
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9BBCC1F60D2411EEA8431074C4F9AE02.roa
File: 9BBCC1F60D2411EEA8431074C4F9AE02.roa (raw, json)
Hash identifier: Tc+1LYvp/EHSWgsQOB1EwJZ0GtDm1QSlM5WXrDm3nkk=
Subject key identifier: 82:D0:C7:05:C2:40:8A:F0:FD:BD:98:7A:2F:A4:18:78:42:0B:60:80
Certificate issuer: /CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6
Certificate serial: 0257
Authority key identifier: F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9BBCC1F60D2411EEA8431074C4F9AE02.roa
Signing time: Sat 11 Jul 2026 03:28:41 +0000
ROA not before: Sat 11 Jul 2026 03:28:41 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 151324
IP address blocks: 103.196.176.0/23 maxlen: 23
103.196.176.0/24 maxlen: 24
103.196.177.0/24 maxlen: 24
2001:df2:6c40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl
rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3E37, serialNumber=F45618EA273F40B4BC685E29887E205083C490A6
Validity
Not Before: Jul 11 03:28:41 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a51b869-1f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b2:f8:56:c4:2d:09:3b:db:3b:58:95:d9:8d:
4c:b3:02:72:7f:28:92:0b:1f:06:f1:eb:e7:17:0f:
8f:f8:a4:7b:8d:05:bc:98:09:f3:f6:26:a4:e7:1b:
25:51:38:00:64:c2:d8:de:c4:7d:57:6c:36:6f:45:
98:d4:2f:9c:57:a6:13:42:96:c4:2c:69:8c:eb:5e:
ad:b4:ab:bd:49:ff:01:39:ea:e2:bd:f7:3a:f2:7a:
81:c6:c7:f3:1d:f8:38:a7:60:76:dc:f9:a8:9f:0f:
e3:93:68:1f:52:72:e1:ed:0a:d6:e1:fc:23:23:39:
e4:fd:86:bf:86:a0:d0:54:b1:69:e7:10:e9:8f:4f:
b5:9b:d5:97:a4:10:d5:77:e5:86:43:5a:7a:77:3c:
8e:25:0c:ef:3a:01:3f:95:00:18:7d:f4:e4:ce:0a:
a9:c7:e1:fb:0c:35:c5:df:c2:45:8f:4c:e8:bf:f4:
81:66:82:73:74:9f:35:0a:e0:27:db:c4:fa:cc:96:
a7:c7:83:c0:31:3f:e1:33:45:ed:cd:79:b3:b4:a9:
36:cc:d0:38:53:06:1f:13:08:7f:7b:f0:9d:02:19:
2e:4b:f2:15:d3:53:96:a9:c8:8b:7a:f2:50:16:6e:
8a:88:9c:6a:de:af:67:af:0a:90:5c:f0:9b:39:77:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D0:C7:05:C2:40:8A:F0:FD:BD:98:7A:2F:A4:18:78:42:0B:60:80
X509v3 Authority Key Identifier:
keyid:F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9BBCC1F60D2411EEA8431074C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.196.176.0/23
IPv6:
2001:df2:6c40::/48
Signature Algorithm: sha256WithRSAEncryption
55:65:40:c5:30:f5:34:22:5a:7d:66:f0:d6:a5:7a:e6:1f:24:
a4:c2:e9:5e:33:7a:8a:17:f1:61:62:4b:ed:7f:60:59:a0:8d:
f0:11:7b:55:2a:21:53:c6:98:b4:90:bb:4b:13:cf:8f:24:c3:
22:8e:46:e6:cb:20:57:a1:15:9d:b0:5a:96:3b:df:f0:94:be:
0e:bd:d4:84:de:be:5d:ad:75:d0:87:c8:3b:34:94:d0:f8:67:
39:6e:fa:f7:32:dc:b5:a3:b3:f6:97:97:bd:d1:b5:8e:b7:48:
29:75:ee:29:b1:4a:6c:d8:d8:4f:1c:d7:35:63:9d:9d:eb:ba:
ad:69:23:f4:1c:2d:11:b6:5e:c0:ac:4c:83:25:f8:5e:7e:f0:
e7:b0:78:65:62:ba:8a:c8:af:26:8b:1a:f1:88:be:57:9f:fc:
65:4b:5d:cd:ea:bd:be:a0:c8:ff:ce:cb:c3:c3:9c:9b:e5:1c:
3b:6b:b8:a1:ca:ab:3a:0b:7b:9e:d3:8b:36:b8:86:1b:dc:0c:
dc:82:3f:90:71:82:09:4d:6b:0c:37:72:a5:45:96:70:6d:bd:
46:19:6a:3a:d8:6f:14:a7:0f:fa:80:14:29:e0:60:31:34:1a:
b3:d6:d4:96:25:b0:20:24:21:c5:23:33:a2:2f:c5:16:6d:1b:
5d:0a:d5:ea
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzNFMzcxMTAvBgNVBAUTKEY0NTYxOEVBMjczRjQwQjRCQzY4NUUyOTg4N0UyMDUw
ODNDNDkwQTYwHhcNMjYwNzExMDMyODQxWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTUxYjg2OS0xZjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoLL4VsQtCTvbO1iV2Y1MswJyfyiSCx8G8evnFw+P+KR7jQW8mAnz9iak5xsl
UTgAZMLY3sR9V2w2b0WY1C+cV6YTQpbELGmM616ttKu9Sf8BOerivfc68nqBxsfz
Hfg4p2B23Pmonw/jk2gfUnLh7QrW4fwjIznk/Ya/hqDQVLFp5xDpj0+1m9WXpBDV
d+WGQ1p6dzyOJQzvOgE/lQAYffTkzgqpx+H7DDXF38JFj0zov/SBZoJzdJ81CuAn
28T6zJanx4PAMT/hM0XtzXmztKk2zNA4UwYfEwh/e/CdAhkuS/IV01OWqciLevJQ
Fm6KiJxq3q9nrwqQXPCbOXf1MwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFILQxwXC
QIrw/b2Yei+kGHhCC2CAMB8GA1UdIwQYMBaAFPRWGOonP0C0vGheKYh+IFCDxJCm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0UzNy9CNDQ1NTNEOEYw
OUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FMUzhhRjRwaUg0Z1VJUEVr
S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGWVk2aWNfUUxTOGFGNHBpSDRnVUlQRWtLWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzNFMzcvQjQ0NTUzRDhGMDlGMTFFRDlCNEEwNzM0QzRGOUFFMDIvOUJCQ0MxRjYw
RDI0MTFFRUE4NDMxMDc0QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ8SwMA8EAgACMAkDBwAgAQ3ybEAwDQYJKoZIhvcNAQELBQADggEB
AFVlQMUw9TQiWn1m8NaleuYfJKTC6V4zeooX8WFiS+1/YFmgjfARe1UqIVPGmLSQ
u0sTz48kwyKORubLIFehFZ2wWpY73/CUvg691ITevl2tddCHyDs0lND4Zzlu+vcy
3LWjs/aXl73RtY63SCl17imxSmzY2E8c1zVjnZ3ruq1pI/QcLRG2XsCsTIMl+F5+
8OeweGViuorIryaLGvGIvlef/GVLXc3qvb6gyP/Oy8PDnJvlHDtruKHKqzoLe57T
iza4hhvcDNyCP5BxgglNaww3cqVFlnBtvUYZajrYbxSnD/qAFCngYDE0GrPW1JYl
sCAkIcUjM6IvxRZtG10K1eo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:28 2026 by rpki-client