
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/0CC86DF4FB5311F09CD98C1F476F56BC.roa
File: 0CC86DF4FB5311F09CD98C1F476F56BC.roa (raw, json)
Hash identifier: NUGAPcQG3JutO9qEKwmx4ZtFctU4cvoVKH+jTCY6e9c=
Subject key identifier: E2:57:8E:F6:E1:2B:93:FC:9A:C8:71:74:56:0A:BC:AE:89:34:C6:1E
Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Certificate serial: 048C
Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/0CC86DF4FB5311F09CD98C1F476F56BC.roa
Signing time: Wed 13 May 2026 00:30:32 +0000
ROA not before: Wed 13 May 2026 00:30:32 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 59371
IP address blocks: 103.84.45.0/24 maxlen: 24
103.84.46.0/24 maxlen: 24
103.84.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1164 (0x48c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Validity
Not Before: May 13 00:30:32 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a03c628-e2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ff:21:6e:89:da:d3:62:79:b1:a4:2c:80:1a:
5e:c3:63:54:fb:84:73:fc:df:67:c1:02:ca:e2:12:
08:1c:9a:6e:a1:b8:32:de:ec:85:73:b3:6d:a4:96:
ef:2a:e1:c4:41:2d:3c:9c:44:44:eb:f4:56:7f:9e:
79:0d:fb:7b:37:71:38:e5:35:92:54:a9:0d:59:7d:
8e:fb:42:aa:63:34:21:50:ea:f5:99:1c:19:b5:5e:
41:09:e5:28:cf:ca:07:97:bf:d2:cd:bc:cc:69:a3:
f0:39:83:cc:88:d9:17:bb:13:61:76:e1:f3:dd:a8:
8e:ff:3a:eb:1e:bf:1a:71:c8:24:7a:e9:2c:c8:52:
b2:d2:8c:58:a1:5a:ef:09:13:70:dd:09:c5:72:08:
39:e6:6a:e7:07:f1:27:37:b4:25:78:2c:39:88:d6:
64:36:74:8a:ad:b2:65:ad:a9:5c:89:31:25:72:e0:
43:b8:17:2a:01:44:42:6f:55:19:1e:f8:83:31:b3:
99:f6:2c:9c:31:5e:57:3f:56:e0:25:19:7e:36:30:
49:2e:a9:e2:d0:1f:84:ee:98:a3:d6:5c:67:30:4e:
a9:63:9b:c2:f7:0c:06:6a:9f:df:6d:77:a6:f3:ab:
27:92:66:0c:4d:21:95:02:7d:7e:b6:84:98:7b:ac:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:57:8E:F6:E1:2B:93:FC:9A:C8:71:74:56:0A:BC:AE:89:34:C6:1E
X509v3 Authority Key Identifier:
keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/0CC86DF4FB5311F09CD98C1F476F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.84.45.0-103.84.47.255
Signature Algorithm: sha256WithRSAEncryption
84:33:8d:7b:bf:48:88:3b:b1:cd:6d:61:aa:bc:bf:37:f6:d4:
2e:f3:f9:47:ca:2d:45:5b:2b:61:41:3e:2f:b6:5c:76:30:88:
f3:65:bf:8d:84:f9:c7:46:18:73:29:0b:f3:35:5b:11:b2:4d:
97:07:c2:85:ec:05:a7:0f:da:6e:7d:1a:d4:04:99:74:66:b3:
44:27:aa:c5:8e:8b:65:2e:6c:cf:98:54:d3:79:67:14:0b:59:
0d:94:97:b9:f7:49:7c:ed:2b:6a:22:2c:34:1a:ac:b5:8f:7f:
ee:34:42:d7:84:04:97:67:c2:4c:df:35:a8:cf:91:0f:46:d5:
7b:fa:d7:8a:38:8c:d7:22:6d:68:d8:37:55:36:84:5a:2e:1e:
ef:69:56:26:15:fb:83:b2:5d:47:6a:13:95:2e:f7:d4:f4:e3:
c2:b4:28:46:25:14:0e:af:92:a3:52:5d:91:ec:6d:4b:75:9e:
24:ad:e2:80:d7:f2:23:b1:c9:6c:62:b3:8a:56:ef:a6:99:05:
ba:c8:63:5f:ee:f9:01:af:76:47:1d:ee:61:fb:d0:66:14:84:
33:00:dd:84:eb:a8:d4:ca:7d:de:40:d8:41:e0:5a:0b:fb:d9:
cf:db:c2:4a:d8:84:d1:62:5f:50:3d:9f:ea:7a:6c:f6:46:ce:
37:8f:a1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:21 2026 by rpki-client