
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/8D3BB78A3AEA11EC84E6634EC4F9AE02.roa
File: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (raw, json)
Hash identifier: Ck9MZoOe7ob2C2a2or+Dyfv/jAKPzOkcpTF0nOQQiL4=
Subject key identifier: 55:4D:54:FB:60:50:B5:87:F7:C9:D7:A4:60:8E:34:2B:CD:B5:8D:32
Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Certificate serial: 0E35
Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/8D3BB78A3AEA11EC84E6634EC4F9AE02.roa
Signing time: Thu 23 Jul 2026 06:47:44 +0000
ROA not before: Thu 23 Jul 2026 06:47:44 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 45785
IP address blocks: 27.122.58.0/24 maxlen: 24
27.122.59.0/24 maxlen: 24
43.245.198.0/24 maxlen: 24
103.10.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3637 (0xe35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Validity
Not Before: Jul 23 06:47:44 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a61b90f-6887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:01:74:9c:f1:84:e0:c7:95:e4:a5:d0:95:9f:
c6:27:1a:49:23:44:bb:7a:fb:da:35:ea:48:bc:79:
1d:fe:03:ef:9b:16:ff:66:a1:d7:9c:01:3d:79:6f:
13:7c:d2:b1:0a:31:f8:d8:a4:ff:e9:a9:70:02:2b:
a8:83:76:d6:ee:f2:07:e2:75:f3:98:47:b6:b3:ed:
f9:94:3b:5d:fd:be:71:41:3d:08:12:ff:3c:53:ec:
e7:61:46:e6:b9:90:12:21:94:57:30:5f:dd:fc:5e:
c0:71:1a:99:11:1f:eb:44:79:aa:0a:04:5b:bb:c5:
de:a3:e5:17:24:b2:a5:cb:df:c3:75:d4:df:f7:0a:
e5:7c:d3:a9:6b:42:f1:75:63:2c:b0:76:18:eb:81:
b1:e0:6f:4d:ae:a7:12:91:56:de:63:ad:fc:9a:8d:
18:c8:8c:b5:d7:82:6f:cc:4a:fe:ac:04:c9:da:2c:
3b:2a:3e:81:36:dc:ab:4b:4d:cf:60:37:85:ba:d6:
16:59:c0:99:99:ac:e3:20:de:bf:41:b9:5a:8c:8c:
f7:a6:17:fb:0f:f4:96:e1:34:c5:58:f8:b6:e7:20:
0e:e0:12:d6:85:5b:94:7b:e8:eb:cd:92:4e:93:d4:
05:97:a3:05:9e:1d:17:82:64:72:08:c9:c2:bd:f7:
eb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4D:54:FB:60:50:B5:87:F7:C9:D7:A4:60:8E:34:2B:CD:B5:8D:32
X509v3 Authority Key Identifier:
keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/8D3BB78A3AEA11EC84E6634EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.122.58.0/23
43.245.198.0/24
103.10.196.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:27:99:32:e7:87:9b:96:48:5a:16:71:76:fa:af:7f:e2:4e:
1a:65:54:b4:bb:90:18:f3:8a:7b:50:78:9a:73:f8:0d:e5:75:
c2:61:5f:84:af:28:ba:90:73:5e:fa:e1:d1:78:96:ab:e2:81:
55:ed:36:92:12:a1:2b:63:87:ca:f6:4d:a4:20:a5:51:8b:4b:
45:20:b6:39:99:02:f1:3d:5b:c3:02:64:69:c3:0f:a8:52:28:
16:1b:e9:ca:d7:20:e3:66:30:e2:c2:f2:1c:63:48:cb:64:0b:
0b:bd:46:9e:60:7a:08:43:e9:7d:01:e4:15:c0:93:2f:56:7a:
6c:96:c1:f2:d0:d5:1e:76:b2:65:7f:3a:3a:b6:0c:a9:95:89:
69:7f:11:24:b2:50:2b:51:58:9e:d4:ad:9b:bb:11:5e:35:68:
14:de:7f:ef:d1:65:b6:d1:4a:d7:84:e7:cb:e4:a4:c7:e4:b3:
af:2d:a0:78:07:29:0a:45:2c:d1:f8:48:48:ec:3b:59:4b:09:
8b:62:1f:cf:83:d0:9e:fd:77:80:6e:d4:88:e4:cd:86:a0:78:
6a:32:6d:eb:45:00:bf:d3:ce:78:94:33:34:59:89:78:15:71:
bb:b2:0e:a9:84:c5:49:8c:df:56:d9:84:2d:c3:86:ab:8d:6e:
0f:dc:45:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:10:56 2026 by rpki-client