66:9f:1c:96:58:68:c2:8e:f3:2a:dd:a3:
45:1c:1b:ca:5f:1e:2f:0e:26:c6:36:95:71:76:3b:
95:21:f5:1b:a0:d9:a6:51:9a:9d:ed:3a:b4:13:f7:
85:46:32:57:e0:e9:16:c6:64:48:e4:57:cd:3e:6f:
23:a4:f0:a5:d4:f5:15:73:20:ce:c9:6a:c7:c2:45:
2b:77:29:f3:9e:0c:0f:b1:d1:7e:2d:70:fd:d4:e6:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6D:CD:C1:1F:4D:CC:3F:6C:84:BE:54:69:A4:4A:05:83:D9:94:32
X509v3 Authority Key Identifier:
keyid:EA:A7:92:F9:68:86:3C:3F:FB:9E:BD:16:71:A0:6C:14:5A:1B:21:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/685E441A69BC11EA97D4FE67C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.93.216.0/22
Signature Algorithm: sha256WithRSAEncryption
99:54:ea:79:84:9e:81:38:4b:9a:8d:10:bf:f4:c1:ed:28:12:
9b:e2:91:5e:67:d3:ce:07:d9:f8:32:48:d4:ea:ad:62:6a:50:
95:ab:5d:3c:24:1a:b8:8a:d8:e7:80:70:1e:d7:c1:f3:19:e4:
e3:dd:f1:55:59:74:5e:b7:02:56:4b:a7:0b:8b:e9:96:e1:89:
75:a0:90:be:bf:ef:49:46:a8:c5:f9:bb:82:9c:f5:3f:e3:a4:
19:4e:03:42:88:1f:51:ab:91:4b:c1:6e:27:b7:16:69:12:e6:
d9:9e:ba:e1:8a:bd:b8:54:f8:f0:c1:f4:c9:22:d4:37:04:57:
70:29:2c:53:93:20:44:b1:cc:80:21:b0:67:91:73:f1:ba:f3:
27:1c:d8:df:30:dc:e4:50:62:5a:b1:0a:b2:fe:96:21:c7:16:
da:23:4a:bc:42:1f:ad:35:c2:b9:31:6f:2e:d7:f8:b7:5c:f3:
a5:57:8a:ce:04:44:bc:84:24:2d:ba:06:ec:59:b4:81:dc:ae:
d5:7d:ae:6f:b7:a0:2d:71:d6:c8:45:bd:4e:9c:40:a3:0a:67:
78:e5:8e:6e:86:46:9d:ec:d2:f2:76:b3:dc:3b:d1:07:e3:ee:
5b:07:38:dd:6c:f3:b7:7b:18:02:51:fd:c9:45:1a:db:a8:7a:
58:1f:a6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:13:17 2026 by rpki-client