
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/D240E2EE814D11EBB1CE367FC4F9AE02.roa
File: D240E2EE814D11EBB1CE367FC4F9AE02.roa (raw, json)
Hash identifier: YdyTb4ELzw5Y9Nz0vbdeBWXjPrIhsYB65VX+Fl6kXYk=
Subject key identifier: C3:87:85:15:52:B4:8E:77:1B:B1:83:B6:9D:42:E5:3E:8E:4A:A6:C4
Certificate issuer: /CN=A91B2131/serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1
Certificate serial: 0748
Authority key identifier: 14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/D240E2EE814D11EBB1CE367FC4F9AE02.roa
Signing time: Fri 10 Jul 2026 22:23:46 +0000
ROA not before: Fri 10 Jul 2026 22:23:46 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 138002
IP address blocks: 103.115.233.0/24 maxlen: 24
2001:df5:3f00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl
rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1864 (0x748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2131, serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1
Validity
Not Before: Jul 10 22:23:46 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a5170f2-8e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:43:67:a2:14:d8:de:cd:f7:8e:23:41:82:
cf:7e:59:42:56:20:ec:9d:9b:a9:8b:01:96:aa:15:
8c:d1:cd:db:d9:68:86:ab:2f:3c:08:e2:ac:aa:44:
c9:7d:55:44:ac:00:af:a7:7f:7c:7f:38:e7:2f:7c:
8c:93:e3:d3:b5:8f:3d:29:cc:3f:c1:97:0f:88:2d:
2e:18:d4:7b:7e:17:82:70:a0:28:1a:ab:9a:70:da:
89:9c:d7:f9:8c:0b:2e:17:3e:3e:bb:bd:52:fa:6b:
a3:75:63:7a:2f:f2:f0:86:a6:64:99:cb:b5:b4:71:
41:fd:44:8a:b5:38:51:95:17:51:68:22:19:3d:fd:
5d:bb:b3:4c:bb:5a:79:37:6e:65:6a:0d:e0:24:26:
26:0d:21:9c:f8:a1:67:23:a3:6a:65:ea:ab:9d:1d:
0b:67:e9:31:98:95:88:ba:9c:e9:0b:f4:b4:4d:36:
0d:2a:4b:26:27:b9:fc:11:63:47:93:49:a7:79:6e:
6d:a4:b3:a6:f5:dc:d0:5a:c9:ac:03:d9:63:77:56:
41:ea:22:9b:cf:b7:3e:c1:f2:1f:89:55:ce:29:7d:
38:f8:5b:08:7e:6d:0b:8c:6f:9f:b6:c2:29:1f:f8:
72:d2:db:50:3c:ca:66:87:ce:c8:88:f4:7b:75:b3:
b3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:87:85:15:52:B4:8E:77:1B:B1:83:B6:9D:42:E5:3E:8E:4A:A6:C4
X509v3 Authority Key Identifier:
keyid:14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/D240E2EE814D11EBB1CE367FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.115.233.0/24
IPv6:
2001:df5:3f00::/48
Signature Algorithm: sha256WithRSAEncryption
06:d1:2e:62:ea:ab:0f:3c:cf:23:5f:a7:63:37:81:c0:de:e3:
4c:9d:85:6a:04:58:21:c5:1d:44:b8:a3:14:ac:35:f3:82:a8:
e1:73:04:6a:e5:4f:51:ef:60:6a:fb:fd:8a:16:a2:7c:1f:e4:
6f:31:3b:b1:b6:6d:b0:14:f4:d7:50:73:0b:a6:42:31:21:31:
4d:25:4b:84:7e:a1:f3:3e:5f:19:6d:53:00:0d:ff:a4:ab:d9:
6e:a1:b5:52:c2:22:8b:67:98:e4:82:1d:03:2d:c6:85:ce:98:
64:cf:0c:e3:08:7f:ff:96:e3:16:e0:bf:3b:50:4e:7d:a1:d2:
15:42:7e:f0:3a:fc:6a:c3:bb:07:77:6d:e2:6f:5c:98:fb:24:
4b:16:8b:62:5b:5b:97:df:4b:f4:3b:55:75:e3:47:3f:5c:f3:
a8:07:93:60:cf:20:d9:43:88:a3:66:f9:8d:ec:3a:53:c7:44:
8f:da:cc:a2:2b:a8:9b:a9:4e:39:94:a0:87:b9:f5:f9:e5:65:
1a:5b:be:5f:8d:b1:76:3e:82:37:6f:fe:3b:e3:65:11:e9:49:
84:60:21:3d:f6:8b:cd:44:f2:50:05:c8:76:53:72:b8:9b:72:
20:21:f1:8d:01:2e:4f:c1:04:d6:60:5a:b1:44:0b:04:ec:1e:
06:03:2b:49
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjIxMzExMTAvBgNVBAUTKDE0MDdFMzFDODdFMTE2MjQ1OUQ4M0MzQUVCNDg4Qzk3
NUE5QzIzRjEwHhcNMjYwNzEwMjIyMzQ2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTUxNzBmMi04ZThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1PRDZ6IU2N7N944jQYLPfllCViDsnZupiwGWqhWM0c3b2WiGqy88COKsqkTJ
fVVErACvp398fzjnL3yMk+PTtY89Kcw/wZcPiC0uGNR7fheCcKAoGquacNqJnNf5
jAsuFz4+u71S+mujdWN6L/LwhqZkmcu1tHFB/USKtThRlRdRaCIZPf1du7NMu1p5
N25lag3gJCYmDSGc+KFnI6NqZeqrnR0LZ+kxmJWIupzpC/S0TTYNKksmJ7n8EWNH
k0mneW5tpLOm9dzQWsmsA9ljd1ZB6iKbz7c+wfIfiVXOKX04+FsIfm0LjG+ftsIp
H/hy0ttQPMpmh87IiPR7dbOzpwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMOHhRVS
tI53G7GDtp1C5T6OSqbEMB8GA1UdIwQYMBaAFBQH4xyH4RYkWdg8OutIjJdanCPx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjEzMS9CRTRBNkNEMDdE
NzIxMUVCOENCNjM2NjVDNEY5QUUwMi9GQWZqSElmaEZpUloyRHc2NjBpTWwxcWNJ
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZBZmpISWZoRmlSWjJEdzY2MGlNbDFxY0lfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjIxMzEvQkU0QTZDRDA3RDcyMTFFQjhDQjYzNjY1QzRGOUFFMDIvRDI0MEUyRUU4
MTREMTFFQkIxQ0UzNjdGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ3PpMA8EAgACMAkDBwAgAQ31PwAwDQYJKoZIhvcNAQELBQADggEB
AAbRLmLqqw88zyNfp2M3gcDe40ydhWoEWCHFHUS4oxSsNfOCqOFzBGrlT1HvYGr7
/YoWonwf5G8xO7G2bbAU9NdQcwumQjEhMU0lS4R+ofM+XxltUwAN/6Sr2W6htVLC
IotnmOSCHQMtxoXOmGTPDOMIf/+W4xbgvztQTn2h0hVCfvA6/GrDuwd3beJvXJj7
JEsWi2JbW5ffS/Q7VXXjRz9c86gHk2DPINlDiKNm+Y3sOlPHRI/azKIrqJupTjmU
oIe59fnlZRpbvl+NsXY+gjdv/jvjZRHpSYRgIT32i81E8lAFyHZTcribciAh8Y0B
Lk/BBNZgWrFECwTsHgYDK0k=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:11 2026 by rpki-client