
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/C2CAC16E5C9D11EC99F7D10BC4F9AE02.roa
File: C2CAC16E5C9D11EC99F7D10BC4F9AE02.roa (raw, json)
Hash identifier: 6SWLv2jStmw9Boi79xmGA+0FveHASTq1p9xtUOijHD0=
Subject key identifier: F0:94:5C:25:6E:36:65:77:7E:44:A1:0A:95:93:0D:C2:F2:0F:50:35
Certificate issuer: /CN=A91C17A9/serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Certificate serial: 0624
Authority key identifier: 53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/C2CAC16E5C9D11EC99F7D10BC4F9AE02.roa
Signing time: Sat 04 Jul 2026 23:24:46 +0000
ROA not before: Sat 04 Jul 2026 23:24:46 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 140732
IP address blocks: 103.167.162.0/24 maxlen: 24
2001:df6:b980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1572 (0x624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C17A9, serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Validity
Not Before: Jul 4 23:24:46 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a49963e-723c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:e2:cb:d3:83:10:db:fa:96:58:7d:a9:3f:
f6:86:dc:fe:75:44:af:a5:9f:ff:b9:30:12:b4:2f:
d5:72:48:59:9f:4b:1d:ed:c1:b5:31:ad:b8:1b:ec:
50:90:53:11:85:da:0a:d7:59:e6:65:1c:eb:06:f5:
4b:82:1a:b7:1d:e7:0c:76:8e:33:0f:09:29:a3:5f:
2f:28:42:7d:a0:45:88:fb:d2:96:72:1e:7b:c5:fa:
4a:77:c9:f3:2d:ff:33:a1:f7:c5:d2:fc:72:a4:cb:
5c:fa:2d:0d:cf:8c:7f:48:a8:6f:98:b2:f6:a3:e5:
93:fd:15:11:24:c1:5c:96:32:8c:c9:47:12:e8:06:
49:a2:f1:23:5b:53:7b:b2:d3:7d:2b:38:0a:cd:c9:
60:31:0c:ed:72:c1:f4:fc:8c:43:2e:7d:dc:b4:9d:
e3:e9:c5:4b:94:f2:a2:2e:52:12:3e:8e:07:b4:2d:
53:12:3b:ae:e8:8c:86:30:e9:f7:07:c3:5d:1c:e8:
cf:5d:1b:c4:dc:50:f6:4b:d1:0d:2c:41:8b:63:25:
c0:4c:fd:20:43:8b:ae:14:a3:0f:b0:d5:13:f7:8b:
6a:7f:05:1e:34:3f:a9:10:a0:bf:ad:b2:db:28:c9:
00:7d:d5:80:fe:51:ae:04:04:40:8f:18:9b:e5:8e:
5c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:94:5C:25:6E:36:65:77:7E:44:A1:0A:95:93:0D:C2:F2:0F:50:35
X509v3 Authority Key Identifier:
keyid:53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/C2CAC16E5C9D11EC99F7D10BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.162.0/24
IPv6:
2001:df6:b980::/48
Signature Algorithm: sha256WithRSAEncryption
88:81:28:cc:5c:d8:d9:2e:5e:de:6d:63:b3:ad:7e:82:f6:2b:
20:20:39:48:8f:32:70:00:ff:14:dc:9c:39:7b:7f:6b:20:0c:
9b:49:6c:3d:19:2b:75:63:08:c8:20:89:3d:a4:f7:fb:3b:a9:
c7:d8:a0:35:16:28:07:65:2d:de:62:56:dd:9f:ca:e2:c0:6d:
d4:46:9f:be:1e:8a:09:5b:a8:1c:ef:e5:2e:62:a3:af:6b:d2:
1a:e2:1f:04:d6:bb:d8:5b:4d:52:ec:da:07:ea:a9:17:2f:d2:
fc:5a:7c:46:68:f2:fd:78:ca:0a:83:d9:77:b7:0e:34:fd:ce:
1e:77:bb:4c:51:07:ea:24:39:c3:18:bf:b3:75:a0:b3:e6:e7:
ce:2b:d1:25:53:7c:9d:83:30:ae:7e:1d:8d:84:2a:15:ad:a8:
b9:98:b4:7d:fd:77:fc:da:ea:44:aa:8d:5f:f3:44:1b:27:ed:
31:e2:0a:d1:6c:0b:a7:74:b0:c9:ae:cc:ee:08:9f:50:c4:0e:
03:4b:6e:d9:77:e2:47:6e:65:d8:cf:5d:0b:58:d0:46:8d:74:
63:17:4b:2c:66:fa:69:d0:f9:2a:74:e0:12:8b:61:59:c5:73:
b8:72:c7:65:ea:95:d1:fb:e1:41:f2:c8:05:be:da:41:9d:72:
c2:a9:e4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:18:43 2026 by rpki-client