
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/86550F680B4311EE8ABEE820C4F9AE02.roa
File: 86550F680B4311EE8ABEE820C4F9AE02.roa (raw, json)
Hash identifier: l7DTtvHxD8US5fD+QSxEm5H3PVvZjXTvGP27QgToQ+E=
Subject key identifier: 16:CA:FA:74:FC:59:E2:26:02:B9:6C:4B:F0:4A:CB:DB:4A:29:A4:A2
Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Certificate serial: 048B
Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/86550F680B4311EE8ABEE820C4F9AE02.roa
Signing time: Wed 13 May 2026 00:30:30 +0000
ROA not before: Wed 13 May 2026 00:30:30 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 140630
IP address blocks: 103.84.44.0/24 maxlen: 24
103.84.45.0/24 maxlen: 24
103.84.46.0/24 maxlen: 24
103.84.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1163 (0x48b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Validity
Not Before: May 13 00:30:30 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a03c626-c0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:22:a4:cb:de:86:7f:46:e1:a1:09:79:a3:
82:3a:35:3e:47:b5:74:54:2b:af:ef:de:c4:9a:91:
5f:05:f8:61:4f:b3:c2:1a:d3:42:55:81:f7:1a:73:
a4:dd:dd:03:18:24:c3:9e:33:02:f3:53:e3:7c:33:
ce:43:b3:22:9e:8b:fc:c2:48:e5:15:90:8a:48:a0:
20:62:70:60:c6:d3:3f:60:cc:b0:67:6b:bc:90:c0:
f2:40:bc:4d:f3:8f:57:7e:de:ce:fd:bd:e5:71:d6:
66:97:b9:95:cc:e2:b2:cd:50:b1:08:b0:44:93:fa:
f6:ea:8f:5b:bf:24:2d:a4:11:85:ba:de:2a:93:ff:
fc:b7:03:65:20:6a:f2:0d:64:dc:b5:e0:6e:d6:bb:
d4:4d:a2:1f:e9:ed:69:20:9b:81:2d:3d:dc:19:56:
58:59:ce:84:e1:01:ae:8f:ea:c0:97:77:32:a5:ee:
1c:9e:e0:e9:7c:46:9c:08:6f:9e:eb:95:7e:14:c8:
b0:cc:eb:e1:c0:e2:04:90:4c:20:4f:05:50:e2:38:
a5:a7:1d:86:48:e6:49:b0:ca:0b:5c:93:6c:ae:8d:
d0:e2:89:d0:0d:77:b2:a1:98:97:0c:0b:72:80:4d:
4f:2a:e6:8c:6f:2e:06:b8:92:b2:58:5b:c3:1b:45:
ac:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CA:FA:74:FC:59:E2:26:02:B9:6C:4B:F0:4A:CB:DB:4A:29:A4:A2
X509v3 Authority Key Identifier:
keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/86550F680B4311EE8ABEE820C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.84.44.0/22
Signature Algorithm: sha256WithRSAEncryption
73:99:d2:b4:03:a7:eb:85:f8:af:4a:26:2b:e1:ee:47:08:99:
83:21:43:69:dc:7a:26:50:de:96:67:d3:03:a5:c2:f4:78:58:
6e:c8:81:f7:8e:be:7a:76:cf:58:a4:3c:0d:86:d4:90:d7:30:
b9:d6:e6:c6:85:03:5b:11:cb:21:1a:13:86:43:68:5f:6d:cb:
22:11:a7:db:30:f1:62:35:68:13:88:75:09:f6:fa:5b:5c:86:
73:40:80:b7:9a:54:69:b1:38:e6:f8:ec:3a:68:27:fa:aa:59:
cc:e1:68:90:84:aa:dc:c5:a6:b6:f6:7f:1b:a2:b1:71:78:40:
5b:67:22:0a:96:0a:17:2f:d4:22:5c:53:bf:10:43:d8:73:4c:
1f:26:1c:79:49:94:d9:94:3a:c5:d7:fb:b6:27:ea:35:c0:41:
2f:6f:84:a9:66:20:e7:23:0a:ff:dc:31:2a:43:ab:f0:b2:bc:
f7:25:36:69:8f:09:96:00:e2:a7:02:e4:e1:e9:98:68:9e:b2:
ee:96:cb:ed:f5:f0:cc:e4:20:b5:5b:99:50:48:19:04:99:f9:
ce:d7:27:43:e3:2c:05:9b:92:7c:a7:48:30:a1:39:f0:5e:58:
f7:c7:55:60:70:47:fb:27:17:fd:e6:6a:42:ec:54:d6:77:20:
f6:e6:e3:ff
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0
NjQ4Q0RFMzcwHhcNMjYwNTEzMDAzMDMwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTAzYzYyNi1jMGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1/wipMvehn9G4aEJeaOCOjU+R7V0VCuv797EmpFfBfhhT7PCGtNCVYH3GnOk
3d0DGCTDnjMC81PjfDPOQ7Minov8wkjlFZCKSKAgYnBgxtM/YMywZ2u8kMDyQLxN
849Xft7O/b3lcdZml7mVzOKyzVCxCLBEk/r26o9bvyQtpBGFut4qk//8twNlIGry
DWTcteBu1rvUTaIf6e1pIJuBLT3cGVZYWc6E4QGuj+rAl3cype4cnuDpfEacCG+e
65V+FMiwzOvhwOIEkEwgTwVQ4jilpx2GSOZJsMoLXJNsro3Q4onQDXeyoZiXDAty
gE1PKuaMby4GuJKyWFvDG0WsqwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBbK+nT8
WeImArlsS/BKy9tKKaSiMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB
OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z
amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzYzQTYvMEQzOUM0RTQ5QTlCMTFFQzgyQzcwQjIwQzRGOUFFMDIvODY1NTBGNjgw
QjQzMTFFRThBQkVFODIwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ1QsMA0GCSqGSIb3DQEBCwUAA4IBAQBzmdK0A6frhfivSiYr4e5H
CJmDIUNp3HomUN6WZ9MDpcL0eFhuyIH3jr56ds9YpDwNhtSQ1zC51ubGhQNbEcsh
GhOGQ2hfbcsiEafbMPFiNWgTiHUJ9vpbXIZzQIC3mlRpsTjm+Ow6aCf6qlnM4WiQ
hKrcxaa29n8borFxeEBbZyIKlgoXL9QiXFO/EEPYc0wfJhx5SZTZlDrF1/u2J+o1
wEEvb4SpZiDnIwr/3DEqQ6vwsrz3JTZpjwmWAOKnAuTh6ZhonrLulsvt9fDM5CC1
W5lQSBkEmfnO1ydD4ywFm5J8p0gwoTnwXlj3x1VgcEf7Jxf95mpC7FTWdyD25uP/
-----END CERTIFICATE-----
Generated at Wed May 13 06:24:29 2026 by rpki-client