
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/2173FE4EC0A611ECB6A6996CC4F9AE02.roa
File: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (raw, json)
Hash identifier: acpBj/fZ/lNO+jE72RL9W85WiLHEc7BOknabYLCBTPc=
Subject key identifier: 4B:BF:1D:BA:21:1D:E2:4A:B5:D4:FB:8D:42:DB:D2:E2:87:06:34:E9
Certificate issuer: /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
Certificate serial: 0402
Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/2173FE4EC0A611ECB6A6996CC4F9AE02.roa
Signing time: Fri 05 Jun 2026 01:29:36 +0000
ROA not before: Fri 05 Jun 2026 01:29:36 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 139846
IP address blocks: 103.186.144.0/23 maxlen: 23
103.186.144.0/24 maxlen: 24
103.186.145.0/24 maxlen: 24
2400:71e0::/32 maxlen: 32
2400:71e0::/36 maxlen: 36
2400:71e0:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl
rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1026 (0x402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
Validity
Not Before: Jun 5 01:29:36 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a222680-bc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:9b:f2:cd:69:b8:b2:3a:0c:52:88:d8:5a:
a6:a3:c1:12:ee:42:ab:ac:ba:19:45:8b:8c:86:54:
62:ad:33:24:8f:1f:1f:fd:be:c9:1b:e4:6a:07:ea:
5f:5b:ae:8f:2f:7a:9f:e1:05:9b:7d:fb:46:1f:df:
a4:eb:6e:fb:03:90:7c:89:3f:78:35:ac:ef:be:f3:
e9:8f:1a:90:ef:f8:55:7e:a1:8a:4e:1b:b3:c8:3b:
8e:60:19:9b:a9:79:c2:a5:a0:55:00:bd:2e:61:47:
f8:ac:29:33:b8:99:e8:c2:0a:bf:eb:c1:61:78:dc:
44:75:a3:79:7b:49:05:5e:ef:8a:97:c3:ed:7d:35:
fb:9f:ed:ad:6e:03:05:0b:f4:c2:3d:92:a4:8f:ca:
86:f6:36:7d:49:44:fa:6a:1d:86:49:76:b6:2c:f9:
e6:03:ea:2c:9c:7b:03:7a:69:56:8a:1d:59:dc:4a:
3c:53:bb:d2:24:cd:e8:ff:e1:65:b4:7c:62:08:d4:
71:91:3b:86:cc:11:6c:a3:76:8c:6c:cc:cb:47:6b:
16:15:44:c0:97:49:41:31:d0:f1:73:0c:d1:ed:f2:
16:e6:a6:b1:8c:84:66:97:6e:57:0d:76:d1:b4:dc:
6b:e1:eb:51:bf:68:47:15:e1:a4:ee:a5:6e:d9:95:
d7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BF:1D:BA:21:1D:E2:4A:B5:D4:FB:8D:42:DB:D2:E2:87:06:34:E9
X509v3 Authority Key Identifier:
keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/2173FE4EC0A611ECB6A6996CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.144.0/23
IPv6:
2400:71e0::/32
Signature Algorithm: sha256WithRSAEncryption
92:a4:25:27:3c:5b:a1:8b:8a:65:f5:86:98:08:b1:fd:28:a6:
96:ad:36:65:9a:38:df:da:39:fe:02:db:f7:44:21:ec:e1:31:
10:0b:61:2d:1b:47:31:09:69:5d:94:81:7b:f3:d8:6f:6e:6e:
b1:7a:a7:46:bb:e7:5f:50:74:44:9a:34:c8:29:23:51:7b:9d:
2a:24:3d:38:1b:65:9e:c3:79:fa:f1:6b:7e:60:c8:e6:ba:2f:
fd:ca:33:8b:fb:f9:d5:91:53:43:2b:9e:ee:a0:53:78:d5:03:
83:12:64:15:ca:03:41:00:bd:56:3b:fd:a9:4e:94:f9:dd:c5:
c5:2e:b1:7e:04:70:80:99:50:15:8d:a8:dc:92:2a:96:eb:da:
3a:09:7c:9c:93:cf:03:ca:9a:97:9a:26:aa:62:de:18:68:69:
87:cd:e6:9c:60:fc:c0:86:3a:f8:ca:c9:f0:30:6b:10:7e:db:
af:a4:e2:c9:2b:f7:f1:25:5c:91:7c:2a:fd:f3:5c:9b:31:ca:
f8:e6:80:43:7e:75:9f:2a:f3:10:d7:63:67:0c:0d:bf:3b:8a:
2f:3d:c6:05:05:88:c1:d9:75:0e:4d:80:88:4d:8b:77:8b:3f:
eb:98:47:d4:d5:d0:b2:87:21:2c:a5:f8:e5:8d:61:d8:8f:12:
42:b9:00:08
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICBAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc5OEExMTAvBgNVBAUTKEY2MzRDMEIxMkMxOTc4QUYzRTg5MEM1MjhGQzcyQzhG
NzQ3REI5ODAwHhcNMjYwNjA1MDEyOTM2WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIyMjY4MC1iYzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArNyb8s1puLI6DFKI2Fqmo8ES7kKrrLoZRYuMhlRirTMkjx8f/b7JG+RqB+pf
W66PL3qf4QWbfftGH9+k6277A5B8iT94NazvvvPpjxqQ7/hVfqGKThuzyDuOYBmb
qXnCpaBVAL0uYUf4rCkzuJnowgq/68FheNxEdaN5e0kFXu+Kl8PtfTX7n+2tbgMF
C/TCPZKkj8qG9jZ9SUT6ah2GSXa2LPnmA+osnHsDemlWih1Z3Eo8U7vSJM3o/+Fl
tHxiCNRxkTuGzBFso3aMbMzLR2sWFUTAl0lBMdDxcwzR7fIW5qaxjIRml25XDXbR
tNxr4etRv2hHFeGk7qVu2ZXXzwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEu/Hboh
HeJKtdT7jULb0uKHBjTpMB8GA1UdIwQYMBaAFPY0wLEsGXivPokMUo/HLI90fbmA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk4QS9DRjVGRDZCOEMw
QTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVLOC1pUXhTajhjc2ozUjl1
WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlqVEFzU3daZUs4LWlReFNqOGNzajNSOXVZQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qzc5OEEvQ0Y1RkQ2QjhDMEExMTFFQzhBRTI0NTI4QzRGOUFFMDIvMjE3M0ZFNEVD
MEE2MTFFQ0I2QTY5OTZDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ7qQMA0EAgACMAcDBQAkAHHgMA0GCSqGSIb3DQEBCwUAA4IBAQCS
pCUnPFuhi4pl9YaYCLH9KKaWrTZlmjjf2jn+Atv3RCHs4TEQC2EtG0cxCWldlIF7
89hvbm6xeqdGu+dfUHREmjTIKSNRe50qJD04G2Wew3n68Wt+YMjmui/9yjOL+/nV
kVNDK57uoFN41QODEmQVygNBAL1WO/2pTpT53cXFLrF+BHCAmVAVjajckiqW69o6
CXyck88DypqXmiaqYt4YaGmHzeacYPzAhjr4ysnwMGsQftuvpOLJK/fxJVyRfCr9
81ybMcr45oBDfnWfKvMQ12NnDA2/O4ovPcYFBYjB2XUOTYCITYt3iz/rmEfU1dCy
hyEspfjljWHYjxJCuQAI
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:21 2026 by rpki-client