
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/BA7E6B1A30B911EC974C3830C4F9AE02.roa
File: BA7E6B1A30B911EC974C3830C4F9AE02.roa (raw, json)
Hash identifier: xxqSemGox4kEl/WxL9eirDeCZylY2NkVCa0+GT9iexI=
Subject key identifier: 33:D9:60:5E:1B:66:61:80:E2:65:81:F0:B0:5E:2F:20:19:52:3C:2B
Certificate issuer: /CN=A91C8790/serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352
Certificate serial: 058E
Authority key identifier: E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/BA7E6B1A30B911EC974C3830C4F9AE02.roa
Signing time: Thu 23 Jul 2026 00:25:23 +0000
ROA not before: Thu 23 Jul 2026 00:25:23 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 45753
IP address blocks: 103.117.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl
rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1422 (0x58e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8790, serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352
Validity
Not Before: Jul 23 00:25:23 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a615f73-f6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:be:3a:73:d2:b9:56:64:69:9b:5d:95:8f:
32:bb:0c:4b:16:cc:28:bb:35:98:74:87:9a:4d:98:
98:f2:f9:c9:d9:4c:d9:57:08:1e:c7:67:27:72:7f:
e4:a7:eb:0c:b6:da:55:5b:da:57:80:33:fa:16:f9:
31:96:db:29:53:7a:5f:fc:f3:c2:af:56:f3:b7:96:
d3:15:5b:e3:09:ed:42:93:a0:ef:5e:fe:86:49:e3:
ef:e8:2e:4b:8b:36:34:c5:87:2c:fb:84:b2:9a:48:
56:b5:41:ed:9d:45:2a:34:2e:9b:37:be:ab:66:50:
0e:56:46:b2:20:b4:fa:4c:85:1c:0d:20:83:f7:1c:
c6:bb:5b:9c:3d:1c:74:12:38:bb:d0:76:37:e6:e5:
c0:88:6f:29:cb:73:bc:30:3c:97:1b:33:e4:a5:3d:
e6:ac:44:24:71:06:f5:4e:99:c9:a6:27:b5:13:d4:
0a:89:ce:15:7c:59:af:5e:41:9c:68:38:d9:32:c1:
a6:e2:f3:34:48:c8:d1:ff:19:9e:b5:b1:a8:3b:c5:
94:4e:86:cb:70:c4:a3:5e:3e:c7:3a:25:21:58:b5:
12:63:bc:9c:5f:09:15:75:34:34:04:d8:5e:f1:45:
b5:77:e5:c2:7d:f3:f5:f3:e7:d9:70:12:a9:a2:b2:
df:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D9:60:5E:1B:66:61:80:E2:65:81:F0:B0:5E:2F:20:19:52:3C:2B
X509v3 Authority Key Identifier:
keyid:E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/BA7E6B1A30B911EC974C3830C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:bd:86:02:7b:6d:ca:0f:6a:03:18:74:c6:6e:93:e0:9d:51:
6e:db:a7:28:94:53:30:e9:e3:f3:4d:ca:f4:28:9e:e4:72:42:
65:f6:a9:1f:91:b4:00:81:ff:02:28:4d:a8:d1:b5:22:b6:9d:
b7:15:22:d8:8d:cc:03:eb:3f:20:67:c2:eb:a7:a6:4c:69:6c:
ce:6c:64:96:1b:0e:8f:1b:6b:a4:03:d5:af:b4:5d:eb:ba:f7:
2a:bf:b0:9f:fe:70:9d:e3:22:ae:78:3c:67:3c:60:0b:d4:2c:
b0:c1:b8:fd:03:6f:4d:2a:a8:cb:88:7e:a0:4a:83:a0:83:31:
21:da:b6:b8:ae:00:91:97:14:63:bc:52:eb:83:e5:41:59:59:
36:93:8c:26:0c:26:81:9d:90:0d:1b:83:2c:9a:19:f6:a3:28:
f1:51:3b:38:b1:86:c0:a2:7c:60:30:d8:e7:32:54:60:ae:e5:
dc:43:d6:b8:0d:49:7e:7a:c8:39:d3:5b:d7:1d:cd:59:78:ee:
de:b6:d6:da:4c:bd:57:46:9d:47:76:19:74:19:82:c1:83:e6:
d0:33:3e:bf:52:16:0c:c1:73:87:ab:f1:c7:fe:9a:3d:bf:f3:
f8:69:ce:0e:12:2c:7c:19:2f:8b:9e:0f:0f:fd:7c:3d:4e:6a:
87:3e:67:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:18:36 2026 by rpki-client