
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/9AB3F8BABB3111F1BAB9CEAE6D11F970.roa
File: 9AB3F8BABB3111F1BAB9CEAE6D11F970.roa (raw, json)
Hash identifier: FR5egO3pKbKnicc08FWFpCRQO3WPuUafCXH62c8iCos=
Subject key identifier: 24:3F:3B:DA:F5:9F:27:85:B2:97:CD:9D:B7:7A:FD:C2:36:01:95:C9
Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9
Certificate serial: 0DDD
Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/9AB3F8BABB3111F1BAB9CEAE6D11F970.roa
Signing time: Mon 28 Sep 2026 11:41:55 +0000
ROA not before: Mon 28 Sep 2026 11:41:55 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 140038
IP address blocks: 103.143.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl
rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3549 (0xddd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9
Validity
Not Before: Sep 28 11:41:55 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6aba5283-1337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:85:98:49:8e:21:d3:11:81:26:a0:b7:18:
90:cd:73:c3:30:0f:49:ec:42:2f:f9:f0:54:bb:7c:
d9:89:a7:ec:11:c5:45:bc:d5:2b:ed:b3:b1:9d:fd:
90:96:62:0c:5e:35:21:12:82:f8:ce:9c:3b:39:8c:
da:05:f9:01:83:03:df:c2:44:f9:de:a9:09:0e:18:
9b:3d:7d:7f:29:37:bf:8c:45:6b:ea:b9:03:48:61:
bb:97:bb:16:5f:e2:2f:e6:24:8c:b0:ac:fc:22:23:
31:5a:fe:bd:47:05:6c:b1:78:f3:3f:2a:a0:e5:9e:
04:b0:aa:e7:7d:9d:b4:28:16:15:00:9f:23:1f:7d:
1b:ad:c0:bf:9e:d2:da:e0:12:fb:80:e8:fa:ec:e9:
06:5d:b8:f7:7d:71:59:34:87:16:a6:5c:57:5e:79:
5e:ef:19:be:7a:9d:5b:45:41:89:5c:b9:a0:45:08:
3e:af:51:62:52:0e:e5:a4:02:55:a4:6b:fe:07:9d:
13:e9:c3:f2:55:30:6e:20:da:7a:01:30:99:c2:17:
7c:00:c0:31:eb:be:5f:96:51:b6:71:7a:26:4d:d1:
45:fc:df:c1:b7:25:4a:86:2a:fe:82:ec:4a:fb:83:
db:3c:07:dd:9a:b5:5d:5b:15:a2:51:a0:75:10:8e:
b7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3F:3B:DA:F5:9F:27:85:B2:97:CD:9D:B7:7A:FD:C2:36:01:95:C9
X509v3 Authority Key Identifier:
keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/9AB3F8BABB3111F1BAB9CEAE6D11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.148.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:2a:cf:d4:41:a7:7b:23:21:0b:27:a8:8d:bf:67:1c:af:82:
91:f4:a3:b2:32:c9:bf:27:20:8b:d6:80:1f:4d:a1:12:d4:e1:
14:fe:94:d3:41:4f:95:7d:d9:9a:9b:76:36:4f:7e:59:b5:45:
7a:9a:fd:fd:94:14:ae:2d:01:4c:3c:ed:1a:85:48:a8:48:7d:
08:a7:54:0b:65:f1:96:ba:4a:97:7b:72:f5:f7:09:c2:9a:0d:
0a:ce:c9:f2:54:49:d4:65:39:9b:8d:61:f1:70:3d:76:6a:3e:
4e:9a:cd:99:09:d8:06:35:6b:d1:c8:6c:77:3f:3a:89:fd:e2:
2c:55:ac:92:fb:34:bc:b8:5b:2f:85:77:5f:0a:05:a0:3d:95:
31:6e:ae:e5:62:7b:81:30:dc:0e:17:b2:ec:cd:36:dc:17:43:
79:ac:4b:f7:a0:22:b9:b7:df:07:2f:66:5f:ee:f5:44:ed:2d:
ce:58:1f:22:db:7c:eb:e6:c0:ce:ef:a7:be:bb:8a:5c:a5:d9:
8a:8f:90:89:8c:83:e5:11:5f:6c:8a:18:ab:e3:1d:21:ad:d8:
e9:71:ee:1e:23:51:55:1a:93:09:27:66:51:7f:98:e7:15:2d:
4c:f6:59:e1:a2:89:fc:3f:eb:6b:fa:25:f5:44:39:ac:a1:c1:
b3:e4:65:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:25:33 2026 by rpki-client