
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa
File: F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa (raw, json)
Hash identifier: pme8BEo7whHw/nE985T4YJ9ukK31bkVycJriDT2MMKc=
Subject key identifier: 7D:AA:10:8D:D4:E0:20:5B:A5:5B:4C:2F:65:8F:EA:C1:CE:70:51:DF
Certificate issuer: /CN=A91BEC31/serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA
Certificate serial: 011E
Authority key identifier: 67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa
Signing time: Wed 15 Jul 2026 07:33:45 +0000
ROA not before: Wed 15 Jul 2026 07:33:45 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 151317
IP address blocks: 103.250.62.0/24 maxlen: 24
163.61.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl
rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEC31, serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA
Validity
Not Before: Jul 15 07:33:45 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a5737d9-5b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:72:8c:6d:dc:00:2a:51:1b:82:cb:3e:d8:d0:
56:26:8d:6e:63:a0:46:3f:b6:15:e4:49:7a:a5:e0:
b2:9b:d0:36:38:2b:2c:fd:6a:2e:b7:35:09:69:4a:
25:88:09:c9:01:a1:fe:1f:c2:57:3f:52:80:82:b5:
0e:49:37:6d:60:c2:c6:8d:a5:5c:da:d9:7f:81:61:
97:a8:96:29:0f:21:c4:f4:bb:f0:bb:01:de:91:e0:
35:8f:f2:58:97:50:66:22:5c:09:43:27:41:cf:a5:
c7:ec:39:aa:8a:31:9e:be:75:41:20:c2:10:e0:b2:
7f:f2:e0:10:4c:24:c8:ec:64:0c:be:0a:c6:4c:6b:
f3:f7:75:24:0c:e8:97:d1:95:c0:bb:38:4d:1c:43:
36:a4:60:cb:d1:d7:dd:ae:fc:c7:da:c0:f6:66:4c:
2e:ec:d8:54:6d:d8:e4:f8:d7:68:01:f3:bf:f0:41:
80:3b:93:8c:bc:92:32:f3:76:5a:41:d2:22:3e:75:
41:fa:9f:5a:1e:5b:e3:2d:84:e8:c5:86:a1:5b:df:
08:dd:63:5e:9c:af:b5:44:34:86:26:5f:dc:6a:2a:
80:32:72:68:92:7a:c5:e2:4c:a1:b2:3f:d3:c7:d3:
25:fa:95:7e:6c:e0:84:9e:f1:84:eb:d2:29:39:db:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AA:10:8D:D4:E0:20:5B:A5:5B:4C:2F:65:8F:EA:C1:CE:70:51:DF
X509v3 Authority Key Identifier:
keyid:67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.250.62.0/24
163.61.135.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:fe:25:29:cc:47:49:d6:90:d1:1b:43:e2:87:20:0d:55:4c:
bf:77:06:37:94:2d:30:ae:da:59:8f:6d:c9:0c:ca:e1:2c:40:
e3:24:64:13:90:be:81:8d:5b:ad:0b:9f:97:59:d9:0b:d7:8a:
52:dd:18:02:9a:fb:f1:75:96:f4:b1:90:85:54:79:c7:62:46:
ac:a7:8a:a8:4f:c6:18:f2:4b:26:ac:41:4f:aa:2e:8b:41:3b:
4f:b1:bb:11:5f:12:17:8e:c6:21:18:e0:73:1e:16:65:f8:75:
cb:70:38:44:32:be:bc:cc:ba:9c:97:72:e7:e4:44:86:f2:50:
42:4f:82:a0:42:e1:d2:d0:d1:ac:2c:3d:ec:de:a8:ad:bd:18:
0d:56:61:11:a5:18:b8:5b:e2:1d:c1:ab:c9:f4:5e:a1:26:86:
c5:a2:b2:f0:e7:14:68:0b:5c:ea:30:ed:71:ca:bd:40:af:fb:
f0:21:14:92:c6:df:7e:7f:94:1a:b2:2f:d3:80:e6:23:23:b7:
ac:ca:71:15:61:3d:1f:8c:30:13:56:44:19:14:e8:33:02:0f:
32:3d:9a:bc:1e:90:af:c3:97:c1:ee:10:4a:ba:bc:a2:a5:44:
99:33:87:7c:25:62:e8:2e:cb:2a:d6:5e:95:45:d9:7c:78:b6:
0b:98:f2:88
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkVDMzExMTAvBgNVBAUTKDY3RDc5QzNCMTExNkQzNkZCOUUxNzFENjY1OEY4RjQz
QjUzQzcyRkEwHhcNMjYwNzE1MDczMzQ1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU3MzdkOS01YjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5XKMbdwAKlEbgss+2NBWJo1uY6BGP7YV5El6peCym9A2OCss/WoutzUJaUol
iAnJAaH+H8JXP1KAgrUOSTdtYMLGjaVc2tl/gWGXqJYpDyHE9LvwuwHekeA1j/JY
l1BmIlwJQydBz6XH7DmqijGevnVBIMIQ4LJ/8uAQTCTI7GQMvgrGTGvz93UkDOiX
0ZXAuzhNHEM2pGDL0dfdrvzH2sD2Zkwu7NhUbdjk+NdoAfO/8EGAO5OMvJIy83Za
QdIiPnVB+p9aHlvjLYToxYahW98I3WNenK+1RDSGJl/caiqAMnJoknrF4kyhsj/T
x9Ml+pV+bOCEnvGE69IpOduGgQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFH2qEI3U
4CBbpVtML2WP6sHOcFHfMB8GA1UdIwQYMBaAFGfXnDsRFtNvueFx1mWPj0O1PHL6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUMzMS8zQ0Y1MzYyMkU0
QTQxMUVGQjI3NkYyNURDNEY5QUUwMi9aOWVjT3hFVzAyLTU0WEhXWlktUFE3VThj
dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1o5ZWNPeEVXMDItNTRYSFdaWS1QUTdVOGN2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkVDMzEvM0NGNTM2MjJFNEE0MTFFRkIyNzZGMjVEQzRGOUFFMDIvRjhCMEJGRUVF
NEE0MTFFRjhDMkQwNDYwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ/o+AwQAoz2HMA0GCSqGSIb3DQEBCwUAA4IBAQC3/iUpzEdJ1pDR
G0PihyANVUy/dwY3lC0wrtpZj23JDMrhLEDjJGQTkL6BjVutC5+XWdkL14pS3RgC
mvvxdZb0sZCFVHnHYkasp4qoT8YY8ksmrEFPqi6LQTtPsbsRXxIXjsYhGOBzHhZl
+HXLcDhEMr68zLqcl3Ln5ESG8lBCT4KgQuHS0NGsLD3s3qitvRgNVmERpRi4W+Id
wavJ9F6hJobForLw5xRoC1zqMO1xyr1Ar/vwIRSSxt9+f5Qasi/TgOYjI7esynEV
YT0fjDATVkQZFOgzAg8yPZq8HpCvw5fB7hBKuryipUSZM4d8JWLoLssq1l6VRdl8
eLYLmPKI
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:41:02 2026 by rpki-client