
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/1F99EBD4C66F11EAA0B1B019C4F9AE02.roa
File: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (raw, json)
Hash identifier: OerNxvvq3phHMkXzM6uc+sc+f5PWAHWyBJri0cIQ79g=
Subject key identifier: 2C:4E:CE:22:3D:A3:73:64:90:5E:F1:48:CB:AD:55:CB:9A:D8:BC:27
Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
Certificate serial: 0966
Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/1F99EBD4C66F11EAA0B1B019C4F9AE02.roa
Signing time: Thu 16 Jul 2026 21:21:17 +0000
ROA not before: Thu 16 Jul 2026 21:21:17 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 103.150.161.0/24 maxlen: 24
103.161.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl
rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2406 (0x966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
Validity
Not Before: Jul 16 21:21:17 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a594b4d-c5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e0:11:73:2f:e7:d9:56:8c:61:16:0d:3c:66:
27:d2:a0:e5:68:1e:61:87:3c:05:0b:b0:b5:03:49:
6b:46:54:df:0b:80:e1:b8:0a:fa:ed:b0:2c:2e:af:
32:1e:84:73:90:22:d3:fb:2f:f2:a4:25:51:3d:99:
ce:f5:18:94:92:4f:91:8c:e3:97:e1:81:3e:60:64:
61:56:68:ec:eb:cc:8d:8f:ed:67:3b:47:71:60:53:
26:44:11:fd:99:2d:fa:de:d9:ac:63:36:21:e9:40:
63:e2:8e:df:0d:0c:db:f3:19:eb:dd:01:26:50:25:
9a:2b:37:d3:38:2f:37:81:f6:4e:31:b1:9a:42:cd:
10:d5:5d:31:25:f7:3e:8c:8c:37:98:9f:8d:ee:69:
74:a3:e7:8c:cb:c2:38:ed:86:2d:0c:27:ba:ae:8d:
b8:b2:c5:90:1d:a3:84:00:38:3b:55:d7:83:85:09:
05:ec:bd:e2:1d:f4:7d:34:a1:e9:ed:19:88:22:4c:
26:c5:91:70:1b:2b:c8:94:bf:5c:3b:c0:f1:d1:db:
af:2c:91:80:d7:d7:fd:29:3d:12:e4:fc:48:89:2b:
cd:44:69:d7:f1:e2:9b:67:ee:ed:68:60:7d:78:29:
b0:8f:2d:64:ae:ae:4d:02:e0:aa:b2:37:ac:cd:fd:
72:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4E:CE:22:3D:A3:73:64:90:5E:F1:48:CB:AD:55:CB:9A:D8:BC:27
X509v3 Authority Key Identifier:
keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/1F99EBD4C66F11EAA0B1B019C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.150.161.0/24
103.161.77.0/24
Signature Algorithm: sha256WithRSAEncryption
71:bf:90:61:af:a1:4e:9e:f4:37:38:8a:60:ad:8f:b1:9c:23:
92:f8:12:c8:8e:8a:56:db:c4:f3:c8:7c:34:28:5d:ba:3a:c2:
60:20:42:6b:42:0e:a2:e1:63:98:e7:ca:59:0e:ea:fd:6b:cc:
0e:83:2b:77:7d:48:cf:6f:4e:12:0b:62:45:f9:1e:9a:ba:de:
9f:9b:b4:e2:04:7c:de:64:54:77:84:9a:6d:41:2b:4a:40:b3:
ce:25:1d:aa:69:8a:08:c8:53:53:81:4d:88:77:b5:b3:63:2f:
e2:d9:42:a1:0f:6e:b4:13:2f:93:fe:d9:64:8a:db:57:61:7f:
86:97:ea:31:8a:de:c0:93:e5:cd:6a:f3:6b:e9:05:69:bd:0c:
5a:46:57:95:10:a3:da:45:57:3b:63:e5:05:e4:36:62:b3:b3:
66:2e:76:fc:6c:38:98:4b:05:9b:98:46:d7:8f:21:96:de:18:
c5:a3:0d:ef:98:3a:6d:fb:49:f1:b9:03:af:8b:15:cb:6f:61:
f6:02:e0:78:ba:68:86:da:2a:a4:f6:e9:32:77:a4:18:0c:fc:
c6:6c:60:30:9d:ed:5d:b2:08:e9:12:f2:77:70:3e:e8:28:bd:
36:a2:04:fd:c3:62:15:00:d7:23:a2:23:79:fe:98:03:ca:90:
7b:9a:62:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:13 2026 by rpki-client