
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/89567AD686F011F19E006003A7EE528E.roa
File: 89567AD686F011F19E006003A7EE528E.roa (raw, json)
Hash identifier: dUSLzMUqDsxRAiIEeaK8+FCiCh/s3L2CzoYAjuY8X34=
Subject key identifier: 5C:D9:08:57:35:B6:3F:71:7F:DD:43:E4:6A:3B:CA:28:FF:AD:7B:F8
Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Certificate serial: 1547
Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/89567AD686F011F19E006003A7EE528E.roa
Signing time: Thu 23 Jul 2026 23:45:08 +0000
ROA not before: Thu 23 Jul 2026 23:45:08 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 54574
IP address blocks: 103.117.100.0/22 maxlen: 24
103.135.248.0/22 maxlen: 24
2403:18c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 16:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5447 (0x1547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Validity
Not Before: Jul 23 23:45:08 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a62a784-5e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:bd:24:d1:aa:80:e3:6e:13:ec:b6:d6:42:
1f:6e:15:6d:56:e4:1d:7f:da:d5:c8:b3:1b:20:0d:
23:b9:94:6c:0b:a3:c0:00:37:cd:5d:82:23:f8:04:
6a:97:86:2a:27:f6:be:5c:af:ad:98:e3:e8:6e:ba:
1e:c7:b2:50:b1:d1:96:e9:36:43:fc:86:4b:70:37:
b0:d9:77:3c:b8:7e:c4:a5:49:7f:58:5c:15:1d:9f:
af:78:49:7b:f6:e0:ef:75:10:10:ed:0a:ab:a2:82:
04:3f:44:ce:05:4b:c0:b4:6e:f6:13:73:82:7b:e9:
13:d7:dd:0d:d6:9f:a4:7e:67:a5:52:88:3f:f8:85:
eb:c7:eb:fa:60:b6:9e:af:0d:b0:a6:39:14:2d:97:
42:67:1e:cf:b9:dc:55:75:56:68:b9:ad:fd:bd:34:
9f:b9:61:a6:20:85:19:83:62:8f:f4:3d:59:24:3e:
7d:14:2d:34:2a:f2:31:94:84:9a:75:7d:f3:92:f0:
26:10:be:2c:74:bc:ae:8e:d7:79:03:49:f8:b6:a8:
ac:71:22:1b:0b:05:43:65:42:15:48:43:f2:72:3b:
e1:b4:16:56:18:f2:27:00:f5:17:74:8f:ed:ab:c2:
48:a2:36:da:ed:4c:e3:bc:e8:6b:90:83:14:16:f0:
0e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D9:08:57:35:B6:3F:71:7F:DD:43:E4:6A:3B:CA:28:FF:AD:7B:F8
X509v3 Authority Key Identifier:
keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/89567AD686F011F19E006003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.100.0/22
103.135.248.0/22
IPv6:
2403:18c0::/32
Signature Algorithm: sha256WithRSAEncryption
8b:df:e2:87:ae:31:73:fc:c2:65:c5:9c:2b:58:98:ad:c7:cc:
67:3b:65:4c:92:37:01:30:89:9e:3d:7c:ab:92:35:ff:ca:89:
2c:c7:e1:6b:83:15:b6:47:b8:e5:44:66:0e:b2:1b:e3:ee:39:
4a:76:d4:cb:d4:e0:2f:d6:fb:16:1f:32:1a:23:b1:09:02:13:
5f:9e:23:76:e2:ab:b9:a3:9d:5f:25:84:bd:da:6a:0a:d5:79:
d9:18:a9:4e:6f:d6:b2:14:73:6c:41:cf:ee:97:73:48:9d:28:
2b:ec:67:d1:01:89:38:eb:1b:20:ab:c3:a3:e3:15:c2:d0:8a:
0a:e6:c5:5e:78:59:b9:a6:d0:5e:7b:1b:de:41:36:0a:6a:71:
cf:97:28:bd:c5:a3:31:bc:73:e7:ac:a8:74:c9:fd:82:57:74:
ea:d8:d7:ca:42:08:9d:5c:89:ee:cf:9b:92:34:9a:a0:63:91:
4b:e6:05:39:a0:d1:48:ef:ba:31:38:1b:41:16:97:03:5e:62:
9f:57:72:1e:d0:46:4f:c4:74:0f:9b:8e:75:18:dd:ce:d7:6c:
43:9d:38:58:42:7d:4f:36:65:9a:76:61:45:92:13:84:e4:eb:
3b:c1:ec:2c:e8:f8:67:9a:33:38:c2:ea:02:f6:97:82:3c:46:
d6:40:23:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:43 2026 by rpki-client