
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/C1CAF6C602B311EAABAF727DC4F9AE02.roa
File: C1CAF6C602B311EAABAF727DC4F9AE02.roa (raw, json)
Hash identifier: 36cWWUlsjm/g+gszjb3Mn/XvCTbSn8VYsKkqBFvVpdM=
Subject key identifier: 26:35:D1:32:0B:35:88:76:25:50:B1:C2:88:AA:D2:A2:41:43:51:C6
Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9
Certificate serial: 0D20
Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/C1CAF6C602B311EAABAF727DC4F9AE02.roa
Signing time: Tue 12 May 2026 18:22:44 +0000
ROA not before: Tue 12 May 2026 18:22:44 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 139085
IP address blocks: 103.139.132.0/23 maxlen: 23
103.139.132.0/24 maxlen: 24
103.139.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl
rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3360 (0xd20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9
Validity
Not Before: May 12 18:22:44 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a036ff3-e795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:38:c4:86:76:1f:c4:8b:2f:56:62:3a:0a:ca:
70:8d:ab:be:fd:ed:f1:f8:ff:5c:a7:dd:92:b5:a9:
7a:1b:8a:78:37:b6:7f:57:88:62:4b:d1:40:da:82:
11:95:3c:a2:4e:8a:68:cd:9b:97:54:9f:d7:0c:f8:
92:a7:4a:60:66:cd:07:9b:62:49:9b:fd:13:24:ef:
3f:85:01:b8:fe:d2:71:f3:a9:93:05:99:a2:a2:b4:
5e:40:23:8b:ac:af:1d:50:16:ca:e4:04:db:eb:21:
a1:0e:60:44:c0:20:d5:46:2d:de:9d:77:f6:cd:84:
9d:3e:c5:3e:25:c9:eb:87:42:5f:2f:0b:35:b2:0e:
51:ce:2e:0b:e6:d2:09:0b:fb:e3:26:3d:df:23:a9:
e0:0e:68:9f:7a:49:d3:ed:12:34:fa:85:4d:e2:14:
91:a0:15:91:28:af:c6:1b:aa:c6:10:86:5d:33:59:
4d:88:f6:30:81:18:1c:a0:08:cb:56:13:23:eb:b8:
dd:81:6b:e8:d9:fa:aa:1f:d8:06:02:92:40:01:7c:
cf:be:d5:a7:45:9b:4d:c4:c5:57:de:98:3b:55:23:
7c:b2:f3:d7:a6:ef:99:f0:bf:a7:77:4d:e4:af:ba:
23:11:3e:ce:e7:5e:df:88:53:de:95:75:52:9c:61:
9b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:35:D1:32:0B:35:88:76:25:50:B1:C2:88:AA:D2:A2:41:43:51:C6
X509v3 Authority Key Identifier:
keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/C1CAF6C602B311EAABAF727DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.139.132.0/23
Signature Algorithm: sha256WithRSAEncryption
08:7e:f3:9d:b5:ec:29:c6:3e:be:a0:34:06:11:45:d4:9c:38:
d6:01:45:d8:a9:c5:04:55:59:05:74:8a:a6:9a:42:4e:f8:1f:
52:44:3e:e6:5c:94:f6:70:b6:06:ea:4a:03:9b:f6:8a:1b:cd:
79:2f:3b:e0:d2:31:16:da:e5:c5:d6:9e:ab:82:5f:86:01:21:
10:62:61:ca:eb:e8:6c:6c:59:d7:ee:29:2f:43:33:8b:8b:9b:
95:c0:98:fe:71:1b:91:85:e8:8b:67:a2:45:30:1b:08:fd:34:
9a:5f:4c:de:5b:75:24:30:63:d3:58:d2:07:37:a8:78:5f:87:
2c:9e:66:57:5b:1f:dc:84:7b:0c:07:db:cc:3b:64:dd:fd:5a:
31:cc:b3:4b:86:52:2b:98:fe:dc:2e:45:bc:dc:e6:03:2c:c7:
6c:11:e9:1a:72:c6:c7:97:33:2a:55:85:6e:c8:fb:ca:1c:6c:
3c:1c:d3:d8:d7:76:9e:97:b1:ab:dd:cb:1a:73:55:29:bb:38:
2a:9e:47:2b:cf:e8:69:d4:fd:32:3a:e5:01:eb:6d:6d:d2:ed:
87:64:03:38:7a:22:a8:37:10:07:3b:ce:3d:d4:ca:8e:22:5f:
e7:6d:05:81:64:c4:2d:09:66:e3:11:4d:53:e1:55:5f:f6:b2:
4a:58:32:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:33 2026 by rpki-client