
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/3983EA66217E11F18ECE80E5073D8C67.roa
File: 3983EA66217E11F18ECE80E5073D8C67.roa (raw, json)
Hash identifier: hxEYoEMqj4BpXAJVc6GCqQHmmq9QFwmOlIQ9koH/Ilc=
Subject key identifier: E0:E6:46:94:52:D4:37:F6:C8:5D:9F:11:DC:40:A2:75:03:31:A3:4C
Certificate issuer: /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441
Certificate serial: 08E3
Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/3983EA66217E11F18ECE80E5073D8C67.roa
Signing time: Mon 31 Aug 2026 20:40:57 +0000
ROA not before: Mon 31 Aug 2026 20:40:57 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 141233
IP address blocks: 103.156.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl
rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2275 (0x8e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441
Validity
Not Before: Aug 31 20:40:57 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a95e6d9-a9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3d:5b:39:d9:1e:1b:ba:46:5f:9d:b9:2b:80:
b8:2f:e6:65:28:00:1f:0e:ee:14:24:87:8d:7b:19:
4c:10:70:c3:d4:5e:43:74:5e:07:ba:bb:3d:17:2d:
87:4e:bb:49:0e:9b:d1:61:88:39:34:0b:2c:f0:fe:
44:09:3a:00:59:1f:62:60:12:b5:b8:33:bd:c3:f1:
bf:e1:53:4d:e9:22:40:09:6e:d6:66:e8:2f:e1:85:
01:00:18:16:eb:48:93:01:de:73:dc:7d:33:3f:5a:
07:3e:9a:7c:1e:c0:e1:08:e1:d1:15:c4:dc:66:20:
47:79:70:ac:04:ae:df:98:f4:8d:3e:39:83:02:1b:
8d:c8:e1:b2:77:61:d0:c5:a5:64:e5:20:c4:8d:a8:
48:d2:ec:13:49:81:93:c6:e2:1e:42:b8:47:c5:27:
1c:5a:a7:2c:fa:8b:8c:a0:03:4a:e5:f9:16:04:6e:
d8:6c:76:36:18:83:0a:ee:0a:26:ff:6a:5f:ac:95:
4f:1d:1c:c0:e6:19:af:7f:cf:ba:ee:1c:d4:86:d9:
15:c3:44:17:3e:a2:8f:33:0b:0d:84:23:bd:ec:c3:
ee:60:dd:49:b8:25:e0:28:ae:8f:6d:19:2e:a8:ae:
93:9d:84:a2:0c:41:e9:b2:da:c4:e7:79:ab:e2:8b:
0c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E6:46:94:52:D4:37:F6:C8:5D:9F:11:DC:40:A2:75:03:31:A3:4C
X509v3 Authority Key Identifier:
keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/3983EA66217E11F18ECE80E5073D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.156.230.0/23
Signature Algorithm: sha256WithRSAEncryption
23:84:85:fa:68:b5:0a:be:63:d7:95:f4:0a:90:50:20:43:8f:
b3:76:10:1d:31:70:6c:e3:eb:ea:1e:71:41:04:fc:46:d0:21:
86:f1:5f:93:94:ea:a8:42:69:8b:e7:ca:d7:d7:88:49:7f:2e:
05:08:5f:6e:4a:83:37:27:17:f7:62:ed:0c:7c:d5:02:3b:0d:
dc:c1:56:20:a4:e9:aa:84:8d:7b:3e:f6:6e:94:fe:f6:81:e1:
29:4d:9d:e8:ed:94:fe:e4:4e:dc:eb:e6:ab:e7:58:42:59:89:
a0:06:54:24:b2:f8:cd:0a:31:91:da:7d:91:19:9a:b5:d8:f9:
97:25:4b:80:a7:d8:e5:40:05:69:3c:c1:0a:53:d9:d5:2c:0c:
c4:78:78:ab:8c:5b:bb:9b:e3:01:dd:f6:32:3d:ae:ee:eb:00:
72:d0:d3:cb:cf:f3:7b:b8:5b:c1:9b:9d:e3:fb:57:87:66:3e:
05:59:b7:ee:ca:d4:52:b4:bf:3d:e0:86:24:6a:a5:99:cb:6a:
df:50:23:93:ae:74:f8:66:2f:2f:0e:e6:10:f7:7e:03:7d:26:
96:30:67:5b:c3:25:03:9d:36:bc:12:42:0a:c7:12:1c:36:ee:
76:9f:28:59:ed:1a:42:a7:32:c3:c4:b5:b0:81:31:ec:51:f0:
f9:7f:0e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:54:13 2026 by rpki-client