
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/9F96F798AC4411F1A40C01CF3F11F970.roa
File: 9F96F798AC4411F1A40C01CF3F11F970.roa (raw, json)
Hash identifier: kcneeVSjijkJcKZlFuK2QBah/Y4JisLXvrY0spRg0HQ=
Subject key identifier: 5D:44:DF:F2:A1:AB:7A:E5:80:A4:56:3C:A3:19:C0:E4:3E:F7:9C:C6
Certificate issuer: /CN=A91B8E1F/serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
Certificate serial: 0261
Authority key identifier: 3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/9F96F798AC4411F1A40C01CF3F11F970.roa
Signing time: Wed 09 Sep 2026 11:50:16 +0000
ROA not before: Wed 09 Sep 2026 11:50:16 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 18230
IP address blocks: 103.239.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl
rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8E1F, serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
Validity
Not Before: Sep 9 11:50:16 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aa147f8-e9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:02:5d:81:3a:7f:23:62:a9:96:fc:46:9d:a7:
bc:0f:ac:d0:bb:73:2e:98:44:b3:53:69:ea:0e:3a:
fa:68:07:dc:b3:40:7e:ee:de:fa:ef:62:79:69:e4:
af:81:6d:2c:e9:79:9c:70:50:31:89:2a:b5:4b:70:
d6:67:b5:b7:f7:bb:92:1d:fc:bc:76:e2:ac:31:44:
96:02:01:ad:1b:89:e2:af:3d:84:db:48:92:fa:d3:
84:78:85:5a:5f:ec:4b:8e:7b:34:de:25:a2:be:dc:
11:93:23:5e:c6:2f:52:b1:25:8e:53:40:14:db:d4:
b6:88:1f:31:e8:f4:4c:59:15:51:dc:17:72:98:1d:
f1:6d:30:00:05:23:de:89:27:5c:24:48:f0:eb:e1:
ea:6b:47:81:3a:1d:31:0e:77:bb:df:e7:66:ef:41:
80:ef:d1:c7:57:bc:50:15:5b:eb:18:76:6d:03:4e:
cf:b5:5b:46:62:43:a2:22:5f:e8:98:97:75:37:c4:
e5:48:0d:11:33:27:b1:78:2c:e2:fc:64:59:b2:eb:
29:5f:08:ef:70:ca:fd:7c:8b:c9:19:1f:e9:50:f9:
fa:dd:55:48:3c:48:be:90:b3:f0:43:68:dc:4c:7e:
ab:5f:f9:9a:a3:8e:0d:0e:56:2a:0a:ca:db:05:3b:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:44:DF:F2:A1:AB:7A:E5:80:A4:56:3C:A3:19:C0:E4:3E:F7:9C:C6
X509v3 Authority Key Identifier:
keyid:3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/9F96F798AC4411F1A40C01CF3F11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.239.42.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:17:4e:85:d0:66:56:4f:52:01:8a:e0:fc:73:63:c0:5c:6a:
a0:94:dc:87:7d:3b:8a:6a:cc:e1:2b:8a:85:20:8d:9d:d7:5f:
a9:3a:81:28:5c:41:5a:6b:b5:55:e9:18:2a:70:40:84:7e:b8:
ca:b4:ee:78:ab:25:c9:dc:40:b8:1f:24:64:8b:7c:8b:aa:cc:
93:d6:c5:b8:d7:90:ab:e6:71:1f:70:b6:dc:bb:cc:7f:b2:70:
60:a0:58:6c:ad:71:54:d5:ba:b6:2b:47:22:53:7a:ba:eb:b1:
bf:b8:b9:c4:92:3b:a1:40:ad:db:89:55:9b:07:b1:ea:ef:1d:
bf:4c:fb:59:72:36:79:b4:36:61:94:ea:53:ef:26:68:82:7b:
f2:b6:10:7e:87:9e:39:3f:f4:56:0c:dc:b7:f0:bd:95:39:fb:
4a:46:4b:ff:e4:fe:18:b7:20:6f:86:6c:0f:25:70:0c:a7:9f:
71:7b:4f:49:6b:8c:48:34:d8:e1:5c:f7:49:4e:ff:4b:7e:5e:
e3:24:3e:81:f8:19:7c:d5:8a:c7:d3:d2:32:c4:ec:08:a7:f3:
f9:8f:c4:10:dd:16:0d:1d:41:7e:e4:d4:ce:4d:ff:47:50:06:
c3:64:ec:1c:2f:c3:42:19:b0:39:af:8f:eb:6b:6d:3d:be:33:
64:9c:62:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:19:20 2026 by rpki-client