
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/F8CA86BCB73A11F1B21647E33611F970.roa
File: F8CA86BCB73A11F1B21647E33611F970.roa (raw, json)
Hash identifier: QFTLqks0CIzypcpH6FmwCsRWNAafQUN1ZftGJ6kDE2I=
Subject key identifier: 83:B4:3C:40:49:82:7B:8A:1F:95:BE:4E:54:B3:04:73:F7:3B:3B:BA
Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial: 06EB
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/F8CA86BCB73A11F1B21647E33611F970.roa
Signing time: Wed 23 Sep 2026 10:38:54 +0000
ROA not before: Wed 23 Sep 2026 10:38:53 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 154602
IP address blocks: 103.101.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 10:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1771 (0x6eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Validity
Not Before: Sep 23 10:38:53 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6ab3ac3d-37f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1b:f9:07:ef:da:d1:38:e1:02:62:d0:e1:1d:
a9:b0:aa:71:0f:24:ae:10:e2:28:a4:1e:8a:7a:ed:
95:93:b0:31:41:4b:ee:cd:95:f8:b8:f5:1c:f1:43:
aa:61:66:ac:7f:67:23:60:d9:e6:e1:e3:e9:57:e8:
ee:b5:b1:d0:d7:c8:c9:88:ac:9f:34:5a:ea:f0:0b:
c6:92:d0:54:39:9b:e2:c7:f2:fd:6f:b5:4b:ae:ef:
5b:c1:d1:51:04:2c:90:78:13:93:fc:5a:6d:c5:ee:
95:f5:bb:d9:fa:37:9a:e1:8f:95:24:e4:e0:6e:12:
0d:2a:b1:36:c1:ca:99:8e:0f:b8:35:92:af:3f:c1:
98:ca:31:06:ea:ef:77:eb:65:be:37:5f:8e:ab:9e:
2b:3f:62:59:8b:15:48:fa:36:ff:ef:3a:fe:38:9c:
80:a2:c9:81:26:40:15:18:88:99:fb:1a:bf:5d:08:
a2:71:09:2c:43:ee:c6:b4:ca:25:ad:ad:7e:dc:56:
b3:57:25:d6:ed:cc:9e:8d:e7:08:27:4c:bd:09:a5:
26:2b:4b:1d:47:83:3b:76:96:36:b6:1e:fd:ee:60:
c5:73:aa:a8:ac:c2:fb:2f:4a:a6:d9:b9:18:32:0a:
17:fb:5e:1c:8b:d8:1c:50:05:19:78:ed:77:03:29:
b8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B4:3C:40:49:82:7B:8A:1F:95:BE:4E:54:B3:04:73:F7:3B:3B:BA
X509v3 Authority Key Identifier:
keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/F8CA86BCB73A11F1B21647E33611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.101.204.0/23
Signature Algorithm: sha256WithRSAEncryption
05:79:7b:72:1c:0e:fe:79:e5:f5:5e:b5:b6:20:ac:d8:df:36:
60:5f:40:d6:b3:71:7e:46:b7:07:e6:2d:f8:33:34:cd:2a:3e:
74:31:1a:75:c1:7a:b2:eb:f3:25:4d:ab:1d:c8:91:29:e6:48:
19:33:71:61:f1:91:ea:e5:09:38:a8:b7:d1:81:28:90:10:0e:
cc:51:d2:d3:3d:89:cc:5c:e3:56:19:e9:cf:d0:40:91:05:7f:
de:bc:cf:84:f8:a2:7e:99:0f:c0:c4:63:c1:ef:2b:e2:69:29:
f7:fe:49:bb:0f:6e:34:0c:d8:7b:54:cd:72:1b:69:09:d4:cb:
9c:3a:d2:63:1b:fd:fa:6f:46:00:20:5c:84:ed:85:88:95:c3:
5b:fa:58:58:8b:f7:74:15:c4:50:21:b3:26:cd:c6:7e:31:69:
55:36:11:d2:27:20:96:55:ce:8c:db:7d:08:a2:74:05:9f:43:
60:11:b2:8a:ac:1c:4d:60:e7:34:45:9d:d4:5a:61:90:5d:cc:
a8:d9:06:70:d5:c6:d1:4e:d8:1e:6e:06:0f:04:3c:6b:d1:71:
b7:36:a5:6e:f0:4e:50:d1:bd:a4:41:e7:95:6e:9a:d3:0e:f4:
69:41:b7:cc:4d:60:bf:7f:e3:08:76:c7:95:af:43:1f:95:9e:
43:e1:11:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:40:50 2026 by rpki-client