
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/A850C476026E11EBB2E0E72FC4F9AE02.roa
File: A850C476026E11EBB2E0E72FC4F9AE02.roa (raw, json)
Hash identifier: ZQ+Kp0nPniDPrMOYQ35Dp8VH467JhWTHQOyjMWpsMmc=
Subject key identifier: 63:83:09:2E:D1:E5:B4:CE:71:BF:4E:11:FC:3B:C2:15:6B:BA:16:C7
Certificate issuer: /CN=A91BC6B4/serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05
Certificate serial: 10B2
Authority key identifier: 6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/A850C476026E11EBB2E0E72FC4F9AE02.roa
Signing time: Fri 02 Oct 2026 17:35:56 +0000
ROA not before: Fri 02 Oct 2026 17:35:56 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 137443
IP address blocks: 103.99.40.0/23 maxlen: 24
103.132.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl
rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 17:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4274 (0x10b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC6B4, serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05
Validity
Not Before: Oct 2 17:35:56 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abfeb7c-f9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b6:7b:02:30:43:2a:a1:f4:2e:69:0b:f6:1e:
4a:7c:ea:c7:8a:c1:6c:aa:57:29:68:04:bf:94:51:
18:2d:ca:d4:9e:95:ad:12:2f:7f:1b:ec:bd:06:d9:
41:3f:7b:a4:4c:fb:c7:af:0e:10:e6:43:93:07:38:
58:12:4a:ef:db:83:0d:45:75:5a:55:33:ea:38:e3:
ce:07:64:8a:42:be:eb:d1:6c:99:a2:86:a0:bf:dd:
ac:f2:f0:6f:79:2e:99:05:04:43:2f:00:e1:31:6e:
0f:3d:c1:84:69:6a:20:15:5c:33:9a:09:56:07:97:
36:98:4c:41:1c:67:ec:bb:f8:ba:72:19:d4:da:dd:
7f:58:93:c5:f3:fe:2a:6d:79:6b:31:08:91:81:04:
09:8f:26:05:06:ac:5c:97:8f:5b:57:d5:1c:fa:27:
68:c5:c1:3b:26:0f:0e:db:eb:09:04:01:3a:94:5c:
0e:4e:29:8a:da:82:bd:59:41:c3:d0:85:b2:75:1d:
7d:cc:23:74:77:a2:1c:08:78:15:77:24:73:4d:e3:
10:be:f4:6e:43:b1:4d:e1:41:9e:20:2b:e0:dd:a1:
30:cc:76:91:33:f5:33:34:f8:68:70:d8:e6:b9:91:
b3:a3:71:4a:f4:78:dd:2f:20:0f:8e:d3:74:54:7a:
11:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:83:09:2E:D1:E5:B4:CE:71:BF:4E:11:FC:3B:C2:15:6B:BA:16:C7
X509v3 Authority Key Identifier:
keyid:6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/A850C476026E11EBB2E0E72FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.40.0/23
103.132.234.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:ff:d8:7b:95:c0:ff:48:90:0d:79:2c:d2:4e:13:5a:31:04:
41:6d:a2:c7:b3:e4:5e:25:80:01:e4:e5:fd:1f:7b:bd:82:82:
25:d9:c9:f4:52:3a:24:cd:12:cf:ea:ac:ec:fc:9f:da:e5:62:
d1:6e:d1:a0:47:67:84:a3:a2:6b:86:83:1b:0d:fd:cc:28:f7:
f6:69:95:3b:32:c4:6e:73:99:62:38:a5:90:7e:7a:47:0f:d4:
aa:a6:ee:8d:ad:1f:6c:f4:20:b1:9e:db:d1:cd:c6:e8:2d:41:
72:83:db:14:0c:81:bd:dd:e2:3c:9d:50:33:28:99:82:a0:0c:
6a:1a:7c:03:40:8b:c7:8f:c7:de:76:3e:1a:62:fa:88:1d:27:
25:ff:01:67:64:64:7d:27:40:b0:45:ee:c4:33:df:42:a6:a2:
7a:15:7e:dc:44:7c:9a:fd:de:f4:da:d8:3a:a3:42:9e:a0:a6:
c0:15:f6:a3:32:b6:b8:2b:16:51:1e:9f:48:46:03:cf:7e:af:
9e:5f:ba:bd:da:01:65:87:89:27:8e:0a:97:99:be:03:0b:6c:
ed:fd:40:9b:b8:ee:42:22:92:54:ee:b0:c9:f2:f7:05:5b:b5:
a6:56:0b:62:42:b5:37:5e:be:b1:8a:13:de:d7:d1:d8:f9:29:
70:08:e3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:19:56 2026 by rpki-client